Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/323830333a613832303a3a2f33322d3332203d3e20323731393131.roa
File:                     323830333a613832303a3a2f33322d3332203d3e20323731393131.roa (raw, json)
Hash identifier:          b1yOwehC2zyBHMJCtG4qcrkIauR0lklN/VLZ+j6pxsc=
Subject key identifier:   1E:E8:EC:4F:F7:89:D0:2D:EA:94:AF:6A:3C:8F:69:CD:E2:F3:6E:09
Certificate issuer:       /CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
Certificate serial:       7DD9FAA69D875C1BDB4FF61350FF4AC9D7CEBD3F
Authority key identifier: 81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/323830333a613832303a3a2f33322d3332203d3e20323731393131.roa
Signing time:             Tue 05 Mar 2024 17:54:46 +0000
ROA not before:           Tue 05 Mar 2024 17:49:46 +0000
ROA not after:            Tue 04 Mar 2025 17:54:46 +0000
asID:                     271911
IP address blocks:        2803:a820::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:fa:a6:9d:87:5c:1b:db:4f:f6:13:50:ff:4a:c9:d7:ce:bd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
        Validity
            Not Before: Mar  5 17:49:46 2024 GMT
            Not After : Mar  4 17:54:46 2025 GMT
        Subject: CN=1EE8EC4FF789D02DEA94AF6A3C8F69CDE2F36E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:a0:2b:08:b1:72:76:0b:00:a2:6e:c8:da:
                    05:9d:76:0d:e7:2f:61:33:0e:40:23:39:ba:65:c6:
                    99:bd:fc:6a:9f:1e:ae:a9:fe:1c:e0:7c:af:45:3d:
                    06:bd:c0:75:72:bc:8f:15:14:5b:97:a5:7e:ff:72:
                    e0:07:95:81:ed:aa:9c:72:72:aa:1b:96:91:d8:31:
                    d5:8d:3e:35:a3:07:ae:20:93:85:5e:b0:e5:31:8e:
                    99:7c:aa:8c:49:8c:07:61:f1:1f:86:b5:5e:69:e0:
                    1f:a1:86:57:86:ba:66:14:d9:ee:da:02:1d:d0:06:
                    68:22:34:f2:96:7b:85:1f:bd:5e:ad:b3:dc:36:c4:
                    de:1f:53:71:2e:00:76:6d:e4:70:6a:df:40:0f:e0:
                    43:a2:48:26:7b:e6:b3:5c:14:6f:6d:87:94:b3:a4:
                    22:05:d5:9e:86:92:61:96:d1:ce:0c:d8:ab:c4:c4:
                    50:5f:93:1f:81:c3:ef:1a:5b:cb:ab:99:b9:27:91:
                    a8:6f:08:0e:11:0b:9d:93:3e:c5:34:95:f7:bf:55:
                    80:e5:7e:a3:ec:c6:ff:fb:56:b0:f4:68:a8:e7:cc:
                    34:bf:32:0b:5d:5a:70:ca:5d:65:e3:b2:10:21:7c:
                    66:87:0f:3f:38:a9:32:cc:6a:ef:4e:8a:62:97:79:
                    ba:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E8:EC:4F:F7:89:D0:2D:EA:94:AF:6A:3C:8F:69:CD:E2:F3:6E:09
            X509v3 Authority Key Identifier:
                keyid:81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/323830333a613832303a3a2f33322d3332203d3e20323731393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a820::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:08:50:08:ff:ae:1d:8e:74:37:f2:83:75:45:18:c1:20:ed:
         62:0d:ee:7b:30:a3:a0:a4:aa:13:47:ff:ad:4b:b3:53:70:11:
         35:11:ba:fc:1b:85:4a:07:96:f0:3f:3b:6a:38:c1:89:ae:5e:
         05:e9:4b:70:fb:14:31:fd:37:bd:80:62:20:ad:9a:78:27:37:
         71:ca:44:9a:30:36:a4:3f:1a:3c:f8:f7:c6:9f:6e:a3:8b:84:
         f1:d4:98:ed:cc:9a:bf:ae:e7:fa:bc:1b:8f:b1:43:bd:02:3c:
         de:a8:91:4a:b1:de:90:7f:86:a7:59:fe:68:fd:47:43:dd:ea:
         22:2c:8e:c2:89:9c:9c:6c:c9:f9:7d:17:ce:59:54:53:8f:3e:
         d0:97:7b:c1:79:f5:86:c5:3b:0c:fc:07:44:20:c8:e0:ea:5c:
         af:d1:e5:3e:e4:64:6b:26:78:95:e7:03:56:1e:38:ba:0a:97:
         43:26:88:0d:56:a6:d9:3e:b4:ba:42:46:4e:c4:29:c6:6d:52:
         96:4d:14:1e:ba:ab:36:e5:5f:a6:50:a1:af:ce:85:80:ee:96:
         59:1f:7c:c3:4e:93:a7:85:a9:87:c8:34:fb:35:66:d3:8d:d3:
         b9:27:9e:81:c7:6f:55:23:6c:a1:e8:94:3f:5b:34:ed:ce:79:
         bd:39:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----