Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/323830333a646130303a3a2f33322d3332203d3e203532323533.roa
File:                     323830333a646130303a3a2f33322d3332203d3e203532323533.roa (raw, json)
Hash identifier:          brBJaVGLphPNXwtDShQWPrx+e8cWuF8p2MJ8wwVNjxI=
Subject key identifier:   99:62:88:FB:02:06:FF:D9:74:AA:80:4D:EB:DE:A4:BA:EE:10:D8:D3
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       2AC5EBF5A417F17F2DDC2FF5E5AC8E4453B71C69
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/323830333a646130303a3a2f33322d3332203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:36 +0000
ROA not before:           Tue 05 Mar 2024 18:13:36 +0000
ROA not after:            Tue 04 Mar 2025 18:18:36 +0000
asID:                     52253
IP address blocks:        2803:da00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c5:eb:f5:a4:17:f1:7f:2d:dc:2f:f5:e5:ac:8e:44:53:b7:1c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:36 2024 GMT
            Not After : Mar  4 18:18:36 2025 GMT
        Subject: CN=996288FB0206FFD974AA804DEBDEA4BAEE10D8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:1b:74:a8:08:94:18:78:36:77:42:40:38:
                    5d:1e:69:2c:ad:da:ca:fd:b6:43:ae:6b:52:32:8d:
                    59:5b:0f:ff:0b:27:4c:1f:0c:2e:dd:7b:f3:e6:c8:
                    0e:88:df:9b:45:f3:ee:7c:0e:1a:f8:35:e9:e6:a1:
                    99:14:5a:d6:4e:31:db:30:df:be:99:57:e4:26:a7:
                    a7:95:02:d0:8f:df:8e:93:ab:32:5f:a9:58:48:79:
                    10:bc:84:9b:ba:a4:c4:0e:94:cd:bf:16:14:7d:d7:
                    34:a6:7c:06:c4:ea:96:ba:e1:ed:fb:65:e0:03:8f:
                    7c:1f:99:cc:51:81:18:a5:7e:c7:58:b9:ca:06:b1:
                    8d:ef:ed:f9:33:fe:7a:a3:56:6d:63:98:d8:17:0d:
                    38:4e:da:ca:b2:7b:46:28:84:4e:2a:14:c0:76:e2:
                    4c:bb:1c:c8:a9:34:ae:30:76:41:f8:24:02:c5:ec:
                    2c:ea:c8:81:49:8d:29:48:bd:ed:74:f9:ab:6c:f7:
                    c4:b2:ad:61:bb:31:c0:9e:c0:94:77:82:84:51:6a:
                    96:cc:09:61:1a:da:3d:33:e9:c7:6e:b8:28:4c:61:
                    e9:b1:15:1c:09:34:fb:32:25:21:12:fe:24:6a:64:
                    0e:b4:7a:ae:b6:ee:eb:d1:5f:b7:ce:d1:0e:51:e0:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:62:88:FB:02:06:FF:D9:74:AA:80:4D:EB:DE:A4:BA:EE:10:D8:D3
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/323830333a646130303a3a2f33322d3332203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da00::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:44:c6:83:e4:ba:b1:54:36:8a:e9:b5:d7:99:1d:0c:61:23:
         0d:7e:ac:48:c8:10:0e:e7:98:33:46:31:8b:f5:4c:5e:5f:f1:
         f1:20:ba:bc:47:2e:cc:06:57:3d:fc:9e:76:25:c7:ac:65:09:
         17:a6:ac:b9:2c:e9:96:9d:99:7e:91:93:ee:2e:f4:9c:00:e2:
         50:a3:ae:40:d9:19:8f:44:a0:86:dc:15:18:c4:58:1a:39:8a:
         c3:af:17:30:3d:4f:3c:46:ed:e4:51:f0:87:98:43:f8:dd:3d:
         4e:c7:1e:9e:63:28:b0:f0:af:4d:2f:c0:62:28:72:1e:29:e4:
         e6:61:c3:33:1a:63:65:8a:52:63:e2:a0:30:a2:78:a9:0e:9f:
         dd:02:dc:2f:27:ed:ed:99:de:47:f2:71:5d:46:dc:2d:7a:1f:
         2f:11:5f:4c:fd:fe:95:82:84:51:6f:55:a4:b0:93:c0:c9:8f:
         1d:62:6d:23:eb:59:fb:3d:5c:61:1b:b0:35:39:44:78:7d:f6:
         c0:c2:47:6f:55:7d:49:5e:0b:99:e0:9a:a8:07:ad:fa:cb:97:
         14:2d:ab:07:26:09:24:c7:f4:54:9b:ad:77:10:dd:8c:8b:fa:
         06:7c:3e:40:f6:a9:10:85:7a:a2:62:fc:31:d9:4b:da:72:83:
         1b:e8:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----