Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/323830333a36303a3a2f33322d3438203d3e20323634373432.roa
File:                     323830333a36303a3a2f33322d3438203d3e20323634373432.roa (raw, json)
Hash identifier:          R4aPMXfwIX4ASE7Na2xHb+Wmff1BzSJy1Ok4WwJ0ITw=
Subject key identifier:   DA:EF:71:04:78:27:8C:91:F4:05:89:CA:A7:BA:93:5A:02:EE:40:AA
Certificate issuer:       /CN=A5B5107F078EB56DD750A4838A5974EC7B109038
Certificate serial:       42F1610C5201F7EAA13B01C53C565A063282D586
Authority key identifier: A5:B5:10:7F:07:8E:B5:6D:D7:50:A4:83:8A:59:74:EC:7B:10:90:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5B5107F078EB56DD750A4838A5974EC7B109038.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/323830333a36303a3a2f33322d3438203d3e20323634373432.roa
Signing time:             Tue 05 Mar 2024 18:18:38 +0000
ROA not before:           Tue 05 Mar 2024 18:13:38 +0000
ROA not after:            Tue 04 Mar 2025 18:18:38 +0000
asID:                     264742
IP address blocks:        2803:60::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f1:61:0c:52:01:f7:ea:a1:3b:01:c5:3c:56:5a:06:32:82:d5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B5107F078EB56DD750A4838A5974EC7B109038
        Validity
            Not Before: Mar  5 18:13:38 2024 GMT
            Not After : Mar  4 18:18:38 2025 GMT
        Subject: CN=DAEF710478278C91F40589CAA7BA935A02EE40AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:a3:1f:0e:c7:59:ee:50:4e:06:98:b0:f1:
                    24:95:8d:af:61:fd:01:b3:88:b4:da:7b:ec:06:32:
                    bf:95:8e:8e:1e:6e:b2:5a:70:a9:f7:c0:1a:a0:8e:
                    22:04:48:95:58:91:99:63:13:b8:a1:30:e2:89:6e:
                    57:7c:bf:81:72:fc:fb:3a:67:ff:4c:ec:f4:58:f9:
                    6a:df:de:08:b9:cd:43:3e:72:48:60:16:f9:23:1c:
                    f3:d7:cf:bf:75:a5:ec:e7:dc:1f:3f:ee:35:99:16:
                    04:c4:57:28:e7:03:b0:d5:8e:2f:1b:9d:0b:5b:a6:
                    0d:ef:41:a8:a3:28:c2:bd:de:7e:05:e7:bd:fa:7b:
                    01:a9:83:9e:6d:46:f0:89:6a:92:0a:15:c9:e2:9f:
                    c7:7a:59:c3:d9:6f:22:68:f9:68:65:8c:5f:91:b0:
                    2c:a2:22:ea:45:b3:ff:f6:76:96:5f:4b:e9:75:f2:
                    2d:b0:43:6a:26:d7:72:fc:b4:46:4d:46:b7:ce:16:
                    55:f2:12:30:48:9a:ff:a5:fb:8f:ff:2a:e0:95:ac:
                    70:de:e7:33:4f:07:51:48:6f:a8:7d:db:7a:ab:b0:
                    22:83:4e:2f:36:4a:0c:be:0c:fc:59:e9:90:1c:7b:
                    bb:3a:ea:1a:cf:34:fb:af:41:c4:09:7c:af:74:13:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EF:71:04:78:27:8C:91:F4:05:89:CA:A7:BA:93:5A:02:EE:40:AA
            X509v3 Authority Key Identifier:
                keyid:A5:B5:10:7F:07:8E:B5:6D:D7:50:A4:83:8A:59:74:EC:7B:10:90:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/A5B5107F078EB56DD750A4838A5974EC7B109038.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5B5107F078EB56DD750A4838A5974EC7B109038.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C0AC67D7A820808C266570DD77E8A9DAD954E5D03B9E26A488AEB222173FB36/0/323830333a36303a3a2f33322d3438203d3e20323634373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:60::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:99:b6:13:b3:5a:fd:ce:58:8f:19:c8:e1:46:48:4c:78:05:
         c1:90:6e:d5:57:c9:fc:14:1a:73:24:bd:f9:c1:c2:8d:af:8c:
         5b:fb:e1:f0:58:48:9c:b2:6f:bb:ef:0c:b3:ae:23:84:7c:f4:
         f4:f8:11:f9:c5:49:ba:3f:cd:3e:55:0a:ec:8f:29:79:70:c6:
         3e:6b:e1:7a:d1:a1:86:b3:76:db:73:23:ca:96:9e:66:00:98:
         2b:40:22:1b:0a:a0:38:4b:8c:63:85:0d:f0:28:aa:19:25:17:
         b0:18:1c:31:9b:24:d6:7b:97:6f:0d:48:57:78:2c:f5:96:a5:
         4e:c1:39:46:10:e7:72:60:8c:6f:52:26:bd:9f:5b:02:05:4e:
         4b:e7:ee:ea:45:4e:7c:2a:a9:d8:77:93:17:24:73:43:53:8c:
         32:9e:ee:e1:f6:49:98:eb:44:ee:72:d0:7f:8f:a7:98:10:54:
         b4:4b:82:bf:24:16:de:0d:6d:81:17:32:fe:98:98:68:0a:4a:
         50:12:00:09:41:a5:5b:ef:00:0e:83:95:b7:22:72:54:17:65:
         d8:64:ed:93:e1:a4:9a:46:df:4d:ad:11:55:a5:94:c3:98:54:
         05:96:f6:b1:e4:1c:c6:bc:63:f1:b2:6c:57:82:5a:d8:18:94:
         38:32:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----