Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/323830333a653465303a3a2f33322d3332203d3e20323639383930.roa
File:                     323830333a653465303a3a2f33322d3332203d3e20323639383930.roa (raw, json)
Hash identifier:          Oo/Rd3psVOnUGScDmklSrcV0zcIh9LB4aYzaA2daAPI=
Subject key identifier:   83:90:FC:E5:49:F5:7C:88:AE:0D:6C:2D:EF:92:ED:D7:76:AB:B6:9F
Certificate issuer:       /CN=EE2AF6BD214244A36B40F5A96F06C91DF5169792
Certificate serial:       2111A7B5158B8EFEFFEAC80B765E27A847E31085
Authority key identifier: EE:2A:F6:BD:21:42:44:A3:6B:40:F5:A9:6F:06:C9:1D:F5:16:97:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/323830333a653465303a3a2f33322d3332203d3e20323639383930.roa
Signing time:             Tue 05 Mar 2024 18:06:39 +0000
ROA not before:           Tue 05 Mar 2024 18:01:39 +0000
ROA not after:            Tue 04 Mar 2025 18:06:39 +0000
asID:                     269890
IP address blocks:        2803:e4e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:11:a7:b5:15:8b:8e:fe:ff:ea:c8:0b:76:5e:27:a8:47:e3:10:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2AF6BD214244A36B40F5A96F06C91DF5169792
        Validity
            Not Before: Mar  5 18:01:39 2024 GMT
            Not After : Mar  4 18:06:39 2025 GMT
        Subject: CN=8390FCE549F57C88AE0D6C2DEF92EDD776ABB69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:b9:9f:43:78:86:cd:13:d8:07:68:ec:f9:
                    1a:e5:17:94:ac:53:df:db:e6:e7:51:e1:8b:68:6e:
                    c7:12:27:9e:e5:e8:aa:3d:5e:86:93:bf:71:01:9e:
                    cd:27:c5:cb:2e:ca:a0:7b:20:92:3e:c6:e7:b4:f9:
                    76:c2:03:88:26:71:dd:cf:f8:51:e5:e7:bf:de:bd:
                    37:05:be:d1:cf:9f:66:f3:1d:55:7b:0e:43:5c:e3:
                    29:09:49:05:22:61:03:06:1c:29:a8:45:41:ca:2f:
                    7a:76:28:a7:ba:dc:e6:ad:f0:50:4a:56:38:7c:76:
                    78:b5:e3:b0:44:33:c1:1d:d9:99:0d:1d:60:5a:47:
                    81:18:b7:61:a3:45:4d:f1:24:9e:f4:69:39:5b:9c:
                    df:f9:8d:52:34:48:4c:93:f9:a9:c9:1d:2d:93:eb:
                    b2:62:9b:81:84:d1:94:4f:2b:25:9a:0a:2d:50:98:
                    8f:d8:be:9a:da:00:4f:62:ae:98:7d:52:59:e9:f7:
                    5c:4c:8b:2f:c7:1a:74:35:a9:09:9a:42:b3:6a:21:
                    92:8f:e3:ea:a7:28:00:63:87:ae:a2:90:0c:1a:1c:
                    a3:29:e5:c2:b1:f1:6f:a5:d1:89:c7:61:3f:f6:e0:
                    4f:84:c1:f7:df:37:3b:e3:7d:45:87:f1:5a:ef:42:
                    e7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:90:FC:E5:49:F5:7C:88:AE:0D:6C:2D:EF:92:ED:D7:76:AB:B6:9F
            X509v3 Authority Key Identifier:
                keyid:EE:2A:F6:BD:21:42:44:A3:6B:40:F5:A9:6F:06:C9:1D:F5:16:97:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE2AF6BD214244A36B40F5A96F06C91DF5169792.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/593A0AC384B6524026144AF30E6CD0DEB1929BC9B633AB2D7A50789DDC57DE87/0/323830333a653465303a3a2f33322d3332203d3e20323639383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:94:6e:c8:41:a8:c6:96:8e:5a:93:c6:12:0e:9d:5c:92:9e:
         9b:7d:14:af:31:50:ec:cc:57:d9:43:62:9a:89:03:15:d1:7d:
         7d:c6:54:3b:72:c5:82:da:fa:8b:54:59:36:95:28:05:3a:cc:
         17:46:da:01:28:a8:ab:93:28:a2:76:36:59:1a:e9:d0:dc:1c:
         80:30:d0:06:8a:04:55:0a:b7:11:13:e0:a8:b8:bf:64:cb:a5:
         51:b9:a0:74:85:19:54:da:e8:55:d7:00:20:98:8b:03:68:c7:
         6e:77:a5:07:4a:f8:64:db:6c:42:64:7b:b6:19:00:b5:0d:ca:
         2b:07:73:db:e3:bc:89:95:03:44:a5:de:8d:81:6c:f7:ef:bb:
         4f:b1:6a:96:dd:f5:16:64:05:f9:cd:7c:23:a2:75:4a:8b:9d:
         99:d6:98:a8:a7:bb:24:38:89:d6:74:4d:75:b8:a9:b6:d9:32:
         a5:5c:20:3f:f1:fa:ba:6d:03:49:ae:1c:83:25:68:aa:e9:0a:
         b7:33:97:e6:35:92:4a:df:bb:c4:6e:b4:4b:a1:01:06:c3:a1:
         97:51:9c:a5:5f:0c:f4:71:43:0c:2e:65:62:e2:08:c9:14:fa:
         39:c0:58:51:da:53:47:00:6f:ff:81:6a:90:ba:4c:af:40:70:
         9d:93:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----