Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/323830333a633432303a3a2f33322d3438203d3e20323731393333.roa
File:                     323830333a633432303a3a2f33322d3438203d3e20323731393333.roa (raw, json)
Hash identifier:          Jzd08VufIdWZvEdV6LK19gdtDiFpUNPS44kdbCF6Gc0=
Subject key identifier:   F4:8A:27:31:15:3B:E6:F2:14:D7:38:80:FA:79:BC:C6:06:42:D5:23
Certificate issuer:       /CN=E82376114B533B210E3DA974DE7523551E7BB8F8
Certificate serial:       70BD2C610E26BA654A68D5C24EBD72F757C53156
Authority key identifier: E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/323830333a633432303a3a2f33322d3438203d3e20323731393333.roa
Signing time:             Tue 05 Mar 2024 18:07:35 +0000
ROA not before:           Tue 05 Mar 2024 18:02:35 +0000
ROA not after:            Tue 04 Mar 2025 18:07:35 +0000
asID:                     271933
IP address blocks:        2803:c420::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bd:2c:61:0e:26:ba:65:4a:68:d5:c2:4e:bd:72:f7:57:c5:31:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82376114B533B210E3DA974DE7523551E7BB8F8
        Validity
            Not Before: Mar  5 18:02:35 2024 GMT
            Not After : Mar  4 18:07:35 2025 GMT
        Subject: CN=F48A2731153BE6F214D73880FA79BCC60642D523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e8:6a:13:84:8c:d7:83:1e:2b:1d:24:7f:8f:
                    31:3c:fe:5f:7c:31:5a:f0:0e:a9:91:10:e2:10:08:
                    c4:e1:4f:36:ad:d3:45:72:eb:e3:d7:53:35:12:15:
                    0d:14:ea:e4:84:ab:92:17:aa:65:ec:3c:d9:e6:b5:
                    4f:e6:d3:c5:02:5e:7f:29:92:8f:a0:fd:ef:47:ae:
                    77:b8:0a:bd:5c:87:89:62:12:3a:ee:f8:4e:3d:80:
                    3f:42:4d:81:32:5d:49:c2:e5:c1:10:de:08:75:b6:
                    46:a3:4e:cd:6d:99:8a:f7:81:e1:90:84:83:52:17:
                    c7:d1:d9:18:96:ad:82:df:ea:40:a4:dc:51:93:72:
                    1c:a3:df:ff:bc:40:c7:51:c0:85:28:47:26:e5:24:
                    6d:66:3c:e7:5b:6e:06:33:cc:b3:00:e7:2e:ed:76:
                    65:c6:05:05:bd:79:55:10:25:fd:0b:ab:3d:91:46:
                    8f:af:26:4f:7d:ad:0b:55:a4:53:e3:f6:8b:2e:21:
                    16:f7:e2:f1:18:73:59:63:b2:87:98:bf:d8:14:62:
                    7c:5c:6f:70:d8:c4:f5:05:82:01:c4:22:2c:24:71:
                    88:c9:2e:f1:3b:ec:56:6d:f0:20:4d:0a:dd:f2:f4:
                    0f:3f:43:35:dc:f4:75:6b:f6:81:e9:3d:d4:0e:12:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8A:27:31:15:3B:E6:F2:14:D7:38:80:FA:79:BC:C6:06:42:D5:23
            X509v3 Authority Key Identifier:
                keyid:E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/323830333a633432303a3a2f33322d3438203d3e20323731393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c420::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:be:4a:1a:3f:6a:5d:74:ca:97:f6:28:00:7f:77:9c:12:
         d9:b6:57:05:10:69:9c:48:a2:97:34:14:7d:b2:79:dd:6f:94:
         28:f2:af:c6:6f:8f:2a:68:10:04:95:19:0c:88:35:e6:d6:68:
         d0:1b:36:fc:68:47:65:e1:1d:4f:3e:bd:0f:b4:e8:63:c3:40:
         c9:c0:cb:5d:0c:ec:d8:e3:e0:40:e5:f3:66:1f:06:86:b9:35:
         d8:e0:07:43:d7:8e:76:74:1f:a2:71:b8:32:eb:64:3b:8b:b4:
         92:02:6a:c9:04:2e:aa:a1:52:8a:9a:d8:36:60:b4:79:c6:92:
         68:f6:c0:7e:23:11:6d:a8:d7:48:d3:10:87:20:03:38:17:38:
         42:e9:42:01:1c:d0:72:df:3e:2e:0a:5b:58:86:0e:f6:6e:61:
         a1:e7:a2:14:c8:b5:b7:5e:ba:a5:fa:44:2e:03:59:9d:c8:3a:
         5c:fc:80:65:73:60:05:9c:ca:72:1b:9b:dd:ae:16:b3:7a:b3:
         07:9c:19:72:6e:35:2a:01:29:e7:3f:82:4c:d4:f1:40:e6:03:
         de:7f:22:6d:12:e9:cf:ce:9b:13:bb:17:aa:c7:b6:3c:75:d0:
         dd:e9:87:30:6f:5b:e5:f9:a8:6e:5b:f0:b7:d0:9b:99:b5:88:
         ce:36:15:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----