Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/323830333a346630303a3a2f33322d3332203d3e203532323835.roa
File:                     323830333a346630303a3a2f33322d3332203d3e203532323835.roa (raw, json)
Hash identifier:          c5yYfuJjBgciOIXrvs1Ne6zHEpyeVUGh+kTfwOOQhCY=
Subject key identifier:   0F:09:7D:EC:C1:86:2C:56:EE:E6:92:38:65:7B:01:BC:94:3A:9B:8B
Certificate issuer:       /CN=B64FACE36B310C0C008A1D26B030764FFFE873D3
Certificate serial:       3CB1AC8B246380F3F9C1855349D57F285D94FDBE
Authority key identifier: B6:4F:AC:E3:6B:31:0C:0C:00:8A:1D:26:B0:30:76:4F:FF:E8:73:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/323830333a346630303a3a2f33322d3332203d3e203532323835.roa
Signing time:             Tue 05 Mar 2024 17:50:59 +0000
ROA not before:           Tue 05 Mar 2024 17:45:59 +0000
ROA not after:            Tue 04 Mar 2025 17:50:59 +0000
asID:                     52285
IP address blocks:        2803:4f00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b1:ac:8b:24:63:80:f3:f9:c1:85:53:49:d5:7f:28:5d:94:fd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64FACE36B310C0C008A1D26B030764FFFE873D3
        Validity
            Not Before: Mar  5 17:45:59 2024 GMT
            Not After : Mar  4 17:50:59 2025 GMT
        Subject: CN=0F097DECC1862C56EEE69238657B01BC943A9B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:df:9b:05:e7:37:66:c7:d1:ba:21:5d:91:
                    44:82:6a:a1:c6:15:c5:19:17:8e:e3:07:cb:08:28:
                    e5:ca:cb:5e:d0:31:05:d6:6c:96:5c:3c:af:aa:17:
                    40:0f:74:02:25:86:df:67:1b:d0:b7:3a:73:4d:78:
                    3b:06:15:a3:59:3c:c5:b1:82:62:5a:a0:66:74:58:
                    61:ee:99:4c:70:71:e7:b5:5c:47:af:06:32:ec:3f:
                    28:e1:af:23:6f:b5:c0:9b:aa:79:2c:30:9a:bc:f5:
                    9a:0d:64:21:cb:95:15:bb:0e:08:5a:75:97:b3:2e:
                    9b:29:6d:09:ae:6c:ea:16:d1:1d:6f:30:23:9f:f5:
                    56:36:a0:34:62:5c:fd:16:27:9a:97:31:64:07:b9:
                    85:b0:8b:61:2e:64:e7:af:70:9c:21:7f:d8:0d:7e:
                    ec:06:66:b7:50:c6:f1:95:51:01:55:fc:20:3b:9a:
                    08:8f:b7:ca:52:4f:9b:8e:52:3f:98:b5:94:ef:ef:
                    95:10:cd:8c:b1:74:54:b9:7a:ca:4a:8b:67:7a:45:
                    08:27:36:17:53:89:e3:e2:65:18:cf:b9:48:d3:37:
                    1f:05:89:6f:fc:87:f1:13:49:75:e7:a0:4b:af:e1:
                    0b:44:76:4e:3e:62:79:28:80:d8:0d:ae:09:4f:7b:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:7D:EC:C1:86:2C:56:EE:E6:92:38:65:7B:01:BC:94:3A:9B:8B
            X509v3 Authority Key Identifier:
                keyid:B6:4F:AC:E3:6B:31:0C:0C:00:8A:1D:26:B0:30:76:4F:FF:E8:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64FACE36B310C0C008A1D26B030764FFFE873D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48125150636B4BD2D0808A84637A0BA9F400E50E7065C83D25D5750A28EAF6BE/0/323830333a346630303a3a2f33322d3332203d3e203532323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:45:57:cf:9b:73:66:a4:56:26:96:9c:c3:55:e1:6f:e2:01:
         5c:33:b2:ba:6b:41:40:f4:cc:86:7e:d8:48:30:e2:37:6c:f1:
         c2:9e:5e:1c:d8:0d:36:80:64:95:47:7f:72:64:53:61:25:b7:
         14:ee:31:fa:38:19:6d:c9:73:00:e2:f3:da:1a:b8:a5:fd:8b:
         bb:cc:c7:34:4e:8c:c0:d6:99:86:a0:5c:7b:5b:67:5b:fb:24:
         26:49:ea:0f:ec:51:5f:5e:bf:5c:22:a7:0f:38:b2:58:b1:10:
         da:e8:99:ab:a9:d7:fd:5e:d3:d7:f0:9a:07:d4:10:c6:ea:fa:
         84:5c:dc:31:bb:4b:28:c3:7b:b3:59:64:5d:1e:95:e4:34:48:
         ee:f8:ea:4e:79:24:83:78:60:e9:7b:cd:44:04:17:3c:d5:ed:
         05:43:53:33:31:d5:17:1a:87:00:45:7c:16:fd:a2:14:53:01:
         be:70:be:d0:33:75:08:ed:aa:27:e2:30:d1:2f:97:6e:2f:a2:
         d9:ec:18:08:91:ad:83:81:44:a8:e3:f2:f4:60:7c:e7:de:7d:
         26:46:62:19:fd:d7:12:a6:85:f1:d4:4a:d8:9b:75:a3:fd:ac:
         4b:d9:e7:b9:70:5d:e5:6c:ef:70:80:1c:a7:a4:aa:d4:0a:c5:
         2f:44:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----