Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa
File:                     323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa (raw, json)
Hash identifier:          0WQPJMBJ8yPNyxq9rFL2dLLaqXuk8YoRhMMwhamX5jg=
Subject key identifier:   32:1E:C9:F2:28:28:A2:08:AF:A3:55:8D:DA:22:C5:D5:2B:73:15:00
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       0FCB59C3A587E2B561C2714ABC5FF188BE88029B
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:23 +0000
ROA not before:           Tue 05 Mar 2024 17:39:23 +0000
ROA not after:            Tue 04 Mar 2025 17:44:23 +0000
asID:                     269782
IP address blocks:        2803:2360:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cb:59:c3:a5:87:e2:b5:61:c2:71:4a:bc:5f:f1:88:be:88:02:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:23 2024 GMT
            Not After : Mar  4 17:44:23 2025 GMT
        Subject: CN=321EC9F22828A208AFA3558DDA22C5D52B731500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:01:48:af:3c:88:21:3d:46:d9:ef:88:69:
                    10:c0:d9:30:4d:5c:95:c9:41:30:b4:6e:b8:f9:60:
                    4c:4a:b2:2d:c8:34:f7:3c:09:c1:b0:71:86:5d:1b:
                    aa:78:a1:19:ab:d4:ee:9a:24:6e:7e:38:2c:0c:41:
                    55:65:4b:75:64:62:20:f8:e1:bb:c6:64:ae:89:6f:
                    66:75:d0:6f:86:23:ee:58:85:9c:3d:59:a3:2c:9e:
                    b4:14:c6:a1:b1:cd:14:84:1b:83:3a:26:ba:df:42:
                    81:a6:9a:82:bb:d1:de:0d:29:3f:a7:ea:0f:78:cc:
                    a1:0a:2a:ee:7b:88:6a:0e:bc:fe:57:6c:54:9e:58:
                    22:5f:aa:b9:77:72:07:8a:8b:0a:5a:f5:16:d8:ee:
                    9b:f8:57:dd:f0:5f:94:90:b8:1d:06:1c:6e:e6:a2:
                    2e:49:c3:b9:33:1e:14:fb:3a:90:19:7c:aa:c1:ee:
                    85:e7:1a:5d:55:4a:f6:6d:59:93:97:b5:9c:3a:59:
                    ce:d3:14:2a:95:58:db:e8:c0:b7:5a:4e:de:52:07:
                    90:1d:23:03:17:a3:0b:16:7c:da:6b:30:8b:e2:81:
                    31:c5:79:15:9f:2b:82:b1:b9:11:b7:fc:a6:c4:fb:
                    88:41:66:c2:18:8b:ff:0d:d4:28:7a:56:2c:0f:08:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1E:C9:F2:28:28:A2:08:AF:A3:55:8D:DA:22:C5:D5:2B:73:15:00
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/323830333a323336303a613030303a3a2f33362d3336203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2360:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         40:47:aa:b0:fb:fe:4b:31:ef:aa:d5:db:9f:76:32:12:6a:c3:
         a2:54:05:fe:ec:ba:ef:e6:5c:0e:66:7f:1a:9f:36:0d:ee:cf:
         8f:24:de:80:1a:ce:99:1f:90:9d:77:81:81:2f:12:72:b6:c9:
         f8:d9:79:e4:b7:3d:c9:38:d6:91:7f:af:64:7c:c0:47:40:4c:
         42:65:d6:45:bd:0b:c4:3f:9c:36:8c:96:bc:15:7e:a9:32:80:
         bd:29:cc:c7:57:03:4a:d2:f0:69:58:bc:59:55:6b:28:f7:a6:
         1a:29:99:8d:65:45:3c:f3:e2:df:80:cc:16:05:e2:24:c9:8b:
         5b:25:57:b7:30:ed:92:0e:dd:68:2b:77:17:0f:7d:5f:02:29:
         61:1a:fa:39:14:a4:0b:85:5e:2a:93:ac:12:b8:c3:77:80:0d:
         56:33:aa:e1:38:31:a5:de:7d:67:a3:09:10:4b:e5:89:71:18:
         1e:91:de:e2:9f:9c:87:e8:d6:cf:b3:d1:f7:f0:f6:1f:f3:df:
         dd:a3:0c:2e:19:62:23:c6:c6:9b:1b:b1:07:22:f7:51:d5:d1:
         90:80:f1:33:fd:64:9a:bd:84:d4:20:fb:64:88:5a:a1:31:25:
         7c:48:7a:18:29:3c:24:c2:5c:c8:cb:55:ce:c3:6f:15:3f:da:
         b6:90:03:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----