Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3730303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a3730303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          Z8XTKUksi5P5s/tyB/cbQ9yHYbVuU0ngXu3sOr8YsWY=
Subject key identifier:   6D:06:8C:D1:0B:C6:3C:9E:A0:39:5A:3E:B8:1F:4F:2C:82:88:8A:9E
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       10F5C313390913877B1F23BEC1AF3582DF4A12A8
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3730303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:02 +0000
ROA not before:           Thu 25 Jul 2024 23:45:02 +0000
ROA not after:            Thu 24 Jul 2025 23:50:02 +0000
asID:                     273123
IP address blocks:        2803:450:700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f5:c3:13:39:09:13:87:7b:1f:23:be:c1:af:35:82:df:4a:12:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:02 2024 GMT
            Not After : Jul 24 23:50:02 2025 GMT
        Subject: CN=6D068CD10BC63C9EA0395A3EB81F4F2C82888A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:13:2b:02:f3:3e:69:21:dd:31:78:df:63:fa:
                    93:d3:d6:85:4a:08:0e:a2:70:c1:52:f6:b1:7e:3d:
                    7f:e7:f8:1d:3f:a6:5c:b4:94:56:d6:3f:d4:97:f0:
                    7a:ca:6c:88:fc:31:56:64:a4:af:38:aa:b5:dd:8c:
                    a7:63:6d:3d:92:38:fb:85:48:bc:7f:27:43:32:f1:
                    89:2d:ea:89:03:8a:0d:ae:d2:85:5b:61:88:74:0b:
                    a2:ae:d7:15:36:c8:3a:89:dd:36:1c:42:d4:9f:1e:
                    3f:23:c8:03:cb:52:5b:b3:1e:83:48:1d:6a:c3:51:
                    5e:bd:e0:32:a4:9e:0e:78:5e:82:90:d7:b0:c6:5f:
                    55:4d:7f:78:dd:e4:c5:a0:58:2a:5e:f1:4d:61:56:
                    5d:1b:9c:5f:6d:c8:d6:44:09:d1:e3:15:da:b4:a4:
                    72:83:1b:ea:d8:f3:b0:d9:3b:28:c8:5b:f4:2d:15:
                    15:ad:72:6c:48:04:be:31:b2:93:db:0f:79:16:05:
                    e5:03:2d:15:b1:12:82:87:39:e2:c0:6d:88:30:7e:
                    af:13:de:0a:39:4b:56:8c:86:2a:51:e1:3f:5b:ce:
                    4d:13:85:be:81:9c:bb:54:9c:d6:a9:37:80:31:87:
                    3d:32:15:c7:10:40:fe:6a:28:2e:64:79:90:d9:30:
                    ce:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:06:8C:D1:0B:C6:3C:9E:A0:39:5A:3E:B8:1F:4F:2C:82:88:8A:9E
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a3730303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:4c:dc:7b:b8:30:ca:a2:50:14:d7:e2:12:65:29:25:dd:
         67:db:8b:a1:78:cd:71:fc:72:ab:f4:4f:ef:ab:8a:20:75:d1:
         88:f1:5b:c8:83:7e:97:f9:82:f1:6a:b2:eb:4c:4e:3c:e1:24:
         61:6b:5f:62:4b:dd:f1:47:4b:40:e5:a7:7d:a6:29:5f:dd:6f:
         f0:b2:95:c8:47:62:82:14:e5:75:ae:1c:7c:c4:19:88:8d:b1:
         4b:95:54:41:2a:19:f8:d1:1c:e6:31:1e:81:c0:5a:d9:51:d9:
         87:f8:d9:bb:da:39:05:c4:25:3e:85:98:ae:85:84:73:56:c0:
         1c:66:ad:0d:d1:d7:a5:31:c4:88:e9:bd:41:a9:4b:4c:f8:19:
         6d:2b:86:8c:4b:3e:5e:9c:ec:09:05:3c:b9:ed:d3:4c:83:1c:
         10:58:cc:86:90:1e:75:ad:b0:1a:79:ab:33:d0:e8:9a:a4:81:
         56:cc:ee:1e:a2:62:9d:c7:47:25:60:55:e9:31:2c:f9:54:6b:
         3c:d6:ef:49:c8:5f:46:a0:18:06:8c:f6:2b:09:49:7a:c1:c4:
         ff:4d:6a:92:bf:c9:cc:18:fa:0a:3d:b8:b9:57:7c:20:3a:97:
         4d:4d:fd:00:04:fa:6f:48:67:1b:0d:16:ff:54:8a:89:f8:90:
         8d:ac:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----