Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/323830333a316530303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a316530303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          kRwZrBoCT9E+YY9IfLqQLDlIkQKBjuINirB3XAgoEGs=
Subject key identifier:   80:1F:75:35:A7:75:3E:97:1B:A6:95:97:FD:00:22:0D:02:DE:FE:34
Certificate issuer:       /CN=0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE
Certificate serial:       2A31669D62130375FDF0271FDB212CC3A440DDFE
Authority key identifier: 0E:D6:B6:73:F8:63:9E:1B:FA:76:C3:D0:C7:C8:6D:57:5A:E0:F0:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/323830333a316530303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:01:09 +0000
ROA not before:           Tue 05 Mar 2024 17:56:09 +0000
ROA not after:            Tue 04 Mar 2025 18:01:09 +0000
asID:                     52468
IP address blocks:        2803:1e00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:31:66:9d:62:13:03:75:fd:f0:27:1f:db:21:2c:c3:a4:40:dd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE
        Validity
            Not Before: Mar  5 17:56:09 2024 GMT
            Not After : Mar  4 18:01:09 2025 GMT
        Subject: CN=801F7535A7753E971BA69597FD00220D02DEFE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:6e:99:c5:b6:9c:76:ce:f2:97:2f:2f:22:
                    92:8f:19:da:ff:38:95:34:28:ab:da:79:74:22:11:
                    07:cb:b4:39:e4:ec:0f:b5:b3:78:b5:c2:5b:88:4d:
                    13:4f:0f:13:bd:5a:e7:9e:7f:d2:9e:8b:d3:dd:01:
                    00:9c:98:67:a7:fc:59:19:b7:c1:d2:85:eb:3f:81:
                    59:c6:0d:52:ae:9a:6c:04:41:dc:53:5e:12:ed:44:
                    c1:6b:88:39:b2:9d:75:f9:b2:92:d5:bd:f7:b2:c1:
                    cd:4d:58:9a:2b:7f:6c:e1:ca:85:5b:8d:53:32:d5:
                    b0:9d:db:e3:ae:71:4c:8f:80:56:92:7d:a2:8e:57:
                    84:e1:12:5e:4e:ee:97:05:c1:c9:0e:c2:79:61:ca:
                    17:84:70:34:88:a7:96:91:a2:2b:92:03:1b:56:12:
                    2d:4f:d3:d7:9e:bd:1f:dd:79:f9:65:e6:a5:b8:9d:
                    52:ef:2b:e1:c1:11:63:72:f0:88:34:0f:5c:96:cd:
                    74:4e:c5:a4:30:9c:50:48:59:a8:f7:d6:da:00:77:
                    ef:a3:2e:05:85:09:d6:25:dc:a7:e4:d3:b6:50:b4:
                    ef:91:fc:58:3c:53:cc:25:17:7c:45:d0:5f:a5:1a:
                    b3:89:78:6c:59:f6:85:a6:a6:e3:84:f8:64:26:06:
                    f9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1F:75:35:A7:75:3E:97:1B:A6:95:97:FD:00:22:0D:02:DE:FE:34
            X509v3 Authority Key Identifier:
                keyid:0E:D6:B6:73:F8:63:9E:1B:FA:76:C3:D0:C7:C8:6D:57:5A:E0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/323830333a316530303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:e4:e9:b1:ba:27:2c:b6:07:cf:9a:94:dc:d5:af:ac:f6:a8:
         b8:a1:98:a3:a7:5b:cd:74:f2:18:5a:67:ad:97:42:70:00:87:
         1d:b6:40:b4:96:1b:83:0e:cd:6a:a8:ee:2c:02:3b:8c:8c:12:
         54:c9:96:65:86:f7:5a:e2:76:d2:15:8b:df:c5:ba:12:72:2a:
         21:e0:44:f4:1d:78:3b:7b:7d:4c:8d:b1:b3:45:89:14:f1:72:
         80:ef:03:1b:7b:32:1d:b4:28:5f:bb:1b:a5:76:da:24:22:79:
         1f:ab:e1:29:c3:42:64:2d:87:8c:af:bd:a1:80:b9:73:90:4d:
         40:10:40:47:0b:49:47:34:bc:ce:5e:eb:8f:44:f7:48:22:80:
         ca:bf:38:a2:3d:53:c3:05:d7:6e:e5:2a:f4:45:ba:71:25:fd:
         b6:41:68:c6:07:ac:91:9f:9f:6c:f9:ed:bb:52:5f:ef:fb:e4:
         f9:4d:ac:9c:80:ec:ff:f4:28:e2:b8:7c:ea:3c:d9:69:8f:64:
         43:e9:73:51:bc:63:ed:24:55:0b:e1:68:3b:a7:ff:74:7b:ca:
         09:2b:43:d2:41:a9:55:15:07:33:23:01:b2:9e:f8:6c:10:8b:
         06:af:71:00:cf:8b:41:41:75:4a:ad:0f:1b:26:40:66:62:5e:
         a6:4e:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----