Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/323830333a616463303a3a2f33322d3332203d3e20323635373232.roa
File:                     323830333a616463303a3a2f33322d3332203d3e20323635373232.roa (raw, json)
Hash identifier:          Mxc9CfeENxgY5mBIREgElR7tLILjz8lrJn+DsimJGFc=
Subject key identifier:   0E:EE:E5:14:C6:E5:40:B7:5D:D2:73:45:07:EA:B0:44:AB:B7:FD:67
Certificate issuer:       /CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
Certificate serial:       09E58CDEEA308BCF5ED6E39F72091E8033EE662A
Authority key identifier: FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/323830333a616463303a3a2f33322d3332203d3e20323635373232.roa
Signing time:             Sun 07 Jul 2024 20:00:00 +0000
ROA not before:           Sun 07 Jul 2024 19:55:00 +0000
ROA not after:            Sun 06 Jul 2025 20:00:00 +0000
asID:                     265722
IP address blocks:        2803:adc0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e5:8c:de:ea:30:8b:cf:5e:d6:e3:9f:72:09:1e:80:33:ee:66:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
        Validity
            Not Before: Jul  7 19:55:00 2024 GMT
            Not After : Jul  6 20:00:00 2025 GMT
        Subject: CN=0EEEE514C6E540B75DD2734507EAB044ABB7FD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ac:a1:de:69:fa:bf:25:0e:a1:15:1e:04:3a:
                    44:30:ae:2b:4d:4b:d9:a5:d4:68:c4:3e:23:4d:70:
                    b1:ff:ef:5e:24:d5:56:e8:22:ca:de:59:6a:b5:32:
                    05:cf:f3:cb:b9:ec:0e:fe:be:b1:9b:77:60:6c:f8:
                    91:16:49:5d:76:d4:fe:f9:0b:8e:32:5f:67:93:b1:
                    4f:fd:aa:54:68:14:f8:3b:4c:f2:6c:e6:80:25:86:
                    df:ba:a8:61:c3:5e:73:14:2b:93:d4:8b:10:20:ff:
                    90:53:25:46:29:c0:01:7d:d3:20:00:11:4f:7d:1b:
                    ae:63:b5:f2:c3:8c:ba:ab:0d:b9:fc:66:f6:d6:46:
                    5a:bd:0e:e1:66:ed:8d:8a:c5:56:d1:37:0e:3e:11:
                    ef:cd:bd:59:4f:b9:4c:3f:ff:0b:9d:69:c6:50:a3:
                    46:02:46:ee:a6:94:09:dd:a0:fb:37:cd:76:ef:3c:
                    64:15:c1:13:68:f2:8a:80:d9:0b:6f:37:0a:a0:bc:
                    09:dd:6b:35:7f:26:7a:8c:c4:75:fd:56:df:cd:3d:
                    1c:be:cc:6b:cf:f1:ce:fe:2f:04:9a:a2:c7:23:d4:
                    c9:57:3f:84:54:3e:b3:29:98:ef:43:20:55:46:2c:
                    0e:34:a0:ba:0d:4e:e8:70:8b:41:1f:93:59:52:9e:
                    48:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EE:E5:14:C6:E5:40:B7:5D:D2:73:45:07:EA:B0:44:AB:B7:FD:67
            X509v3 Authority Key Identifier:
                keyid:FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/323830333a616463303a3a2f33322d3332203d3e20323635373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:adc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:98:41:14:71:a8:8c:26:97:42:ef:4c:6f:4b:59:a1:d3:aa:
         92:e7:c2:25:ed:e2:56:2f:ad:4a:12:81:25:f4:eb:63:ce:bf:
         79:90:ef:2a:6a:07:dc:9d:86:d8:dc:76:58:e2:34:e4:14:ad:
         82:e9:70:de:59:81:9c:81:ab:63:cb:79:92:73:d1:49:93:99:
         d8:10:d7:51:d3:b2:26:8f:9f:2c:23:77:76:f1:d0:3c:17:fd:
         1e:c6:d2:b8:40:93:c7:35:3f:b2:d9:f4:70:6c:e6:aa:48:16:
         91:4f:09:f8:a1:45:63:e9:c3:9c:96:b5:a9:1d:8a:2e:55:bb:
         47:ac:54:db:e9:8d:b9:16:a9:94:83:24:05:d1:32:02:e9:46:
         d3:9a:8a:b7:b1:f8:a2:44:2b:c7:f6:bf:a7:f9:c6:e5:63:a5:
         01:50:fd:d9:a2:db:51:ef:ad:d2:bc:32:ef:7a:2b:c9:ea:17:
         c4:a4:eb:9a:16:97:10:3e:d9:57:17:52:c1:0d:57:1f:e8:73:
         f7:7d:df:c1:21:45:8f:2a:88:9b:ae:45:d7:ce:96:51:d7:04:
         27:63:0b:5d:78:60:ec:3e:38:64:bb:47:65:3d:67:d3:ba:5a:
         fd:44:b2:32:e4:fc:ab:e8:6a:00:52:74:a5:eb:a3:f4:e2:9f:
         67:e0:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----