Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/323830333a326136303a3a2f33322d3332203d3e20323637383831.roa
File:                     323830333a326136303a3a2f33322d3332203d3e20323637383831.roa (raw, json)
Hash identifier:          Zhzjdcg5aUo1KKS+haF3i1ofG24w78nWaFtqvT4gY1Q=
Subject key identifier:   A9:1E:50:28:29:A4:3E:6F:FD:5C:DE:50:41:7A:2C:35:C2:49:97:F2
Certificate issuer:       /CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
Certificate serial:       7CAF2A531462003369A3999ACFD844265EC76CEE
Authority key identifier: DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/323830333a326136303a3a2f33322d3332203d3e20323637383831.roa
Signing time:             Tue 05 Mar 2024 17:57:18 +0000
ROA not before:           Tue 05 Mar 2024 17:52:18 +0000
ROA not after:            Tue 04 Mar 2025 17:57:18 +0000
asID:                     267881
IP address blocks:        2803:2a60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:af:2a:53:14:62:00:33:69:a3:99:9a:cf:d8:44:26:5e:c7:6c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
        Validity
            Not Before: Mar  5 17:52:18 2024 GMT
            Not After : Mar  4 17:57:18 2025 GMT
        Subject: CN=A91E502829A43E6FFD5CDE50417A2C35C24997F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:c0:2d:95:49:e3:ff:5e:97:51:e4:e3:65:
                    51:ca:95:60:32:f3:85:de:1b:29:e2:86:ed:47:5d:
                    58:ed:ce:12:ea:0a:48:92:92:3f:fa:76:06:ed:a7:
                    66:25:7b:fa:60:b1:86:ee:48:17:5a:0d:47:88:0a:
                    55:29:8f:44:9a:0d:08:4d:b8:e1:d5:ec:e3:f5:66:
                    0f:6b:d4:a8:aa:12:53:a9:b9:9f:28:7e:58:c5:16:
                    63:db:60:0c:77:96:21:6a:9d:a1:a8:c1:ab:af:0b:
                    38:66:58:57:da:e7:28:10:25:78:f0:fe:dc:60:2d:
                    67:8d:a3:d6:2b:35:c7:8f:4f:72:1d:3c:f8:7f:23:
                    74:f1:57:63:f8:97:f6:1f:1a:f6:28:6c:de:3a:bd:
                    9b:5e:ac:6e:aa:45:a5:31:0a:76:39:1d:65:b1:50:
                    a3:10:fc:a9:fc:fb:5b:c7:cc:4d:46:c8:36:52:ca:
                    4b:f2:1a:78:ff:c1:0e:67:0c:9c:71:30:ea:20:a1:
                    31:f1:95:67:ed:f7:7a:a2:de:56:d0:8a:2a:7d:df:
                    94:32:2f:51:0e:2c:93:e3:da:ef:80:f6:1b:07:38:
                    a0:f8:28:0e:33:82:7f:d2:dc:e7:fb:a4:9b:c1:24:
                    c8:ec:6e:90:ad:1a:ab:85:ab:da:ed:5b:19:3b:d8:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:50:28:29:A4:3E:6F:FD:5C:DE:50:41:7A:2C:35:C2:49:97:F2
            X509v3 Authority Key Identifier:
                keyid:DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/323830333a326136303a3a2f33322d3332203d3e20323637383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:b4:f8:e0:03:be:49:00:a7:20:6e:dd:9c:e5:ed:ce:22:1a:
         3a:1c:f2:f7:2d:84:bf:e2:e5:5a:80:91:05:fa:1c:44:50:50:
         f3:95:95:01:fd:a2:b9:b1:96:06:b7:bf:14:a5:ec:e5:67:2d:
         f7:b6:67:5a:79:75:07:5c:ae:87:f9:2d:b6:12:de:4b:6f:ea:
         d4:a1:b1:15:42:44:bb:c4:1e:e4:b2:d0:2c:ff:ef:51:02:51:
         d6:29:43:09:ca:48:34:35:a3:33:9b:9b:8f:41:61:5e:31:90:
         48:6b:c6:7a:05:0d:7b:cf:07:43:27:e3:f9:f5:27:3f:09:48:
         f5:02:20:a9:e6:cd:2b:fb:8a:8a:e3:9f:1d:52:d8:c6:16:6f:
         d7:b1:53:c1:90:11:74:49:18:0a:ed:63:58:18:97:f4:c1:b1:
         9d:90:9f:2a:1a:9a:d8:80:ce:0b:93:dd:ab:96:94:52:49:f9:
         eb:7a:10:82:47:0b:54:0e:fe:66:17:67:b7:51:8e:be:17:2a:
         24:dd:8e:98:28:cb:10:a1:48:7e:48:57:4a:35:85:63:af:17:
         d3:6f:7f:5b:54:78:dc:a3:13:15:e5:89:67:af:9f:b4:40:13:
         28:a5:e3:5c:96:0b:93:ed:39:a9:20:82:75:28:72:c7:bd:f0:
         ce:28:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----