Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/323830333a396638303a3a2f33322d3332203d3e20323633373335.roa
File:                     323830333a396638303a3a2f33322d3332203d3e20323633373335.roa (raw, json)
Hash identifier:          L10CqxryjzEKjhT2hii+50EvXBzStZlQJA1biNyrs9Q=
Subject key identifier:   87:B1:FA:9E:CA:3D:F5:76:2E:05:F5:EE:FC:C6:F4:79:D4:F6:D4:5A
Certificate issuer:       /CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
Certificate serial:       3726575787A1253CB98989108B9F1DB1AB0DBC7E
Authority key identifier: 24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/323830333a396638303a3a2f33322d3332203d3e20323633373335.roa
Signing time:             Tue 05 Mar 2024 18:13:25 +0000
ROA not before:           Tue 05 Mar 2024 18:08:25 +0000
ROA not after:            Tue 04 Mar 2025 18:13:25 +0000
asID:                     263735
IP address blocks:        2803:9f80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:26:57:57:87:a1:25:3c:b9:89:89:10:8b:9f:1d:b1:ab:0d:bc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
        Validity
            Not Before: Mar  5 18:08:25 2024 GMT
            Not After : Mar  4 18:13:25 2025 GMT
        Subject: CN=87B1FA9ECA3DF5762E05F5EEFCC6F479D4F6D45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:f0:aa:81:ea:e8:11:1b:90:65:ec:84:88:
                    8e:78:c4:c6:5b:7d:53:77:3e:01:5c:87:c2:66:99:
                    45:37:ad:be:52:ba:6e:7f:7c:ff:76:87:f3:03:c2:
                    f8:f6:a2:7a:1c:91:9e:ce:f1:04:d9:2f:7d:9d:77:
                    67:78:b5:ea:3d:17:38:c3:13:2f:a3:cf:2c:5a:48:
                    00:5e:a3:9e:88:aa:03:78:8a:13:c8:c2:a4:65:3f:
                    e6:71:ff:d9:84:87:00:e5:5d:51:a2:23:23:de:ca:
                    55:24:43:7d:c7:2b:c1:de:a0:d2:0d:ef:c2:f9:05:
                    fb:ec:fb:b1:e1:24:46:1e:3a:53:89:89:06:ac:e4:
                    56:8f:02:99:9a:27:77:55:2d:d1:9b:b1:63:62:d9:
                    1e:91:f2:0f:15:7c:90:a6:38:ad:0b:34:39:38:6f:
                    d5:8e:af:e2:a9:b2:8a:d3:dd:f9:84:51:ca:bc:d3:
                    ee:43:77:44:07:b3:fd:ac:31:8b:3e:74:ff:90:72:
                    61:e8:d6:93:ae:7e:83:9e:58:9e:a8:f3:90:60:83:
                    c2:55:d5:15:fe:b1:cb:9d:2b:6e:bf:99:3c:d0:3a:
                    74:42:e4:3c:d7:cd:08:d8:b3:89:42:e4:ea:ca:d1:
                    83:53:0a:98:c6:e7:68:2e:de:a9:04:01:82:30:d7:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B1:FA:9E:CA:3D:F5:76:2E:05:F5:EE:FC:C6:F4:79:D4:F6:D4:5A
            X509v3 Authority Key Identifier:
                keyid:24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/323830333a396638303a3a2f33322d3332203d3e20323633373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:4c:f6:64:9a:2a:d6:4b:da:be:21:68:b9:d5:41:f6:08:1a:
         f4:c9:a2:d3:88:b4:c8:e9:23:e1:a7:33:3e:c9:e5:df:8d:75:
         3a:14:e6:b8:12:f8:c3:74:fe:9e:7c:d7:3b:2a:bb:4a:58:32:
         ed:46:3e:e4:fc:d1:a3:c0:f4:d9:d8:1c:f4:8a:25:7c:f0:6b:
         fe:de:e6:66:71:d4:f0:44:10:c3:63:45:95:18:6a:db:40:26:
         61:5e:6d:b6:26:05:d5:25:a5:db:61:03:9f:bc:2f:95:e4:16:
         61:62:b5:6d:ca:65:1a:7e:3b:a1:c0:3f:5c:4d:9e:2b:b5:c5:
         a1:34:4d:c2:d4:8c:b4:ce:fb:17:8c:86:d4:93:c0:6b:01:65:
         4b:69:52:22:d5:cb:72:c6:09:75:2c:32:1c:78:de:95:6b:6a:
         bd:03:3c:81:73:77:37:60:5c:a2:e5:df:31:e8:c5:3b:34:b2:
         d2:b8:c5:6c:3a:ca:9a:43:54:47:a5:d0:f0:ab:c2:52:81:a0:
         58:c2:b2:87:85:d5:b3:03:32:20:e8:13:82:cc:db:dc:bc:7f:
         e9:2c:81:77:4a:47:25:d0:31:85:96:ab:bf:77:dd:07:79:5b:
         29:0e:57:31:44:7c:1e:70:f3:c8:f0:20:50:56:ce:e3:e4:a8:
         e6:b7:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----