Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/323830333a623839303a3a2f33322d3332203d3e20323732383130.roa
File:                     323830333a623839303a3a2f33322d3332203d3e20323732383130.roa (raw, json)
Hash identifier:          nb+rrSi6koAsZmxplbXQIyFC+bGLn6z4yWOqlG/q02c=
Subject key identifier:   46:EB:06:84:0B:C2:C7:AA:02:C7:1A:98:84:A7:A7:4E:5E:F6:B7:38
Certificate issuer:       /CN=5B867361525607203EC4E746C6F22CC6EB34BE67
Certificate serial:       0304693553778B7E9840487E49DCC84C7D8B5D7C
Authority key identifier: 5B:86:73:61:52:56:07:20:3E:C4:E7:46:C6:F2:2C:C6:EB:34:BE:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/323830333a623839303a3a2f33322d3332203d3e20323732383130.roa
Signing time:             Tue 05 Mar 2024 18:05:23 +0000
ROA not before:           Tue 05 Mar 2024 18:00:23 +0000
ROA not after:            Tue 04 Mar 2025 18:05:23 +0000
asID:                     272810
IP address blocks:        2803:b890::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:04:69:35:53:77:8b:7e:98:40:48:7e:49:dc:c8:4c:7d:8b:5d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B867361525607203EC4E746C6F22CC6EB34BE67
        Validity
            Not Before: Mar  5 18:00:23 2024 GMT
            Not After : Mar  4 18:05:23 2025 GMT
        Subject: CN=46EB06840BC2C7AA02C71A9884A7A74E5EF6B738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:b5:94:70:1e:4a:9a:1d:9e:54:47:6b:bc:
                    b5:ee:44:32:bf:92:e4:b0:fa:ca:d4:52:da:f9:65:
                    05:ff:be:a2:e7:b9:e7:1f:02:f7:5f:b9:b7:dd:8d:
                    6f:4c:aa:db:88:07:f5:9d:53:26:ce:57:b6:5a:7a:
                    a1:41:fb:18:06:0a:4d:a4:f3:5f:40:f8:43:33:98:
                    a8:ea:6c:49:38:af:e7:86:7f:6e:17:09:1e:e4:15:
                    c7:3c:7e:fa:8d:8d:32:4f:d4:fc:3d:01:43:53:17:
                    e3:95:39:97:d1:7e:93:84:3f:c5:d6:68:c1:22:51:
                    2b:19:57:dd:47:a7:31:be:35:97:8e:c7:e3:85:af:
                    ce:4d:45:5c:61:91:e8:bb:d6:7f:24:e6:b3:b6:be:
                    26:39:84:9a:8c:9e:87:08:d8:3d:85:89:16:32:75:
                    5b:a9:53:c8:bf:60:62:43:57:b7:3a:1c:13:11:8d:
                    a3:02:a0:d4:e8:53:28:70:23:ef:9b:1d:07:c2:f5:
                    c7:d0:bc:d8:77:f7:e7:0c:e4:e1:95:2e:b6:67:ab:
                    19:b1:49:2a:51:7a:e9:b3:c2:eb:ba:fa:12:3c:39:
                    c8:75:70:54:8f:35:e7:5b:cd:03:ab:10:99:55:ed:
                    c5:b8:61:f7:13:0d:92:bd:49:c0:53:2d:b5:30:03:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EB:06:84:0B:C2:C7:AA:02:C7:1A:98:84:A7:A7:4E:5E:F6:B7:38
            X509v3 Authority Key Identifier:
                keyid:5B:86:73:61:52:56:07:20:3E:C4:E7:46:C6:F2:2C:C6:EB:34:BE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/323830333a623839303a3a2f33322d3332203d3e20323732383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b890::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:ee:99:d3:6a:ef:cc:ab:3d:a1:b6:c7:2f:1f:f3:f5:59:4d:
         95:86:ad:92:67:4e:cb:4b:ce:39:aa:3c:e8:3d:74:0e:bb:be:
         f2:6c:df:d0:cf:32:d4:3c:1d:40:83:91:07:c8:bc:1f:9a:4f:
         fe:81:db:6d:32:e7:ff:00:46:64:9c:da:15:7a:71:eb:1b:5f:
         ed:62:aa:aa:f8:43:b4:4a:bb:7e:e0:f2:b5:ac:56:b4:c5:fe:
         90:9f:46:15:ca:d0:bf:56:8b:e6:fb:ba:f1:81:b5:17:f9:b0:
         17:cd:74:3a:b4:01:05:fd:7c:ee:71:ce:20:d6:07:ad:99:4d:
         b2:e8:81:01:92:d8:7e:68:99:16:29:3f:6e:33:54:a3:d9:79:
         00:9b:2c:91:9a:4b:8d:26:37:7f:0e:99:a2:08:41:63:2e:e6:
         25:5e:9b:fd:48:e6:b7:ba:e0:78:1d:e4:78:f1:a1:97:86:60:
         07:ef:18:17:de:a4:1a:61:36:97:fc:6c:01:c5:af:dc:34:29:
         91:fd:b7:37:94:4a:5f:65:49:74:c5:03:c2:1d:60:6e:30:2a:
         eb:ca:8e:09:04:01:e0:40:d3:0a:1d:70:0c:ad:6b:78:f6:14:
         a0:f1:9d:67:0a:0e:71:2d:1d:54:c0:6f:f7:89:9e:89:28:21:
         36:8d:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----