Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/323830333a363338303a3a2f33322d3438203d3e203130363137.roa
File:                     323830333a363338303a3a2f33322d3438203d3e203130363137.roa (raw, json)
Hash identifier:          AF/QXpdWV5lXDvw6tCW4jVjWrHd+Ja2mKKle4e5i4+w=
Subject key identifier:   B2:98:C0:B8:14:3D:94:4B:88:40:BF:99:D8:30:0E:49:9C:49:7D:0F
Certificate issuer:       /CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
Certificate serial:       031F408907B56C1F3951B657313B453C680DA3F2
Authority key identifier: 16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/323830333a363338303a3a2f33322d3438203d3e203130363137.roa
Signing time:             Tue 05 Mar 2024 18:15:22 +0000
ROA not before:           Tue 05 Mar 2024 18:10:22 +0000
ROA not after:            Tue 04 Mar 2025 18:15:22 +0000
asID:                     10617
IP address blocks:        2803:6380::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1f:40:89:07:b5:6c:1f:39:51:b6:57:31:3b:45:3c:68:0d:a3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
        Validity
            Not Before: Mar  5 18:10:22 2024 GMT
            Not After : Mar  4 18:15:22 2025 GMT
        Subject: CN=B298C0B8143D944B8840BF99D8300E499C497D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:e1:6e:51:5b:b2:25:22:64:d3:6a:e2:2b:
                    5d:b3:d3:46:00:31:7d:71:87:e4:ce:af:8d:49:19:
                    dd:e2:2a:c0:55:c9:35:ce:0e:68:bd:2a:3b:f7:9e:
                    f5:61:ac:f4:84:ab:ff:56:47:a2:ce:1c:0a:68:5a:
                    33:92:30:74:29:29:05:f2:3a:ab:14:33:6c:c4:03:
                    db:96:67:08:d7:c3:02:06:db:b5:dd:a3:0d:d4:fd:
                    3e:7c:8d:9e:4b:e7:87:bd:75:1a:8c:52:0e:1a:18:
                    f2:07:33:1d:75:68:7f:97:af:75:a2:50:41:e1:ad:
                    24:58:2b:ad:46:f7:8f:02:50:a1:17:ba:4c:2b:98:
                    77:76:95:d7:8c:bf:fd:49:ef:7e:19:1f:74:17:88:
                    d0:bb:66:4c:b8:4b:d4:e4:61:e1:e9:1c:a7:5d:47:
                    d9:cc:a2:77:2a:b8:f0:59:ef:28:4f:70:25:f2:ca:
                    70:ba:03:8f:4c:d1:b2:49:85:ce:dc:ae:9f:4d:42:
                    d2:9a:f1:80:5c:26:ee:59:46:67:1f:29:ee:dd:92:
                    06:af:4c:32:84:f8:85:ad:ee:4d:a8:8e:de:7f:d3:
                    71:ad:76:ef:5b:1a:90:e0:22:cd:6d:88:93:36:8c:
                    57:18:85:f8:0b:f3:fa:20:fa:be:38:c3:11:0e:df:
                    42:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:98:C0:B8:14:3D:94:4B:88:40:BF:99:D8:30:0E:49:9C:49:7D:0F
            X509v3 Authority Key Identifier:
                keyid:16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/323830333a363338303a3a2f33322d3438203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6380::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:4c:13:48:0d:ac:2b:3f:e3:1e:cc:b5:79:84:90:9c:8d:
         53:1d:66:c8:3b:19:81:03:90:7b:d3:8a:bc:c9:e1:93:34:ac:
         17:4a:28:fd:56:52:7f:34:8b:27:74:1f:9b:e5:5f:db:83:ac:
         c5:64:ce:cc:f5:f4:c5:08:bf:72:53:65:77:b9:a7:96:62:f8:
         64:8e:45:f0:6e:2b:1f:df:01:95:b9:31:6f:fe:5d:94:d3:1e:
         8a:fe:99:7f:1c:46:78:38:82:92:3a:38:e9:d8:3e:53:20:ab:
         74:ca:9c:23:f5:a0:2c:67:10:81:32:7a:8d:61:3b:ec:e1:17:
         45:bb:9f:75:25:ed:23:85:96:5e:92:f7:b1:63:1e:b3:8b:af:
         e2:73:1c:ff:03:34:02:4d:a3:7d:54:bd:be:18:18:a6:9f:3a:
         b6:d5:48:f9:ba:0f:68:55:13:d0:28:79:62:b5:7d:d1:87:ba:
         35:dc:7a:59:42:5b:93:db:bb:26:b4:29:cc:f5:77:ea:76:ba:
         77:51:35:f3:38:2b:c3:ab:97:37:a3:f6:8e:54:b9:1d:ea:23:
         8f:6a:45:ed:80:f2:a1:8f:c3:72:42:66:36:6a:00:37:58:b5:
         d1:16:59:71:ef:db:84:c3:44:1c:38:ce:04:2a:0b:bd:15:44:
         b5:07:92:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----