Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/812F74A7AD0A93636C3984A9BE967A5891DAD9E4D3A2C45D8DFAF390BE31E2C2/0/323830333a363839303a3a2f33322d3438203d3e20323732383030.roa
File:                     323830333a363839303a3a2f33322d3438203d3e20323732383030.roa (raw, json)
Hash identifier:          qRkrh8v7CB1jVjaOGP/Tw3Aqsv3BilgJCrbsUe4M50g=
Subject key identifier:   BD:D2:4D:36:EC:94:5A:DA:9A:70:DB:87:BB:F0:FC:D1:62:10:8F:78
Certificate issuer:       /CN=02575F1BA13D436FEC62261AE219A69141C16A83
Certificate serial:       3EB9B958EF3555CDF0B7AAEC1223F276DB34D11E
Authority key identifier: 02:57:5F:1B:A1:3D:43:6F:EC:62:26:1A:E2:19:A6:91:41:C1:6A:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02575F1BA13D436FEC62261AE219A69141C16A83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/812F74A7AD0A93636C3984A9BE967A5891DAD9E4D3A2C45D8DFAF390BE31E2C2/0/323830333a363839303a3a2f33322d3438203d3e20323732383030.roa
Signing time:             Tue 05 Mar 2024 18:22:58 +0000
ROA not before:           Tue 05 Mar 2024 18:17:58 +0000
ROA not after:            Tue 04 Mar 2025 18:22:58 +0000
asID:                     272800
IP address blocks:        2803:6890::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b9:b9:58:ef:35:55:cd:f0:b7:aa:ec:12:23:f2:76:db:34:d1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02575F1BA13D436FEC62261AE219A69141C16A83
        Validity
            Not Before: Mar  5 18:17:58 2024 GMT
            Not After : Mar  4 18:22:58 2025 GMT
        Subject: CN=BDD24D36EC945ADA9A70DB87BBF0FCD162108F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7b:34:20:12:34:77:32:7e:0c:95:9c:ab:c5:
                    2c:b0:9f:c0:b5:a0:40:2d:f2:0a:df:2e:20:3b:f7:
                    7a:aa:e5:5e:d1:30:57:2a:41:6b:37:a9:c2:2c:e9:
                    5c:67:1d:42:12:d4:ec:e8:95:13:b8:c7:40:9b:6b:
                    56:db:f8:1b:40:2b:e4:93:dd:93:31:fe:2d:e2:e5:
                    6e:ff:3b:c6:ec:4b:d1:97:c1:40:71:e1:22:e6:95:
                    ac:f9:63:5e:9a:a6:65:f8:70:b0:55:bb:05:b8:0e:
                    c6:c7:25:25:29:a4:8b:35:2f:98:48:8c:04:5c:a4:
                    3a:ff:10:a8:b6:c0:3e:d9:37:eb:1e:59:bd:95:68:
                    e7:21:4f:10:9c:f1:13:47:a3:c8:16:fe:7b:e8:5f:
                    7c:e6:13:42:1e:22:c8:ca:74:6f:5d:ad:95:2a:30:
                    72:0a:c3:ab:63:bb:9b:37:b2:55:73:7e:b1:e8:fd:
                    ce:3b:e3:39:ee:34:f3:b5:e9:1d:ce:35:54:a4:87:
                    a8:b1:ad:6c:18:9e:b3:c9:ca:78:79:53:42:c1:3b:
                    76:01:3a:f5:ab:c4:3a:5f:4e:c6:ac:ac:63:f9:9e:
                    20:fa:01:c2:e5:f0:fc:77:bc:0b:7b:ae:94:a5:f7:
                    12:7c:cf:fc:7c:02:c7:9d:00:61:8c:04:19:e3:bb:
                    91:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D2:4D:36:EC:94:5A:DA:9A:70:DB:87:BB:F0:FC:D1:62:10:8F:78
            X509v3 Authority Key Identifier:
                keyid:02:57:5F:1B:A1:3D:43:6F:EC:62:26:1A:E2:19:A6:91:41:C1:6A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/812F74A7AD0A93636C3984A9BE967A5891DAD9E4D3A2C45D8DFAF390BE31E2C2/0/02575F1BA13D436FEC62261AE219A69141C16A83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02575F1BA13D436FEC62261AE219A69141C16A83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/812F74A7AD0A93636C3984A9BE967A5891DAD9E4D3A2C45D8DFAF390BE31E2C2/0/323830333a363839303a3a2f33322d3438203d3e20323732383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6890::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:94:b4:f3:d2:71:83:21:e0:3b:b7:89:51:2b:76:3f:0b:
         8f:48:0b:e2:0e:17:b8:23:99:46:a3:74:aa:46:ab:c6:b2:9d:
         0c:3d:77:a2:59:2f:b8:ec:3a:63:d9:1a:b3:3f:53:8e:a1:7b:
         6d:ff:12:a8:9d:7f:cc:e0:99:28:0c:02:02:d3:fb:84:9d:12:
         c5:67:8f:3f:33:26:43:f1:6b:84:cf:61:f3:54:13:e0:3e:17:
         d7:a6:cc:b0:9b:b3:c5:94:b3:8f:74:8b:a1:31:e9:41:27:3d:
         b3:6d:4f:53:c5:d8:a9:16:c0:81:6b:4c:e1:49:88:80:2f:aa:
         fe:45:18:5f:e6:0e:50:81:bb:ac:57:02:4e:5e:c3:be:34:0a:
         ea:48:7a:a3:8c:57:2c:2a:b8:c3:02:73:8f:57:e8:6c:e4:df:
         41:fe:4c:5c:b5:7b:ca:8e:57:a5:50:14:78:05:17:9c:f3:51:
         32:7d:6b:ea:60:0c:42:29:4e:df:78:6e:4f:48:43:c7:ed:da:
         91:7b:16:7e:e8:63:12:e3:02:74:50:84:f1:4d:f1:56:47:09:
         d2:36:48:28:89:71:94:38:81:c0:0d:67:98:47:ff:4e:6c:a9:
         9f:e2:57:ef:3c:f8:c0:4f:d2:ab:d3:cf:bf:a3:3d:36:02:09:
         3c:d5:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----