Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/323830333a383463303a3a2f33322d3332203d3e20323632313931.roa
File:                     323830333a383463303a3a2f33322d3332203d3e20323632313931.roa (raw, json)
Hash identifier:          VqEh+03VH4RorD2YsXNIIRuwPd6/wb74u9io70jAv5Y=
Subject key identifier:   4E:66:7A:3B:35:FD:8C:4A:9D:7D:F4:83:CC:71:98:2B:14:E3:B7:40
Certificate issuer:       /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial:       3349E44FEEB642A27EFFF446B1423AB51E8AEB3A
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/323830333a383463303a3a2f33322d3332203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 17:53:23 +0000
ROA not before:           Tue 05 Mar 2024 17:48:23 +0000
ROA not after:            Tue 04 Mar 2025 17:53:23 +0000
asID:                     262191
IP address blocks:        2803:84c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:49:e4:4f:ee:b6:42:a2:7e:ff:f4:46:b1:42:3a:b5:1e:8a:eb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
        Validity
            Not Before: Mar  5 17:48:23 2024 GMT
            Not After : Mar  4 17:53:23 2025 GMT
        Subject: CN=4E667A3B35FD8C4A9D7DF483CC71982B14E3B740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:e3:de:3e:65:77:f2:b2:97:36:c0:8a:00:
                    e4:dc:b3:35:9e:73:48:60:16:37:43:81:36:e5:3d:
                    ba:6a:c1:7f:26:ea:2f:f3:55:7c:98:74:21:e5:ca:
                    de:4a:7e:b3:82:02:a9:a4:7b:fb:16:a4:19:c2:1c:
                    82:3d:54:93:c3:de:61:6e:a3:87:4f:55:97:47:3d:
                    28:56:a3:db:d3:49:dc:57:86:61:3a:8a:6a:58:c6:
                    03:23:02:cb:5f:06:88:b8:89:38:3a:55:2b:a3:3f:
                    16:5f:ce:8c:5b:47:1d:d2:a7:9c:da:85:36:45:5f:
                    8e:02:5c:83:ea:c1:d0:1d:cf:37:a2:48:a4:82:d6:
                    8a:ae:96:00:71:6d:0f:8e:6e:77:2c:25:34:48:90:
                    b6:44:ac:06:85:57:8f:9a:6a:11:e1:93:c5:4f:34:
                    12:3e:e5:67:19:58:10:28:9f:22:e1:8d:a2:af:dc:
                    91:4e:41:ea:bc:36:9c:80:51:17:36:04:e9:97:16:
                    c8:72:b9:04:cf:b9:f3:b5:25:46:63:5b:b8:73:82:
                    65:38:24:91:ac:ab:f0:67:e7:2e:39:b9:be:93:87:
                    d1:90:0c:11:03:a5:21:37:3e:21:47:91:0f:9f:8a:
                    77:3a:29:dc:b9:c4:ab:58:29:2a:0d:96:f9:e2:fe:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:66:7A:3B:35:FD:8C:4A:9D:7D:F4:83:CC:71:98:2B:14:E3:B7:40
            X509v3 Authority Key Identifier:
                keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/323830333a383463303a3a2f33322d3332203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:84c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:99:7d:54:44:44:71:59:a9:91:7e:7c:df:71:91:e6:00:
         a8:28:ef:1e:69:d3:1b:f7:db:0b:cd:f9:24:e5:28:36:0f:74:
         c9:85:c3:4b:53:e5:72:7e:f7:a1:84:a1:b8:47:8b:ad:69:07:
         18:3e:50:18:2d:45:7b:d2:e9:8b:ee:17:7a:59:ce:73:cf:43:
         f1:6f:60:a3:fa:1e:04:50:93:c6:38:d2:14:48:79:b7:e8:f6:
         17:4b:95:20:ba:af:a7:87:81:73:6c:f2:34:ce:41:58:00:a2:
         ea:a3:8f:5f:36:b9:bd:e9:60:a9:5f:bb:5c:00:20:e0:56:86:
         e9:cf:31:13:0b:f8:1d:9a:80:c5:da:15:40:41:f2:72:bb:bc:
         48:43:3f:d6:3f:2d:25:81:1b:73:45:1d:ba:8c:db:85:e7:8f:
         78:3b:98:9a:51:11:4a:0e:7f:b1:86:0e:2f:5b:ef:cf:0d:75:
         80:bc:0e:fa:28:de:15:93:6a:49:bd:4e:69:41:b6:93:e8:bf:
         01:8a:a9:2e:be:bd:d5:d9:6a:45:36:e9:2a:7a:57:5e:1a:4e:
         36:70:a8:db:06:ee:8d:84:69:da:25:33:2c:00:59:e2:4b:c8:
         aa:c3:fe:99:ef:ab:b6:e7:52:aa:ed:58:22:a6:04:4e:37:f2:
         c0:08:ac:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----