Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/323830333a3332303a3a2f33322d3332203d3e20323636373130.roa
File:                     323830333a3332303a3a2f33322d3332203d3e20323636373130.roa (raw, json)
Hash identifier:          T29cjvfLtH6zn9MuSPuRAnJ2ZibwKpzy5Bxrn+HZk8w=
Subject key identifier:   0C:F2:B3:50:3C:B2:A0:8D:EC:D0:83:3F:BE:43:DF:D6:3D:2A:88:70
Certificate issuer:       /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
Certificate serial:       27B7DB1EF159CE4FD95DD6BADDCD7466472E35CE
Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/323830333a3332303a3a2f33322d3332203d3e20323636373130.roa
Signing time:             Thu 07 Mar 2024 12:15:00 +0000
ROA not before:           Thu 07 Mar 2024 12:10:00 +0000
ROA not after:            Thu 06 Mar 2025 12:15:00 +0000
asID:                     266710
IP address blocks:        2803:320::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b7:db:1e:f1:59:ce:4f:d9:5d:d6:ba:dd:cd:74:66:47:2e:35:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
        Validity
            Not Before: Mar  7 12:10:00 2024 GMT
            Not After : Mar  6 12:15:00 2025 GMT
        Subject: CN=0CF2B3503CB2A08DECD0833FBE43DFD63D2A8870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:d4:41:c7:76:3a:26:2d:76:cb:06:7c:f6:
                    f1:7e:c6:df:bc:52:4f:7d:2f:ab:3b:70:1b:31:c9:
                    9f:99:c7:9f:1b:cb:cb:bb:7b:d0:02:6c:11:e7:42:
                    94:49:84:b0:25:09:65:51:01:22:6c:5d:2b:af:ff:
                    b6:02:8f:d1:99:5b:63:21:91:94:de:e2:b7:37:95:
                    09:9e:e8:98:12:1b:74:41:fb:69:8e:03:38:02:60:
                    1a:f9:06:54:33:63:07:ab:bb:c4:d0:e2:a7:d0:19:
                    ac:d4:14:1c:80:33:85:25:4b:ca:7a:c2:3e:d3:45:
                    81:69:0a:46:67:1f:05:10:fd:b9:12:f5:11:1d:67:
                    dd:6f:3c:55:3a:7f:22:e0:1f:8d:3c:71:5d:34:d8:
                    09:eb:99:17:e6:d1:26:f1:05:9d:b4:cb:2b:d1:23:
                    09:cd:b2:36:d0:57:c4:2a:00:88:1f:16:61:03:bc:
                    2d:a5:3e:9c:ec:82:ce:51:eb:f8:a7:67:fb:24:da:
                    f1:53:24:50:66:a2:79:fe:18:fc:1a:e5:6c:38:f9:
                    fb:74:32:c9:44:98:0f:05:8d:e4:5e:26:59:7c:59:
                    83:4d:7c:37:10:e3:31:af:65:aa:48:a4:f2:42:56:
                    ad:fd:be:5b:bd:bd:bb:23:9d:aa:55:be:4b:90:8f:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F2:B3:50:3C:B2:A0:8D:EC:D0:83:3F:BE:43:DF:D6:3D:2A:88:70
            X509v3 Authority Key Identifier:
                keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/323830333a3332303a3a2f33322d3332203d3e20323636373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:320::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:54:64:01:81:49:20:92:9d:de:6d:78:80:3f:09:01:5c:f1:
         66:99:95:ad:0d:a1:15:39:fc:bb:1d:c9:51:71:77:c1:7f:f9:
         bb:e9:90:78:f1:29:fa:d0:fa:f5:24:1d:42:51:99:2b:17:d6:
         57:df:24:9d:ce:c9:2d:46:35:34:18:02:03:1e:5e:8b:5b:2f:
         c2:14:99:6f:8b:65:9a:9a:43:12:49:29:7b:a3:3b:e2:82:fc:
         03:7e:e7:e1:b5:5e:2f:17:bf:53:08:00:ec:ad:8e:e2:06:c0:
         5d:96:ae:85:98:d2:a2:6f:58:fe:6b:45:f9:95:d8:14:b7:b6:
         c0:e7:43:b2:66:8f:6a:d9:3f:69:47:5f:8c:7b:44:dc:bc:da:
         33:6f:bf:a6:73:56:6d:e3:6b:b9:62:86:00:ef:72:ec:5d:2d:
         69:8d:25:c0:c8:27:59:f9:06:a6:2f:e6:5e:32:fa:b0:45:59:
         6c:0a:25:49:1b:3f:6b:af:c7:a2:35:ef:5c:20:41:74:a6:16:
         16:1b:cb:cb:41:75:71:07:5e:59:54:37:2a:34:47:64:f4:b4:
         3e:16:cc:42:49:ec:05:ac:29:38:1b:94:b4:b2:2d:a4:28:12:
         95:f9:ca:88:6d:17:d8:ec:75:8b:20:78:5a:c2:0e:d7:24:c6:
         29:ba:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----