Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/323830333a623663303a3a2f33322d3332203d3e20323635363539.roa
File:                     323830333a623663303a3a2f33322d3332203d3e20323635363539.roa (raw, json)
Hash identifier:          wbD8Oel95AfRnyapcUFbDFSeAbQ1lfsMQPqJHJwRp8g=
Subject key identifier:   B7:E5:2A:89:7D:C8:F3:D0:48:14:A3:0D:4F:68:2C:82:E5:DD:BC:93
Certificate issuer:       /CN=259C857FBBE3D174F02EFBE0681691812000149A
Certificate serial:       4B6339D1FC0BDCED3C76496A4175A26E3BB0E49E
Authority key identifier: 25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/323830333a623663303a3a2f33322d3332203d3e20323635363539.roa
Signing time:             Tue 05 Mar 2024 18:10:54 +0000
ROA not before:           Tue 05 Mar 2024 18:05:54 +0000
ROA not after:            Tue 04 Mar 2025 18:10:54 +0000
asID:                     265659
IP address blocks:        2803:b6c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:63:39:d1:fc:0b:dc:ed:3c:76:49:6a:41:75:a2:6e:3b:b0:e4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259C857FBBE3D174F02EFBE0681691812000149A
        Validity
            Not Before: Mar  5 18:05:54 2024 GMT
            Not After : Mar  4 18:10:54 2025 GMT
        Subject: CN=B7E52A897DC8F3D04814A30D4F682C82E5DDBC93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:25:91:7e:a1:dd:c6:6c:69:44:47:14:f6:
                    34:84:bc:e9:a9:d3:ce:bb:dc:34:21:e4:b8:dc:b3:
                    87:b4:b1:9f:fc:b2:67:db:4b:95:67:09:0e:91:e0:
                    58:64:03:61:e8:90:e0:5c:08:3c:7b:b5:7f:06:64:
                    ef:96:ff:25:99:9a:3a:d9:60:cc:16:53:95:1d:8d:
                    89:83:f8:19:75:3d:83:b6:75:55:2d:9b:f7:cc:a4:
                    f7:95:ad:8e:18:a7:08:ff:6a:95:3f:c1:5e:14:f0:
                    44:79:08:13:72:15:bc:19:79:0b:1b:c9:0a:96:c9:
                    55:b7:76:93:02:dd:f0:81:ec:35:f1:50:ba:52:1e:
                    d2:de:5d:c3:8b:30:44:1c:81:dc:20:b3:c9:79:71:
                    d8:2e:70:df:18:10:da:82:b3:7d:55:88:1d:50:38:
                    a1:a0:9d:24:bf:ab:c6:ee:df:79:71:7b:5a:e5:93:
                    9b:a8:33:de:98:2b:38:4d:55:bf:69:b5:7f:97:02:
                    54:67:2d:86:22:7f:5a:ce:da:4c:96:e9:68:90:ca:
                    ef:3d:af:ed:0b:5e:81:48:31:51:9a:36:20:c8:21:
                    96:fa:4b:0c:de:80:74:1f:0d:13:30:c1:85:0a:22:
                    9e:2a:25:f2:0e:0d:62:8e:b4:3e:18:6d:60:77:e3:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E5:2A:89:7D:C8:F3:D0:48:14:A3:0D:4F:68:2C:82:E5:DD:BC:93
            X509v3 Authority Key Identifier:
                keyid:25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/323830333a623663303a3a2f33322d3332203d3e20323635363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:d7:6d:1d:78:6e:c7:9a:eb:20:af:08:84:fe:51:b8:ca:
         f6:e7:0f:2f:d6:31:5b:0f:0f:e7:e0:fb:aa:48:b8:d4:ec:34:
         f3:ae:04:36:c3:98:0a:a8:26:83:98:7c:69:23:64:4f:1a:42:
         d8:bd:ea:11:12:c1:f8:94:90:30:42:55:fc:9f:65:2c:76:90:
         41:96:b9:4d:88:3e:77:48:e9:87:7a:c9:69:08:c1:7d:79:6d:
         21:67:3f:2c:fa:d6:ae:f8:5d:4e:dd:55:54:20:d7:95:dc:fd:
         39:4e:9f:d3:d9:f4:7a:fb:72:34:99:fd:2b:04:72:79:dc:4b:
         01:ac:e7:9c:a1:0c:f9:3c:f9:93:bc:f5:96:12:0c:e4:db:72:
         ae:06:07:a5:1f:10:32:59:40:76:97:d6:13:28:71:bb:cd:13:
         70:65:0a:cf:0c:a2:75:e0:74:32:ab:65:25:83:a0:e6:66:55:
         cb:db:0e:f5:e7:78:e4:bb:10:92:5c:c3:c5:66:73:fe:9e:38:
         d7:4f:ce:a2:d2:0f:d8:dd:03:48:94:b3:19:00:41:ca:8f:e3:
         ce:9e:8c:21:49:c4:0c:49:da:1c:7c:50:86:52:aa:cc:dd:67:
         55:7d:64:99:91:09:ae:23:94:c7:49:9c:6f:4c:72:89:22:a6:
         c1:3d:32:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----