Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3530303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a3530303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          jmZclX4Y/EGq18knVD/fnA8L/eGEhyvPoCJNirZjoMY=
Subject key identifier:   F5:41:C6:BB:68:29:FA:FA:08:2E:94:5A:03:2B:76:54:29:8B:14:BA
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       6745AD45AD7E3DB8EC68DA120E14196DE7771EE4
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3530303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:03 +0000
ROA not before:           Thu 25 Jul 2024 23:45:03 +0000
ROA not after:            Thu 24 Jul 2025 23:50:03 +0000
asID:                     273123
IP address blocks:        2803:450:500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:45:ad:45:ad:7e:3d:b8:ec:68:da:12:0e:14:19:6d:e7:77:1e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:03 2024 GMT
            Not After : Jul 24 23:50:03 2025 GMT
        Subject: CN=F541C6BB6829FAFA082E945A032B7654298B14BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:d8:55:c9:94:f6:28:23:a5:5c:4c:00:4b:
                    ef:af:71:a1:5f:95:de:4c:71:d9:51:e3:ff:ba:a8:
                    fb:27:73:7d:0f:9a:8a:ac:32:b8:f2:fe:31:e2:26:
                    c8:46:b5:1a:51:67:44:31:56:28:44:3b:d9:f3:d0:
                    01:6c:eb:a9:de:fa:cf:d1:f3:40:0d:a7:91:88:a1:
                    1c:47:bb:b2:e5:32:4b:c1:d4:69:eb:27:f7:6f:47:
                    2f:d8:6e:f9:71:38:71:a9:05:3a:89:1b:78:0a:b9:
                    ff:59:a3:ee:5d:94:a7:b9:48:fc:99:f3:39:0f:6b:
                    ae:32:b1:68:d6:da:07:66:dc:2a:b8:36:00:24:31:
                    22:42:a4:0f:1c:8f:cd:59:5c:2c:ce:a1:c1:71:d9:
                    26:89:ac:d8:30:19:49:8a:79:2b:e9:61:e3:53:59:
                    ee:bd:69:3b:8d:b0:bb:63:17:ae:ef:9a:7f:53:cd:
                    1c:cd:ff:e4:80:5a:2a:de:2c:6d:e0:1a:d3:a2:27:
                    7e:f6:06:fb:fa:04:72:ec:4a:91:10:b5:30:11:00:
                    50:15:54:fb:68:54:3c:f9:11:c0:c3:91:3b:d8:30:
                    19:40:5c:a0:cb:08:23:07:f8:7b:a3:49:05:11:c9:
                    98:d8:64:5d:61:5b:52:04:ab:6b:aa:a1:47:9f:14:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:41:C6:BB:68:29:FA:FA:08:2E:94:5A:03:2B:76:54:29:8B:14:BA
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3530303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:94:d5:d6:db:f3:31:77:d1:fb:f4:8e:ab:85:df:59:b3:fc:
         de:28:b2:de:05:6a:08:d4:59:da:8d:b6:38:14:b2:2d:5d:c5:
         fd:77:8e:aa:89:d7:59:09:ef:90:fa:e3:18:53:41:6b:e1:39:
         73:ee:01:27:dd:c4:4a:5f:00:21:0c:15:82:e9:06:39:e0:03:
         e6:db:38:66:11:5f:cd:78:82:2d:33:8d:6e:42:97:e6:c8:5a:
         4d:ad:2f:47:4f:dc:fc:d0:fa:7b:df:e5:58:72:2b:b4:04:83:
         8e:ed:52:49:d4:47:fc:57:1c:01:1c:2e:b5:1a:21:45:aa:25:
         03:51:2f:1c:06:56:68:15:6f:d5:1a:5e:a5:7f:fe:73:08:61:
         ce:6f:ef:42:20:6a:00:fa:2d:d6:60:72:b0:13:15:76:39:71:
         a2:2d:42:21:0e:68:ca:99:f1:4d:c3:9c:d8:24:de:00:c8:39:
         7b:1a:24:91:3f:a1:66:4f:bb:a6:77:3f:fa:f7:b4:2c:00:80:
         04:2f:71:83:8a:30:71:8f:00:1e:50:2b:cf:82:1f:b3:47:3c:
         27:32:de:3f:f2:6e:04:f8:4f:32:45:6b:c5:27:60:bf:4d:8f:
         8e:56:59:03:0b:88:b2:61:7d:98:1a:ab:62:fb:b3:80:02:28:
         f5:cd:db:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----