Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/323830333a663961303a3a2f33322d3438203d3e20323637373334.roa
File:                     323830333a663961303a3a2f33322d3438203d3e20323637373334.roa (raw, json)
Hash identifier:          f2Fms7OeDch0EN7MmDnfDAffC6/1ZLcrRza5qkrLWEc=
Subject key identifier:   56:76:D6:5D:B2:13:5D:58:A7:81:DF:43:16:78:03:61:0C:E7:C0:75
Certificate issuer:       /CN=78DB9B853B894970FDA0B31FC3D80A965749E569
Certificate serial:       60D6054B0D61E40AE795E4125384A208E6FB12D1
Authority key identifier: 78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/323830333a663961303a3a2f33322d3438203d3e20323637373334.roa
Signing time:             Tue 05 Mar 2024 17:59:34 +0000
ROA not before:           Tue 05 Mar 2024 17:54:34 +0000
ROA not after:            Tue 04 Mar 2025 17:59:34 +0000
asID:                     267734
IP address blocks:        2803:f9a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d6:05:4b:0d:61:e4:0a:e7:95:e4:12:53:84:a2:08:e6:fb:12:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DB9B853B894970FDA0B31FC3D80A965749E569
        Validity
            Not Before: Mar  5 17:54:34 2024 GMT
            Not After : Mar  4 17:59:34 2025 GMT
        Subject: CN=5676D65DB2135D58A781DF43167803610CE7C075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b2:9d:f9:33:e9:f1:1d:bf:c2:d9:5e:e0:c5:
                    da:65:c1:36:b7:d5:c4:5e:6e:67:86:de:64:8a:2f:
                    29:1e:c3:70:52:14:29:1a:b7:64:10:1c:2f:7b:94:
                    e0:4e:41:67:82:e5:50:8c:4d:47:1f:69:e7:a1:c0:
                    42:68:c8:04:ff:6a:97:24:e3:fd:f0:5c:99:c4:65:
                    af:eb:3b:b6:63:48:00:8c:eb:71:84:bb:22:30:5c:
                    20:42:03:78:ca:56:c2:6d:6f:6c:1e:57:4e:37:b9:
                    4c:13:c5:fa:cb:2d:1e:ca:53:9c:3a:9b:3f:17:72:
                    46:0f:3e:6e:12:c1:73:e4:9c:99:53:57:fb:32:ad:
                    56:b3:49:ea:01:03:ad:20:32:92:1b:16:a7:9c:5d:
                    1c:3b:4b:43:c9:4b:ca:b7:ee:64:a3:71:ad:d7:49:
                    67:ae:1d:33:62:f7:14:58:89:e4:a0:7c:b6:c1:36:
                    bf:5a:52:bf:ee:23:8c:e0:43:89:84:d2:e5:ff:bc:
                    d2:4c:70:44:97:26:47:57:36:05:91:6b:95:79:f5:
                    db:39:3e:4b:94:de:7c:f6:06:ab:d8:c4:ef:45:61:
                    24:7e:40:4f:bb:1b:71:45:41:81:1d:25:2b:de:db:
                    97:80:e1:65:29:2b:3e:ba:a2:8c:17:f8:58:1f:2b:
                    0b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:76:D6:5D:B2:13:5D:58:A7:81:DF:43:16:78:03:61:0C:E7:C0:75
            X509v3 Authority Key Identifier:
                keyid:78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/323830333a663961303a3a2f33322d3438203d3e20323637373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:67:dc:93:4e:66:a9:39:ff:0c:6b:8a:a0:ea:a4:d6:ac:e0:
         ee:a7:d5:76:f3:22:de:56:98:9d:7a:97:03:a8:f8:6e:31:b6:
         ca:e3:dd:21:e7:97:6b:4f:6a:3c:85:83:c1:92:2e:24:55:b8:
         fa:b0:c6:86:d5:f2:5a:c7:29:d5:38:14:e6:fb:12:22:d9:e0:
         81:01:1c:45:ee:42:4b:e4:a9:16:df:8a:41:c1:de:c4:30:69:
         a3:91:34:cc:90:a5:4d:38:97:5c:bc:ce:f5:80:1e:5f:6a:d2:
         12:87:51:dc:01:55:50:24:ef:c6:0d:73:fb:a8:30:fc:eb:61:
         17:a8:4b:4a:98:27:95:2f:e6:8e:00:3d:21:27:10:7e:19:eb:
         87:ea:75:b2:c0:70:d9:fe:48:41:cd:8c:b9:89:8c:ee:2c:07:
         44:39:93:35:b4:bc:4a:a2:e6:d7:cc:15:c9:12:78:3f:be:08:
         6e:a8:b9:27:da:d8:f4:b5:56:b9:53:30:e1:a9:d1:4a:47:12:
         70:c9:08:ec:6e:83:1d:59:69:67:c9:4c:4d:d2:db:4c:a0:67:
         21:3d:91:fd:29:52:4d:b7:09:b3:6e:c9:9e:f1:9f:59:f2:0d:
         ca:79:66:e9:d4:4b:71:38:d3:c3:08:13:e2:03:ae:3c:ff:5c:
         dd:22:fc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----