Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a3a2f33322d3438203d3e203631343937.roa
File:                     323830333a643034303a3a2f33322d3438203d3e203631343937.roa (raw, json)
Hash identifier:          Epuekvb0vJWPaHwufuGqaQivUsVd/E5QanOn3tFBjss=
Subject key identifier:   DA:65:7A:4D:47:34:76:38:9B:99:CE:31:69:0C:44:DE:7F:32:8B:C2
Certificate issuer:       /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial:       21338453ABB0E80E7A7E4161E05CD64B3D35DDAF
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a3a2f33322d3438203d3e203631343937.roa
Signing time:             Tue 05 Mar 2024 18:17:47 +0000
ROA not before:           Tue 05 Mar 2024 18:12:47 +0000
ROA not after:            Tue 04 Mar 2025 18:17:47 +0000
asID:                     61497
IP address blocks:        2803:d040::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:33:84:53:ab:b0:e8:0e:7a:7e:41:61:e0:5c:d6:4b:3d:35:dd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
        Validity
            Not Before: Mar  5 18:12:47 2024 GMT
            Not After : Mar  4 18:17:47 2025 GMT
        Subject: CN=DA657A4D473476389B99CE31690C44DE7F328BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:56:a0:2f:93:e2:df:09:a1:53:e8:90:48:
                    f0:4f:74:0d:bc:e1:7a:54:c2:93:6f:36:ff:f8:60:
                    19:ec:d4:fd:1b:e3:5b:0a:f9:1d:52:0f:20:0e:8d:
                    cb:4b:2f:8a:4d:d8:0f:74:a3:d6:ee:27:a8:de:f3:
                    f3:1a:66:77:45:30:b3:c5:fd:64:9d:5c:03:89:bd:
                    4c:90:3a:f2:bc:21:03:26:44:4a:10:e4:63:0b:6b:
                    a3:ab:e6:0d:ad:33:a9:04:8a:06:f3:c9:54:96:ca:
                    07:32:6c:2e:5e:2c:13:c7:e2:5f:0f:fe:79:ed:23:
                    58:bb:f3:4b:f0:ff:f5:66:86:6b:9e:a2:5e:f5:54:
                    58:20:84:f3:d6:2f:f4:4c:08:b1:df:01:62:df:e1:
                    c7:3f:33:c1:6c:97:1d:03:80:79:5f:8e:d8:12:80:
                    87:30:70:8a:65:58:1b:1d:70:14:cf:18:b9:cd:7b:
                    dc:7b:1a:45:1f:48:9f:63:a5:35:6e:31:d4:17:e4:
                    92:00:ab:80:be:69:b5:94:cd:bd:67:7b:9f:8f:74:
                    29:27:e6:38:34:7e:d4:38:2a:8c:67:51:14:ed:dc:
                    e4:48:b5:50:f0:80:0f:c2:0f:5f:86:81:d9:91:61:
                    f1:c0:b7:15:b8:80:d1:3a:10:f2:dc:07:06:56:59:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:7A:4D:47:34:76:38:9B:99:CE:31:69:0C:44:DE:7F:32:8B:C2
            X509v3 Authority Key Identifier:
                keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a3a2f33322d3438203d3e203631343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d040::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:70:b4:65:a8:59:e8:ca:25:ee:b0:e0:c2:db:06:fd:cc:16:
         8a:e1:7a:36:71:0b:7e:8a:8b:31:c4:77:77:b8:d5:04:42:8f:
         ce:e1:30:92:fb:f9:61:2d:32:8b:17:d5:a3:0d:2c:8f:d6:f6:
         c7:6f:f0:9b:90:c6:8a:15:f1:46:69:0d:b0:bd:8e:b6:6e:4e:
         27:00:cf:1f:7b:6d:d6:f8:29:ad:f1:b6:91:16:18:c9:1b:dc:
         32:02:08:c4:a2:ee:25:46:03:78:51:47:94:22:db:db:a4:88:
         72:20:c8:24:4d:9b:db:ca:72:0d:3b:7c:8a:9c:42:df:95:5d:
         c0:54:9a:9d:53:15:53:7f:94:f6:09:3d:c5:1b:12:54:86:99:
         8d:ce:0d:fc:43:e3:c6:f0:d4:8a:f1:42:b6:54:fa:4f:dc:21:
         1d:6f:e3:e8:c8:2a:7e:69:0c:c2:c7:46:b0:39:f7:20:ef:25:
         ab:f0:52:a3:6c:35:8c:1f:0f:b8:8b:1a:13:b7:9c:08:e9:45:
         5d:64:d9:3f:ca:00:96:b3:63:15:8c:1a:f3:62:4a:84:10:f4:
         42:91:ab:d6:2f:49:8d:27:b9:2c:52:c0:89:8a:2f:b6:c0:aa:
         60:1b:a0:ca:aa:a4:8b:54:fa:cc:35:f7:aa:06:39:18:30:3f:
         e3:a0:fb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----