Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a393030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a393030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          jTP4ZMaaWoYIFOiDHxFrIaa4j+voQdgGEUmS78vvcew=
Subject key identifier:   B6:DD:3D:FA:7E:69:FE:49:2A:CD:25:8D:24:6B:D9:06:4D:A7:D2:CD
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       588C8EB6DEF6C9C278F40315CB9338DB2822C187
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a393030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:15 +0000
ROA not before:           Tue 05 Mar 2024 18:12:15 +0000
ROA not after:            Tue 04 Mar 2025 18:17:15 +0000
asID:                     27818
IP address blocks:        2803:3380:9000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8c:8e:b6:de:f6:c9:c2:78:f4:03:15:cb:93:38:db:28:22:c1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:15 2024 GMT
            Not After : Mar  4 18:17:15 2025 GMT
        Subject: CN=B6DD3DFA7E69FE492ACD258D246BD9064DA7D2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7d:02:a2:31:3b:2d:ac:3b:c0:4d:93:7b:0e:
                    87:41:30:ba:11:25:10:77:34:ff:c0:81:25:ea:17:
                    8a:2c:7a:ed:4f:9c:2b:15:20:32:27:ce:66:e4:5e:
                    d8:3b:43:88:17:3e:7c:39:03:03:7e:9f:16:cd:66:
                    df:80:b0:c2:c4:40:e3:1c:a0:1a:a1:0d:d2:e9:f2:
                    f0:28:34:62:36:6a:33:1a:8e:f4:06:81:4e:ed:72:
                    af:c0:ef:3f:bb:99:47:c7:f4:6c:32:07:fc:bf:43:
                    c7:3b:eb:73:6b:e5:6d:a0:ea:71:62:d7:46:d7:19:
                    96:13:ff:7e:1f:0a:34:e9:0b:ca:f5:dd:1e:0d:02:
                    0b:4b:4a:12:04:77:a7:ff:cb:40:22:8b:1e:17:85:
                    fd:7d:8e:9d:36:dd:fb:02:e5:3d:a8:c1:ca:f2:8a:
                    26:a3:43:82:31:67:6e:c4:87:4f:2a:bb:2c:8f:89:
                    28:4b:61:d3:bf:d8:a3:fa:92:99:e2:c3:72:2e:64:
                    86:49:42:cf:e7:37:cc:8a:cc:be:7f:8e:d4:15:53:
                    12:d9:ff:4b:c6:50:2c:f1:80:79:88:03:cc:c8:c0:
                    dc:a6:46:b7:24:51:44:bc:dd:dc:c0:47:5c:5e:c5:
                    3b:9b:7f:88:21:16:3d:07:d1:f0:93:d4:54:7d:45:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DD:3D:FA:7E:69:FE:49:2A:CD:25:8D:24:6B:D9:06:4D:A7:D2:CD
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a393030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         92:bb:43:b4:a3:a2:37:66:2b:1d:86:2b:88:40:0a:cf:ca:40:
         ff:b9:6e:67:dc:c7:c6:47:52:ab:9a:d6:df:5b:35:ca:98:24:
         b4:95:ed:9f:30:c6:f4:f8:98:a5:ce:44:ec:7d:31:ee:b8:2b:
         73:61:73:a9:e3:09:2f:b0:9e:ef:9f:0a:17:b9:ea:d1:2f:b8:
         71:eb:d8:25:c2:e5:2d:7d:5d:90:99:9f:26:e7:5f:59:da:15:
         4b:d0:44:1e:5b:cc:f0:5d:34:5d:2b:5f:02:15:f3:ba:b2:d4:
         04:d0:3d:ee:ed:b8:fc:4d:a5:23:03:e1:9b:75:f8:21:a0:dd:
         b6:89:9c:ed:e3:45:71:43:25:c4:62:46:5a:ba:e9:c8:3b:39:
         db:7b:ec:21:2e:21:e9:6d:9f:90:a7:98:52:d5:6d:80:12:a0:
         eb:ab:87:f3:4f:f3:60:b5:4f:bb:59:2e:02:88:c0:5e:f8:95:
         2b:76:3d:6e:21:c6:89:10:ba:46:38:93:67:d1:15:91:20:0b:
         fb:96:3c:28:47:a6:47:ec:30:3c:95:0c:3e:54:1e:07:dd:5d:
         7f:fe:4e:6b:74:25:0d:8c:c0:e7:d4:23:0e:6c:65:2c:53:6f:
         51:7b:50:36:6d:cb:74:2b:f9:03:d3:b5:36:e1:82:78:9d:7a:
         10:f7:2c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----