Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/323830333a616631303a3a2f33322d3332203d3e20323732313232.roa
File:                     323830333a616631303a3a2f33322d3332203d3e20323732313232.roa (raw, json)
Hash identifier:          dZjDwhqqP2QzrCZ7qT36U6xtrsau4c9MDcPxeNkysyk=
Subject key identifier:   75:48:FE:0A:9C:38:0C:A0:33:1F:9C:72:01:57:82:2D:06:77:C1:CE
Certificate issuer:       /CN=864255909469F50CE15FE2F07B617FAAD2741BE0
Certificate serial:       2D252D45CFF9242596DE325087D039794B983CDA
Authority key identifier: 86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/323830333a616631303a3a2f33322d3332203d3e20323732313232.roa
Signing time:             Wed 10 Apr 2024 23:20:00 +0000
ROA not before:           Wed 10 Apr 2024 23:15:00 +0000
ROA not after:            Wed 09 Apr 2025 23:20:00 +0000
asID:                     272122
IP address blocks:        2803:af10::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:25:2d:45:cf:f9:24:25:96:de:32:50:87:d0:39:79:4b:98:3c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864255909469F50CE15FE2F07B617FAAD2741BE0
        Validity
            Not Before: Apr 10 23:15:00 2024 GMT
            Not After : Apr  9 23:20:00 2025 GMT
        Subject: CN=7548FE0A9C380CA0331F9C720157822D0677C1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:c0:8f:d3:9e:e2:c3:5a:bd:1a:f3:ce:24:
                    68:96:e7:dc:24:52:3c:ef:14:43:c7:c7:e4:c5:e8:
                    d8:6f:c5:e3:c5:33:3e:7d:fd:81:2d:99:90:56:88:
                    f2:b6:7e:d3:cc:09:f3:22:8e:4d:5b:a5:71:e7:05:
                    7a:20:a0:8d:a3:19:e6:84:de:ea:61:d1:3f:1b:cc:
                    3a:2f:16:8a:07:88:7d:88:1a:8c:3f:e0:b0:63:77:
                    f7:65:fa:61:a3:d6:44:40:ad:82:6e:12:d5:b9:12:
                    5f:6c:49:f0:9f:08:4f:b3:f6:af:3e:fa:3e:25:99:
                    a8:93:7f:b0:4f:97:b5:7d:d1:ab:ac:88:a1:7c:5f:
                    c3:43:a6:9b:83:c7:e8:bf:0c:c4:84:0e:ba:38:24:
                    2e:63:26:e3:9d:92:b5:bf:26:8f:18:8e:63:7c:77:
                    73:d2:3e:73:78:90:01:c2:16:38:5a:86:fe:fc:c2:
                    41:32:10:6f:d8:78:bb:fd:46:9c:48:67:ad:ae:fb:
                    7c:c1:53:db:0f:e6:23:06:d1:66:54:fe:c9:c1:e6:
                    46:b8:f8:ef:4a:35:0f:78:8c:4b:ab:8d:91:3d:0d:
                    62:78:1c:b1:f3:54:df:51:29:ab:da:b8:44:23:e0:
                    e7:b7:78:a4:8e:92:dd:63:a3:8b:ec:ad:cb:49:b0:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:48:FE:0A:9C:38:0C:A0:33:1F:9C:72:01:57:82:2D:06:77:C1:CE
            X509v3 Authority Key Identifier:
                keyid:86:42:55:90:94:69:F5:0C:E1:5F:E2:F0:7B:61:7F:AA:D2:74:1B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/864255909469F50CE15FE2F07B617FAAD2741BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/864255909469F50CE15FE2F07B617FAAD2741BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235BF1930CA7A013E41C8BAB60B937C8C10264303A2938BBF4BCC4B1F99CBB0C/0/323830333a616631303a3a2f33322d3332203d3e20323732313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af10::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:8b:87:61:b5:d0:d7:87:9d:14:8c:7a:9d:d6:19:40:c0:9c:
         c2:7e:c9:49:ee:5f:9a:ff:05:bb:5a:2f:f0:4e:08:07:40:db:
         25:49:f5:49:7b:39:c0:b3:e7:5c:13:94:38:ec:2b:55:f2:2f:
         e0:db:8d:54:f9:9f:ef:2b:00:49:9d:ca:f0:d7:bb:06:e5:3a:
         62:67:7d:56:5c:38:83:97:a3:20:ee:72:f8:ae:6d:79:70:5c:
         80:52:d7:58:fc:63:24:ec:9e:27:dc:32:f5:83:64:02:56:21:
         bd:d9:b8:75:c5:e9:fc:90:07:17:09:e7:c7:f1:a7:a4:6c:c3:
         59:2e:6f:5c:06:93:d7:83:7e:f4:bd:2e:4b:50:23:43:ec:97:
         70:67:1d:ba:59:6a:9d:16:d4:d8:a9:3a:6e:60:28:1c:28:f4:
         27:17:54:f4:99:3c:dd:56:9d:a6:f5:9a:0e:74:f3:d0:d6:d6:
         a1:3b:72:d0:3a:0f:d8:03:5e:f9:de:ec:80:9a:80:c5:45:38:
         86:ab:ca:f3:f8:e4:26:98:b2:88:7c:4e:4b:96:99:05:bb:02:
         da:b3:62:02:e3:80:07:28:70:bd:b0:3b:53:f2:cb:aa:d8:7f:
         8d:6f:77:ad:f9:e7:db:7c:e1:c7:a3:e8:76:c5:e1:e5:57:33:
         c8:36:6f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----