Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/323830333a613832303a3a2f33332d3438203d3e20323731393131.roa
File:                     323830333a613832303a3a2f33332d3438203d3e20323731393131.roa (raw, json)
Hash identifier:          kf3UYnvg/ZuJUdppjcOVNjzZz5LTaWFzViHkq8x6jSg=
Subject key identifier:   2C:3B:BA:E9:7B:B1:15:D2:5C:B0:7E:AF:11:CC:56:DF:C7:58:4E:62
Certificate issuer:       /CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
Certificate serial:       1CAE88D2FDD781B17A03561BED3E8AA419198EB8
Authority key identifier: 81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/323830333a613832303a3a2f33332d3438203d3e20323731393131.roa
Signing time:             Tue 05 Mar 2024 17:54:47 +0000
ROA not before:           Tue 05 Mar 2024 17:49:47 +0000
ROA not after:            Tue 04 Mar 2025 17:54:47 +0000
asID:                     271911
IP address blocks:        2803:a820::/33 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ae:88:d2:fd:d7:81:b1:7a:03:56:1b:ed:3e:8a:a4:19:19:8e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81BC3D0F24DB890EA37C979CCC6BE88C7FED3340
        Validity
            Not Before: Mar  5 17:49:47 2024 GMT
            Not After : Mar  4 17:54:47 2025 GMT
        Subject: CN=2C3BBAE97BB115D25CB07EAF11CC56DFC7584E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:5a:fe:11:a0:05:76:d4:0f:18:91:26:74:
                    e4:c2:12:a9:24:2d:95:f8:d9:8d:7e:62:78:e6:fc:
                    9d:09:b2:70:b1:2e:27:19:a0:33:15:ad:96:26:ef:
                    a6:13:a4:4c:0d:b3:41:f0:cf:6d:96:f2:32:00:0a:
                    fd:8b:2d:c6:5f:59:a5:4e:b5:c1:b4:28:0e:73:8e:
                    61:06:d6:9f:75:28:25:6a:36:27:27:7d:d5:d9:2c:
                    fb:db:b9:31:3e:68:0e:28:c0:f4:4a:94:64:41:ca:
                    07:f3:f7:81:ed:90:11:2c:f9:9a:7a:12:48:62:e1:
                    1f:91:e9:61:63:4e:fe:23:1d:6e:c7:d9:42:eb:f5:
                    ed:f9:01:41:6b:64:e2:01:2b:87:08:f9:49:f0:35:
                    be:01:5f:f7:c7:c2:8d:4c:b3:11:24:38:7c:56:95:
                    4f:33:33:4d:c7:c9:8e:73:ff:88:bf:2d:9e:c3:62:
                    18:b4:66:4e:bd:db:d3:c4:92:6f:0e:83:87:f4:24:
                    52:e3:4c:86:d0:9f:30:56:31:7f:a4:37:62:89:f4:
                    49:10:18:5b:a8:f8:2b:1c:9a:f7:94:1b:15:b8:13:
                    dc:7f:d6:f3:2e:99:99:17:4e:37:9e:75:b5:26:ab:
                    f6:7f:26:98:d4:b2:bb:9f:18:14:1d:86:63:c5:04:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3B:BA:E9:7B:B1:15:D2:5C:B0:7E:AF:11:CC:56:DF:C7:58:4E:62
            X509v3 Authority Key Identifier:
                keyid:81:BC:3D:0F:24:DB:89:0E:A3:7C:97:9C:CC:6B:E8:8C:7F:ED:33:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81BC3D0F24DB890EA37C979CCC6BE88C7FED3340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68AC6BF731FD32A25BB11D007FA3075F3A38B25B73B6D36291B50F323384CB8C/0/323830333a613832303a3a2f33332d3438203d3e20323731393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a820::/33

    Signature Algorithm: sha256WithRSAEncryption
         c0:c6:53:c7:91:d0:2d:94:57:03:ca:e4:3a:f4:bf:44:04:87:
         86:54:54:31:af:d1:15:8f:ea:95:f0:28:24:bf:14:5c:88:ed:
         ed:e7:2d:d6:71:cd:1f:24:13:74:f2:74:78:ce:0a:96:96:dc:
         02:e9:7d:da:64:a9:43:af:a1:c0:2d:22:e4:3f:56:35:dc:49:
         9d:56:21:d5:73:32:db:28:39:71:a3:65:f4:59:ac:2e:24:45:
         45:0c:f7:8e:6c:26:ef:14:ff:d8:66:74:61:76:2b:3b:8a:63:
         c9:47:17:5f:b6:4d:8c:4a:c4:44:26:99:a7:51:01:92:45:3a:
         22:5c:00:d0:3b:70:76:16:a3:09:b9:1c:16:cd:2b:38:37:a4:
         97:7a:7a:c5:d6:50:77:7e:e3:02:c7:86:39:14:eb:9c:ed:2d:
         77:33:9d:c7:4e:44:88:45:b9:ad:c8:86:c5:b1:12:80:7c:83:
         3e:e9:d0:69:40:a5:71:0a:19:58:37:70:79:03:9a:dc:5a:35:
         8b:c7:81:a2:f2:a8:02:dd:d2:f1:2d:39:c0:1e:1a:24:ff:56:
         ab:40:23:a4:db:36:59:63:9d:b5:27:42:33:14:30:43:5d:43:
         7a:24:e1:c5:a7:e3:e3:43:26:e9:3c:94:f1:bc:7b:7a:c2:56:
         f2:4b:b9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----