Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/323830333a366530303a3a2f33322d3332203d3e203532333938.roa
File:                     323830333a366530303a3a2f33322d3332203d3e203532333938.roa (raw, json)
Hash identifier:          8CDaRBJMPUKPFcxxgrKy5TnRtIrSc6u1MKiIWzTxxaA=
Subject key identifier:   CB:6C:5A:7D:16:94:E4:26:01:EE:6C:A7:02:D3:6C:49:2F:5A:9B:BF
Certificate issuer:       /CN=319D62645871D3B24C33AF24E8F1C30794A59476
Certificate serial:       4410C2730340A69E8F8BBE76F976A430F2969386
Authority key identifier: 31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/323830333a366530303a3a2f33322d3332203d3e203532333938.roa
Signing time:             Tue 05 Mar 2024 17:58:21 +0000
ROA not before:           Tue 05 Mar 2024 17:53:21 +0000
ROA not after:            Tue 04 Mar 2025 17:58:21 +0000
asID:                     52398
IP address blocks:        2803:6e00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:10:c2:73:03:40:a6:9e:8f:8b:be:76:f9:76:a4:30:f2:96:93:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319D62645871D3B24C33AF24E8F1C30794A59476
        Validity
            Not Before: Mar  5 17:53:21 2024 GMT
            Not After : Mar  4 17:58:21 2025 GMT
        Subject: CN=CB6C5A7D1694E42601EE6CA702D36C492F5A9BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:da:0b:57:21:df:5c:09:70:90:ce:cc:2b:
                    62:eb:4d:37:c4:51:c5:e0:38:27:fd:fe:0c:62:42:
                    ca:32:5a:45:92:d2:c1:0b:24:e7:20:2e:08:15:c8:
                    28:4b:34:0a:20:8d:a9:18:5f:b8:6f:fb:9b:dc:54:
                    e4:78:23:40:3b:3d:87:53:a4:18:ef:13:31:0e:b0:
                    88:af:aa:e9:02:29:68:52:cc:f3:6a:88:e6:29:fe:
                    62:a3:7b:0c:3f:95:ad:44:a0:78:47:bf:b6:92:7d:
                    9f:08:8f:62:82:38:b4:72:3c:17:f2:e8:72:08:8e:
                    3a:c1:d9:3d:28:b7:21:1e:e8:05:24:5c:be:55:ad:
                    fb:68:d4:02:ab:14:8b:7d:0c:8a:28:cf:2b:b5:18:
                    23:4b:a2:3a:c1:5e:e7:29:3c:7d:e7:e5:c7:e8:be:
                    92:f9:e4:cb:b4:15:cf:a3:f6:69:68:46:f6:04:32:
                    45:cd:0b:67:9b:6b:59:83:c1:c9:7e:e2:c6:20:e4:
                    c4:b5:1b:46:29:5c:c5:b8:e7:0d:8c:de:da:e0:46:
                    05:1a:05:30:f2:14:85:fa:6a:19:38:ec:ce:54:d2:
                    40:8c:1e:ac:8e:2f:6b:27:25:df:42:18:bb:80:f4:
                    18:3a:35:f5:de:fe:d3:00:28:4e:c8:f8:56:c4:be:
                    35:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6C:5A:7D:16:94:E4:26:01:EE:6C:A7:02:D3:6C:49:2F:5A:9B:BF
            X509v3 Authority Key Identifier:
                keyid:31:9D:62:64:58:71:D3:B2:4C:33:AF:24:E8:F1:C3:07:94:A5:94:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/319D62645871D3B24C33AF24E8F1C30794A59476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/319D62645871D3B24C33AF24E8F1C30794A59476.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634B84ED36D397D1CCBE14F083953930C8C20974F2FE863AADEDD8F5134694C1/0/323830333a366530303a3a2f33322d3332203d3e203532333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:a3:a7:88:d5:7b:32:08:58:ed:58:4e:45:0b:35:ab:25:2a:
         42:a1:57:af:56:8d:9c:00:30:dc:c8:fe:48:18:b3:65:9d:d0:
         67:23:23:c3:f1:7b:00:50:2d:ea:21:57:8a:e4:70:3f:46:ce:
         7a:da:27:36:c6:ad:43:80:aa:9a:29:a7:2c:66:dc:33:38:7a:
         c0:70:7d:dc:d0:71:a6:c5:ef:be:2b:ee:57:b1:19:88:36:c7:
         9f:bb:41:87:ca:d6:69:63:33:1a:ab:98:e7:15:e1:41:32:fd:
         1a:c6:52:65:47:fc:c2:78:39:85:82:1c:34:0a:8d:ff:ae:08:
         e4:11:1a:67:99:43:51:25:02:84:4f:93:c6:bd:7b:91:87:81:
         bf:68:bb:63:bb:3f:16:f8:09:3f:93:58:72:b6:b1:7d:67:68:
         f8:0c:0a:e4:12:ca:0e:76:63:f9:4e:10:d4:dc:04:73:40:30:
         6f:3a:59:60:e5:ab:cb:da:1f:f3:f5:05:8c:a9:be:f5:bf:92:
         00:c4:51:a3:fe:f4:60:fd:8b:9a:64:ca:93:aa:bd:88:fb:e6:
         3d:05:9b:57:b7:39:56:fe:87:4a:99:b7:5f:1e:fb:76:ae:38:
         de:bc:69:12:21:42:8a:c4:c1:d4:df:0d:24:27:d2:2a:c3:c7:
         60:60:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----