Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/323830333a333638303a3a2f33322d3438203d3e203237383531.roa
File:                     323830333a333638303a3a2f33322d3438203d3e203237383531.roa (raw, json)
Hash identifier:          rn+DU0+BdvXQbfIosh5ECjL/BOSgWWnFY877Sc3sOXc=
Subject key identifier:   6A:D4:45:8F:2E:40:EB:FC:8B:E4:00:90:3D:62:9F:56:3B:3F:36:49
Certificate issuer:       /CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
Certificate serial:       465D485F426D62E95A5B634F0CA115AEA5D4A576
Authority key identifier: 57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/323830333a333638303a3a2f33322d3438203d3e203237383531.roa
Signing time:             Tue 05 Mar 2024 18:12:46 +0000
ROA not before:           Tue 05 Mar 2024 18:07:46 +0000
ROA not after:            Tue 04 Mar 2025 18:12:46 +0000
asID:                     27851
IP address blocks:        2803:3680::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5d:48:5f:42:6d:62:e9:5a:5b:63:4f:0c:a1:15:ae:a5:d4:a5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
        Validity
            Not Before: Mar  5 18:07:46 2024 GMT
            Not After : Mar  4 18:12:46 2025 GMT
        Subject: CN=6AD4458F2E40EBFC8BE400903D629F563B3F3649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:75:7b:5e:4e:b9:67:7a:1e:81:90:9c:fb:
                    7b:96:f2:4c:0a:36:33:18:dc:17:44:bd:52:b3:55:
                    df:21:31:25:38:70:73:80:79:ad:71:96:ab:f0:40:
                    ac:b8:b8:aa:b0:9d:1e:3a:67:2b:5d:7a:f8:60:1e:
                    d5:72:86:d2:37:aa:0e:98:96:d7:ea:bc:59:b9:84:
                    dd:e3:40:93:4b:0e:79:d2:31:3a:83:a7:90:f0:e4:
                    1d:7f:20:c0:82:bf:55:09:a8:f4:c3:d1:8f:6d:3a:
                    09:c8:14:1b:ac:e7:97:1c:b6:f6:c7:11:0b:33:9d:
                    03:40:95:70:7a:79:eb:fe:36:2c:03:18:05:3a:6e:
                    67:4b:fd:9c:c0:7f:b3:a6:22:9b:e9:79:e2:95:a5:
                    60:fa:84:89:48:f2:55:06:6e:0f:91:ac:87:50:85:
                    19:69:85:03:1d:73:f1:e7:fc:53:11:3c:85:a7:53:
                    d9:2c:29:ea:d8:35:2d:16:3c:7d:55:e4:79:75:e3:
                    01:f2:27:09:61:a8:42:93:17:11:34:31:f9:4f:46:
                    5e:48:1a:7a:7d:2a:ea:ce:7c:e9:52:be:57:77:44:
                    6c:65:68:ea:e9:ce:79:07:30:68:65:7a:45:c5:c2:
                    99:01:64:a9:8e:78:12:00:12:fc:f4:28:d8:d2:14:
                    f4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D4:45:8F:2E:40:EB:FC:8B:E4:00:90:3D:62:9F:56:3B:3F:36:49
            X509v3 Authority Key Identifier:
                keyid:57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/323830333a333638303a3a2f33322d3438203d3e203237383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3680::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:d8:2e:3c:e8:f4:87:15:b6:7b:72:8d:8c:b8:64:66:4d:
         7f:d6:51:70:4e:a5:71:f0:08:47:3f:26:63:44:85:89:fe:38:
         f6:c8:1e:65:12:2f:e9:04:8b:ee:41:80:11:75:f1:74:ed:59:
         6a:8b:c9:de:c1:f6:05:83:9a:bb:9c:cf:40:f0:f0:af:95:dc:
         78:d4:1a:1b:2e:e0:37:97:9b:69:9e:a0:b1:93:ba:b4:d9:31:
         fd:0a:ce:86:c6:4e:f9:49:b7:c7:96:03:fe:b2:ab:7a:66:c2:
         50:5e:93:53:45:cd:e8:fd:b1:f7:e6:3a:75:18:6a:ab:12:78:
         34:1d:12:e2:d0:f8:86:7e:ea:a2:b5:cd:6a:ad:ea:f3:d0:cc:
         0d:5e:58:20:8c:5a:28:7e:bd:e7:0c:3c:02:91:9a:a9:03:2a:
         54:a4:5c:2f:83:b6:f6:04:7d:e4:c4:67:3b:f2:bd:25:92:30:
         ca:f0:46:15:65:64:b3:c1:70:22:92:29:eb:e2:4d:f2:12:64:
         3e:08:8b:77:47:3f:df:df:c6:c0:ba:88:ac:67:bb:96:40:b1:
         df:2a:39:3a:a1:20:81:82:86:6e:ff:0c:d0:32:50:50:00:e5:
         eb:bb:1e:d7:a6:4e:da:a3:a4:99:67:4f:1e:39:e0:55:79:10:
         bd:81:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----