Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/323830333a343138303a3a2f33322d3430203d3e20323633323338.roa
File:                     323830333a343138303a3a2f33322d3430203d3e20323633323338.roa (raw, json)
Hash identifier:          QWWymZM+TBijXvB030gud4VuogUthNDiOQSIzb3KPE0=
Subject key identifier:   CC:97:77:0A:32:A8:B9:11:08:EE:D3:E1:75:6B:68:CB:81:58:16:4A
Certificate issuer:       /CN=59733F5876DFD9F28DCAA69B8752B844D0C39173
Certificate serial:       2DDA051F018F37DB70B5631365E0BFD927F0D2DA
Authority key identifier: 59:73:3F:58:76:DF:D9:F2:8D:CA:A6:9B:87:52:B8:44:D0:C3:91:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/323830333a343138303a3a2f33322d3430203d3e20323633323338.roa
Signing time:             Tue 05 Mar 2024 17:58:57 +0000
ROA not before:           Tue 05 Mar 2024 17:53:57 +0000
ROA not after:            Tue 04 Mar 2025 17:58:57 +0000
asID:                     263238
IP address blocks:        2803:4180::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:da:05:1f:01:8f:37:db:70:b5:63:13:65:e0:bf:d9:27:f0:d2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59733F5876DFD9F28DCAA69B8752B844D0C39173
        Validity
            Not Before: Mar  5 17:53:57 2024 GMT
            Not After : Mar  4 17:58:57 2025 GMT
        Subject: CN=CC97770A32A8B91108EED3E1756B68CB8158164A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:e8:55:31:e8:56:11:0e:14:2e:06:54:e3:
                    e6:31:e7:46:d0:13:d1:b5:17:5e:38:06:54:d8:8b:
                    5d:6d:ac:1f:9c:cf:2a:57:0e:08:85:c3:34:d5:6c:
                    1a:f5:4d:ee:b6:91:43:45:be:7c:2f:e4:17:ec:87:
                    db:98:a2:3f:35:27:65:66:39:66:77:9e:4d:42:f6:
                    b9:a4:94:81:e7:c6:e4:32:a7:2a:b7:73:54:9b:3c:
                    39:1f:cb:e3:8d:18:f4:69:c6:eb:0d:33:4b:ee:c2:
                    e0:63:e1:6d:23:80:e5:72:86:48:36:e9:73:e1:b8:
                    74:e1:63:c8:c9:d9:37:d3:1b:bf:36:28:7e:da:02:
                    02:9b:6f:f8:34:4f:02:40:cb:3a:2c:eb:9b:33:5f:
                    69:57:87:21:36:28:91:2e:fc:cb:9d:dd:65:4c:26:
                    81:56:27:d1:97:89:bb:67:0f:ba:c0:dd:a8:42:2d:
                    c6:ec:f0:7b:19:f4:45:13:31:ba:02:d3:26:24:20:
                    24:6d:97:b4:10:21:2d:5a:79:94:33:8a:f1:84:fe:
                    fe:69:2e:ca:04:44:c0:29:5b:0f:41:35:ad:6f:fa:
                    21:e9:b8:ba:5b:7d:b3:8c:2e:4b:63:10:c1:54:af:
                    90:b4:b2:61:fa:25:16:bc:37:cd:a1:74:34:e9:62:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:97:77:0A:32:A8:B9:11:08:EE:D3:E1:75:6B:68:CB:81:58:16:4A
            X509v3 Authority Key Identifier:
                keyid:59:73:3F:58:76:DF:D9:F2:8D:CA:A6:9B:87:52:B8:44:D0:C3:91:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59733F5876DFD9F28DCAA69B8752B844D0C39173.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F85986DA8CDF7ECB900C687ED2D78B60D557263C06CEF787BE89EE732DFA96/0/323830333a343138303a3a2f33322d3430203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4180::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:e1:d3:5a:72:cb:3d:6c:eb:d6:91:d2:76:55:2b:e9:34:f2:
         d0:68:e2:65:d8:05:71:8a:14:4e:e2:07:5a:8c:18:10:f2:2c:
         90:dd:d4:8c:5f:ca:4a:56:a1:67:d7:7a:ee:8d:61:1c:39:00:
         fb:6b:f1:19:9c:69:8e:c5:c6:1d:1f:d0:0e:12:15:57:e5:13:
         a3:5e:9f:d2:c3:2e:bb:f6:b2:3a:7a:bc:17:94:ef:eb:3b:ff:
         59:5a:a2:eb:45:a2:ca:4f:7c:26:0b:65:f8:90:7a:48:58:14:
         b0:ab:74:1a:10:85:e7:2b:dd:fa:51:1e:e7:f7:1a:4b:ee:3a:
         6a:9a:3b:3d:c2:1f:8f:9b:59:1a:be:d2:0f:7a:ca:32:a7:40:
         0a:81:ad:14:bb:bd:02:31:9d:00:79:c7:21:2b:7c:16:f0:2c:
         a1:6a:f2:d2:b9:11:64:4c:41:59:ff:9b:85:3c:7a:e6:77:35:
         58:a5:d2:b8:a1:b0:d7:c8:c8:29:b5:5f:7e:58:36:36:86:b5:
         92:18:c7:99:1b:44:69:1a:88:70:3c:2f:b8:c5:1e:e5:d9:9d:
         64:3f:48:9b:fe:b1:66:bd:b3:8d:6f:aa:46:87:c0:08:9d:55:
         cf:f4:70:d6:42:35:c8:54:47:97:3a:6c:5b:41:5c:7f:b0:9f:
         4f:e6:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----