Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/323830333a643561303a3a2f33322d3332203d3e203631343636.roa
File:                     323830333a643561303a3a2f33322d3332203d3e203631343636.roa (raw, json)
Hash identifier:          ILbRytdmQ3mRKx33SsVzGept+eK6H93gQ4gq4x4WiGM=
Subject key identifier:   64:1A:DE:6A:89:12:0E:1D:AB:BB:D6:23:39:BB:6E:3F:5B:97:35:2F
Certificate issuer:       /CN=A8D5E43848A8CF388939A53395C03EA7BB10B2EC
Certificate serial:       5000247B40CB55400C1460A500A10029D3166513
Authority key identifier: A8:D5:E4:38:48:A8:CF:38:89:39:A5:33:95:C0:3E:A7:BB:10:B2:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/323830333a643561303a3a2f33322d3332203d3e203631343636.roa
Signing time:             Tue 05 Mar 2024 18:02:30 +0000
ROA not before:           Tue 05 Mar 2024 17:57:30 +0000
ROA not after:            Tue 04 Mar 2025 18:02:30 +0000
asID:                     61466
IP address blocks:        2803:d5a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:00:24:7b:40:cb:55:40:0c:14:60:a5:00:a1:00:29:d3:16:65:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D5E43848A8CF388939A53395C03EA7BB10B2EC
        Validity
            Not Before: Mar  5 17:57:30 2024 GMT
            Not After : Mar  4 18:02:30 2025 GMT
        Subject: CN=641ADE6A89120E1DABBBD62339BB6E3F5B97352F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f7:db:8c:d2:a0:c6:e0:c7:ed:8d:27:a4:38:
                    f6:00:73:e4:39:d9:49:dd:c1:0d:5b:2c:41:96:04:
                    a7:59:95:00:c5:ac:17:f4:31:84:aa:d4:57:91:3e:
                    d8:2c:fa:08:58:cd:c9:bd:9e:03:7a:89:47:84:8c:
                    fc:ef:fd:d6:c7:c5:5d:b6:6d:aa:3d:bc:55:f5:06:
                    86:2f:85:5f:cb:12:2a:c5:d4:f3:70:79:4e:64:03:
                    d0:12:4c:c6:68:cf:3b:a3:6d:cd:d1:5b:04:5a:46:
                    78:8f:93:c0:e6:c1:50:31:c1:0f:e5:01:0b:9c:5c:
                    26:92:3c:a2:ca:fb:6e:1f:b9:e3:ff:a3:b9:0e:5f:
                    71:f6:a4:b4:1a:86:8a:2a:23:bb:24:4b:a2:7f:35:
                    c3:c9:03:94:a7:74:fe:5b:54:18:2b:5f:2d:ec:db:
                    32:b9:bd:32:4c:6d:64:ae:3e:06:9a:1d:a5:94:9e:
                    26:5d:23:cf:7f:61:bf:fa:76:c6:85:a2:ec:2a:39:
                    5a:81:f5:4f:22:8d:5e:c6:8a:0a:7d:2f:c2:30:d6:
                    5f:b5:d8:4f:2b:df:ca:df:30:52:c0:f0:85:90:ea:
                    3e:e9:ff:59:5d:3e:8e:5e:25:97:09:e9:11:35:18:
                    8f:74:77:4d:12:55:7d:1d:c8:fc:d8:1b:f1:a2:7b:
                    c1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1A:DE:6A:89:12:0E:1D:AB:BB:D6:23:39:BB:6E:3F:5B:97:35:2F
            X509v3 Authority Key Identifier:
                keyid:A8:D5:E4:38:48:A8:CF:38:89:39:A5:33:95:C0:3E:A7:BB:10:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8D5E43848A8CF388939A53395C03EA7BB10B2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D5F66F08A7D1AC141B2D62ED65FAEC9F7C957DD00B84937B5175B638EE52F04/0/323830333a643561303a3a2f33322d3332203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:f2:14:cc:f9:ea:ee:93:8e:58:57:ed:8b:51:3e:e7:40:87:
         7c:b6:b0:57:d1:ce:9f:73:47:b4:10:19:3c:69:91:e4:c9:0e:
         8b:75:f1:7a:f9:24:8e:d8:a3:d8:cf:db:09:31:8a:00:26:3d:
         c4:3f:2a:0a:7d:d3:3c:97:3e:5a:c0:b0:99:01:ee:4d:6c:63:
         34:e5:9e:07:ac:8e:c5:0e:8d:ec:22:6c:b5:6e:9e:7e:be:ec:
         1a:0f:b0:09:b7:48:e1:45:81:81:d3:3f:ea:f6:47:cc:7d:3e:
         58:15:67:f1:d1:61:da:db:d7:ab:78:36:72:ea:24:81:b3:46:
         bc:bd:25:10:51:0b:45:81:a7:53:5e:13:17:ea:e1:24:bc:11:
         72:f5:95:d2:4a:c3:03:01:cb:a8:fa:7c:e6:e6:81:24:6c:6a:
         8b:c7:bc:88:05:c9:dc:17:b8:b9:d9:c9:ca:b9:24:b9:91:5f:
         76:1f:42:cb:43:e8:15:61:30:66:4b:b4:a5:01:dc:1c:61:91:
         5b:6b:80:66:12:11:9c:d7:1e:95:c9:84:60:eb:45:79:a4:24:
         3e:7a:1c:3d:21:3c:9f:f9:d6:78:ae:dc:fc:e2:14:bd:8e:1f:
         fc:c1:99:da:d0:36:40:2b:f3:3e:0f:21:65:cb:74:85:fc:89:
         43:58:41:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----