Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/323830333a616130303a3a2f33322d3332203d3e203237363539.roa
File:                     323830333a616130303a3a2f33322d3332203d3e203237363539.roa (raw, json)
Hash identifier:          UhEOmenfSZeUFAkR0U7pNNN8a8CV0DJ1fvJ1o9WxMtU=
Subject key identifier:   C6:49:65:65:6A:BD:73:F1:5E:BE:CB:6A:66:82:0F:11:69:FA:F0:39
Certificate issuer:       /CN=8D2583CCB91894057397D5D0034AC586BBE52555
Certificate serial:       662C18BC70C831C8F745F41BC6A27DA60C0C1A46
Authority key identifier: 8D:25:83:CC:B9:18:94:05:73:97:D5:D0:03:4A:C5:86:BB:E5:25:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D2583CCB91894057397D5D0034AC586BBE52555.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/323830333a616130303a3a2f33322d3332203d3e203237363539.roa
Signing time:             Tue 05 Mar 2024 18:19:44 +0000
ROA not before:           Tue 05 Mar 2024 18:14:44 +0000
ROA not after:            Tue 04 Mar 2025 18:19:44 +0000
asID:                     27659
IP address blocks:        2803:aa00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2c:18:bc:70:c8:31:c8:f7:45:f4:1b:c6:a2:7d:a6:0c:0c:1a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2583CCB91894057397D5D0034AC586BBE52555
        Validity
            Not Before: Mar  5 18:14:44 2024 GMT
            Not After : Mar  4 18:19:44 2025 GMT
        Subject: CN=C64965656ABD73F15EBECB6A66820F1169FAF039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:d9:5b:e4:27:c4:62:9c:a9:58:a2:2d:b7:
                    b3:a5:f7:cf:cb:d9:e4:e5:9a:70:d4:2c:52:82:48:
                    6d:bb:58:ac:d5:8a:68:c5:c6:d0:ae:5a:b4:9d:7b:
                    30:6d:76:3d:3b:03:9b:48:e6:af:2f:6b:81:75:39:
                    2e:9c:8d:c1:75:05:d4:c2:16:91:d8:f5:cc:67:ab:
                    60:af:33:93:f1:e6:f8:03:6a:77:6b:31:a7:58:26:
                    9f:b1:76:0b:8b:4b:ed:f8:10:29:14:48:32:54:b6:
                    5c:31:48:5e:e8:4c:37:fa:0e:c0:38:49:2f:86:ed:
                    38:f7:d4:6b:b0:68:e1:5a:7a:1e:60:b6:ce:40:cc:
                    79:7c:73:25:17:07:64:d8:64:03:b4:0d:e7:d8:b1:
                    a5:79:51:15:e5:23:89:58:c9:13:fe:68:3b:e4:76:
                    78:89:84:0f:6b:03:d4:03:32:04:76:e0:d0:12:98:
                    e2:ec:d4:c7:f3:fd:2d:37:15:4f:a5:0e:9f:61:ef:
                    db:e2:f0:26:69:e0:ba:af:3d:1b:18:3e:bc:1a:c1:
                    a3:ae:c2:1b:c6:38:0e:a4:eb:4b:fa:76:ef:c7:4d:
                    44:c7:05:8c:d1:31:a4:99:7a:43:92:5c:d6:37:44:
                    b3:32:94:32:3d:72:92:d0:78:3e:c3:d5:44:58:c6:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:49:65:65:6A:BD:73:F1:5E:BE:CB:6A:66:82:0F:11:69:FA:F0:39
            X509v3 Authority Key Identifier:
                keyid:8D:25:83:CC:B9:18:94:05:73:97:D5:D0:03:4A:C5:86:BB:E5:25:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/8D2583CCB91894057397D5D0034AC586BBE52555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D2583CCB91894057397D5D0034AC586BBE52555.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/323830333a616130303a3a2f33322d3332203d3e203237363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:1e:27:62:b2:db:31:9b:b6:a0:ab:d1:c9:8c:31:f4:19:03:
         8a:63:1b:4a:55:70:50:3d:c7:73:16:d1:6e:36:d0:c9:e1:49:
         ae:13:d6:41:d1:54:dd:91:8b:29:69:4a:9a:f0:7b:fb:c7:80:
         23:3c:5e:59:6c:a3:d4:ed:a9:ec:27:75:0e:a6:bb:40:59:6e:
         fc:ec:97:68:b9:c4:76:98:c8:99:9c:5e:2d:99:06:16:7a:25:
         e5:77:9d:e0:81:f1:bd:e1:20:72:13:3d:cc:a5:c3:49:4f:cb:
         a7:ec:04:8c:1f:74:0a:ff:bc:18:cd:ff:ca:89:4d:2e:83:6a:
         28:6e:2c:5e:70:5e:7d:de:63:26:ac:a0:c5:45:2b:96:72:01:
         53:35:d9:63:2b:5c:79:f3:f4:d1:65:bf:61:0d:33:a0:b1:ae:
         b2:c2:cf:e4:10:53:3f:e8:4a:3b:c6:8c:a9:bd:85:35:74:8c:
         07:70:4d:7e:d7:29:4f:ef:b9:64:82:df:58:f5:e3:61:aa:d4:
         57:d2:3c:b4:0b:db:57:74:10:59:38:63:d8:f3:30:11:ed:90:
         be:55:1c:10:3f:e1:59:a5:30:70:b3:0f:e9:60:e6:96:51:b6:
         86:9d:2c:2a:9d:34:bf:60:05:0c:75:60:95:7f:7f:87:c6:d9:
         6c:0b:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----