Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/323830333a663832303a3a2f33322d3634203d3e203237393937.roa
File:                     323830333a663832303a3a2f33322d3634203d3e203237393937.roa (raw, json)
Hash identifier:          l9a95oeUJGuiophdBaq4p9neBX0pmYrHFZ8kF/M7C/U=
Subject key identifier:   D6:53:08:98:21:AB:81:DC:2F:C2:6F:03:D8:0F:DD:5E:66:7F:AF:18
Certificate issuer:       /CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
Certificate serial:       114CA469536D46674A411E43B3E31B0686697916
Authority key identifier: ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/323830333a663832303a3a2f33322d3634203d3e203237393937.roa
Signing time:             Tue 05 Mar 2024 17:58:55 +0000
ROA not before:           Tue 05 Mar 2024 17:53:55 +0000
ROA not after:            Tue 04 Mar 2025 17:58:55 +0000
asID:                     27997
IP address blocks:        2803:f820::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4c:a4:69:53:6d:46:67:4a:41:1e:43:b3:e3:1b:06:86:69:79:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58
        Validity
            Not Before: Mar  5 17:53:55 2024 GMT
            Not After : Mar  4 17:58:55 2025 GMT
        Subject: CN=D653089821AB81DC2FC26F03D80FDD5E667FAF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:22:8c:49:93:4a:59:97:3c:e2:34:8e:f6:
                    b2:d6:c7:8b:19:dc:91:d9:ba:ed:31:63:f7:87:82:
                    95:0e:85:ba:26:48:67:cd:84:68:c0:3b:31:6b:15:
                    63:f4:73:5c:81:3b:01:f4:33:39:d9:bc:28:c1:95:
                    97:3e:3a:72:e7:57:06:65:2c:53:14:7f:79:64:09:
                    d2:fb:55:42:7d:43:59:98:33:26:00:05:88:83:53:
                    88:41:94:00:f2:0e:47:4d:b6:9e:26:16:99:ba:35:
                    94:4c:77:0f:63:0d:d0:26:5e:d1:e6:7d:10:54:46:
                    79:26:15:eb:a5:aa:c7:80:00:2d:1a:33:24:6a:6e:
                    47:06:f2:0b:eb:e8:cd:f5:a1:b9:66:e6:87:ee:80:
                    08:3d:3a:35:03:7a:68:b0:41:63:37:b5:b8:09:06:
                    82:f7:27:e9:77:33:4e:8c:a2:91:a7:70:6f:d8:df:
                    9b:d4:2d:d8:09:c9:2f:8e:0b:48:7f:cd:73:ee:08:
                    5a:7d:b4:b4:06:ba:4f:18:88:dc:4c:65:8b:03:8a:
                    99:31:31:b2:8d:ce:08:5b:4b:6d:5d:f3:34:b3:25:
                    3a:12:2a:17:9c:1a:05:67:b2:42:ac:e9:b2:25:16:
                    22:76:c5:69:28:8f:d6:2b:48:67:0a:2c:bc:e1:8e:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:53:08:98:21:AB:81:DC:2F:C2:6F:03:D8:0F:DD:5E:66:7F:AF:18
            X509v3 Authority Key Identifier:
                keyid:ED:37:2A:CD:EF:B1:DA:2C:35:BD:C9:B7:F4:E8:1F:4E:D8:57:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED372ACDEFB1DA2C35BDC9B7F4E81F4ED857EB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5731F0F4A6C326F5122CACD4C64755CE1ABD90445C675B265F73814AE2A937A9/0/323830333a663832303a3a2f33322d3634203d3e203237393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f820::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:50:0a:6d:44:72:29:6a:13:9a:fc:9b:a6:df:f2:aa:b9:
         cf:bf:b9:ff:25:22:7b:cd:e7:d3:7d:c4:c3:bd:ba:fc:13:b2:
         d7:13:a3:1f:2e:77:22:e5:1f:cb:b0:c3:7e:df:ce:51:10:d3:
         19:ab:b1:e1:f1:0c:cc:47:95:25:7f:65:11:dd:b5:cc:bc:6c:
         ad:5f:65:14:48:4e:3f:df:67:5b:16:ca:3d:76:1c:7e:2b:ff:
         e7:35:b2:fb:05:79:d5:f2:aa:6d:cc:e3:e9:a3:3d:10:e9:ae:
         9f:a2:f1:d1:6e:43:d9:ef:af:01:16:7c:5f:a5:2d:c4:c5:17:
         2c:a5:6d:04:c4:d3:2e:f7:04:91:c6:67:01:ce:6e:ef:a9:4b:
         ab:f0:08:8c:3a:a9:d1:e1:7a:cd:17:4d:ab:01:1e:b0:9f:0f:
         da:11:df:b7:b9:5c:b1:df:8c:6e:3c:49:9c:16:70:19:d4:c2:
         be:b0:58:0d:6e:51:17:70:b2:8b:d8:c7:82:17:88:df:2d:35:
         74:20:25:33:02:df:3d:7d:d4:b0:6a:d6:2c:44:22:90:c5:6b:
         5b:2c:c1:a3:ea:7e:b0:f7:84:0e:6b:83:3c:31:cb:e9:93:40:
         f5:d8:c4:75:c5:85:d0:d9:c8:90:a5:c0:5c:56:83:0b:84:01:
         3f:01:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----