Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313230303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313230303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          pkdbe2okl4rQFqQaqQmTAX1t0uwa1FHT+vyU7qmydD0=
Subject key identifier:   59:E5:CF:C5:FA:97:AB:F0:DD:86:5B:74:33:E6:ED:10:7D:A6:70:2A
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       45D255E1B03C63537AC011CE62AF1EEA741CB41B
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313230303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:01 +0000
ROA not before:           Thu 25 Jul 2024 23:45:01 +0000
ROA not after:            Thu 24 Jul 2025 23:50:01 +0000
asID:                     273123
IP address blocks:        2803:450:1200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d2:55:e1:b0:3c:63:53:7a:c0:11:ce:62:af:1e:ea:74:1c:b4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:01 2024 GMT
            Not After : Jul 24 23:50:01 2025 GMT
        Subject: CN=59E5CFC5FA97ABF0DD865B7433E6ED107DA6702A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:ff:dc:b6:4f:07:c3:26:ef:e9:cc:d0:47:
                    1e:1a:0c:15:b9:e1:1f:a4:19:30:cf:4a:bf:f2:12:
                    96:27:3c:49:03:4d:f8:85:a7:6d:a1:4b:a7:a0:0a:
                    19:13:30:56:8a:0c:d5:11:15:0e:ce:c5:99:9a:43:
                    45:ac:37:fe:3b:85:8b:2d:c7:9a:a1:fa:12:24:d8:
                    10:71:2d:be:fc:56:89:de:38:7d:99:d0:99:c5:66:
                    52:a3:cc:61:a1:63:d2:34:f0:c8:c4:df:b5:ce:80:
                    d6:c6:9c:83:4f:89:90:1a:1d:7f:a2:6c:40:57:91:
                    dd:2b:2f:61:d7:da:40:9a:63:14:b5:1f:60:bd:2b:
                    af:f2:ba:a1:28:98:f8:3c:06:95:95:c8:0d:be:f0:
                    cb:54:ee:b0:e0:5b:44:17:c6:4f:21:43:0b:aa:e4:
                    fa:95:73:9b:2e:8c:8f:99:37:66:db:24:68:0f:f7:
                    fd:9a:b5:d6:bf:d8:c9:50:f4:2c:a5:33:63:b5:4d:
                    d5:ce:f4:dd:28:ea:c9:88:11:c1:07:fc:d6:91:6e:
                    bb:8d:e9:13:35:35:52:2e:4e:08:c8:cf:bd:5f:58:
                    c1:15:f0:a4:a7:d5:1c:a0:26:6e:60:1a:0f:d5:6f:
                    07:af:5e:71:8c:12:3d:d4:64:ac:ae:e5:67:d0:80:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E5:CF:C5:FA:97:AB:F0:DD:86:5B:74:33:E6:ED:10:7D:A6:70:2A
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313230303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:2a:34:2e:cc:24:28:ae:57:78:2b:bd:9a:a7:f5:8e:83:5d:
         e1:83:f1:a2:b8:69:fd:2d:9a:4e:c3:2e:c5:16:b7:4a:68:51:
         1c:31:50:fa:b2:1c:af:3b:70:e0:38:86:6d:bc:95:04:0a:7b:
         39:63:48:66:af:fd:e5:6e:a6:0c:bf:45:6a:cd:c6:a9:d3:d8:
         60:57:37:16:6f:4c:64:d6:65:3e:0b:db:4c:f0:a6:1f:e9:86:
         c5:80:31:74:5a:fc:60:e4:27:dc:5c:5d:5a:da:56:e3:dd:5a:
         d0:b8:7c:5c:92:b4:2b:6c:87:0f:35:17:40:9c:2c:17:9d:50:
         ab:69:2a:6e:94:91:16:01:21:cd:e6:fe:f3:17:65:bc:15:27:
         48:bf:99:63:df:be:28:6c:d7:1b:e7:b5:98:b8:22:17:26:1e:
         43:56:8e:bb:0c:58:76:6c:ae:3b:85:7c:bf:93:3c:d2:29:d0:
         10:6e:89:c8:1d:08:f3:70:e9:64:66:0c:11:e0:a5:66:aa:ce:
         f5:85:29:3b:69:42:9b:d3:c6:c8:10:76:2a:e4:ef:66:11:cb:
         f2:56:ca:80:7b:52:46:8f:88:9f:e1:85:b4:c6:57:0a:ce:86:
         15:63:53:fc:b4:8d:1b:63:24:84:f7:02:f7:0d:bf:d2:d9:4b:
         b1:ff:95:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----