Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/323830333a363630303a3a2f33302d3634203d3e203238303735.roa
File:                     323830333a363630303a3a2f33302d3634203d3e203238303735.roa (raw, json)
Hash identifier:          2DnixI0hbkQMbe9aGEJinL7KsdwCsDLH3D7F21/sGGw=
Subject key identifier:   2E:BC:6A:B1:4F:FF:B4:1F:E1:74:04:D9:CD:AB:EE:FB:B0:C6:CF:72
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       4C0A74D96F40620153932AB67D08AECBAE234377
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/323830333a363630303a3a2f33302d3634203d3e203238303735.roa
Signing time:             Tue 05 Mar 2024 18:11:47 +0000
ROA not before:           Tue 05 Mar 2024 18:06:47 +0000
ROA not after:            Tue 04 Mar 2025 18:11:47 +0000
asID:                     28075
IP address blocks:        2803:6600::/30 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0a:74:d9:6f:40:62:01:53:93:2a:b6:7d:08:ae:cb:ae:23:43:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Mar  5 18:06:47 2024 GMT
            Not After : Mar  4 18:11:47 2025 GMT
        Subject: CN=2EBC6AB14FFFB41FE17404D9CDABEEFBB0C6CF72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:4b:96:a1:48:29:96:45:26:59:15:72:51:
                    ba:58:2b:c7:dd:90:87:3b:77:36:24:8c:0b:0e:9f:
                    57:b4:44:16:ef:fe:25:37:0b:db:9f:7b:ef:3a:fe:
                    e6:3b:fd:d1:29:0d:2d:cd:6d:b2:45:fd:44:48:cb:
                    0b:a9:ce:d6:60:22:14:54:17:20:9d:a3:a6:c9:24:
                    99:3e:b3:c8:2a:a6:8e:c0:6a:a5:97:27:e4:6f:43:
                    1b:ac:1c:05:58:5a:51:84:df:56:66:81:8e:be:73:
                    5a:40:0a:e0:d3:4f:6c:a8:d0:d7:04:f0:e3:8d:62:
                    53:b2:fe:90:8f:88:5b:8a:87:52:ba:e3:04:19:ac:
                    45:1b:9d:25:13:f5:c2:3c:d0:dc:8d:58:36:c6:7b:
                    39:de:12:33:a7:ad:27:2d:39:ec:fd:17:4c:3e:d8:
                    fd:07:08:8b:77:f6:a6:6b:18:cc:ef:21:c6:66:7e:
                    af:a3:6c:74:fb:74:cf:a6:92:62:41:4d:6a:51:bd:
                    b8:ae:87:2f:75:8b:49:49:62:89:5f:89:31:9b:a5:
                    c6:75:50:02:83:0e:18:0a:3a:8a:e6:11:7b:b9:a4:
                    11:1a:b7:37:61:56:a8:ec:75:a0:45:ca:8f:97:ec:
                    4d:4e:75:9b:1d:4d:cc:08:8d:9d:ac:69:2d:81:ac:
                    c3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BC:6A:B1:4F:FF:B4:1F:E1:74:04:D9:CD:AB:EE:FB:B0:C6:CF:72
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/323830333a363630303a3a2f33302d3634203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6600::/30

    Signature Algorithm: sha256WithRSAEncryption
         08:46:bf:88:f1:0d:96:45:25:8e:7b:42:89:9a:da:e5:a8:f6:
         bc:b2:6f:53:df:06:47:75:0e:b7:db:26:67:96:8b:95:42:15:
         8b:a9:b9:1c:f0:e4:16:b1:d1:ef:7b:f9:f7:1b:53:23:22:89:
         ac:3d:fe:af:63:78:64:d9:dc:cb:54:cf:6d:21:51:8c:3f:c6:
         19:bd:38:62:fb:d1:01:71:99:87:15:58:b9:f2:f6:22:60:d0:
         e1:3b:4f:8c:29:3d:15:42:32:97:e7:94:1d:db:35:5f:68:3d:
         3a:2a:a8:6d:6f:d4:ce:40:0f:7a:bc:8b:5d:ac:75:98:88:e1:
         2c:c6:f0:66:ad:fe:12:cd:3a:c0:53:5c:31:1a:24:f9:d0:0d:
         26:a4:36:f2:c2:3e:fa:9d:e0:2b:8e:5d:d4:cb:cc:e4:0c:63:
         45:30:7b:af:38:6d:46:06:89:e6:f4:70:20:bd:52:1f:b5:c9:
         94:15:de:b3:86:77:06:72:00:9e:09:ed:c4:ee:d0:80:bb:04:
         0f:f6:28:cf:ee:d3:b4:08:8c:b8:f8:35:d6:53:9a:3c:b7:2a:
         18:c8:0e:32:cc:e5:f3:60:c6:17:62:56:48:93:57:51:ca:e5:
         8b:d4:30:3b:9a:e3:2b:44:44:71:45:ac:be:cc:f3:f4:da:51:
         1e:c2:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----