Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87F0ED2128675276C08144AE1A9B9B3882E0E3D6E29C5898C6AF9F98852AB1FC/0/323830333a356131303a3a2f33322d3438203d3e20323731393330.roa
File:                     323830333a356131303a3a2f33322d3438203d3e20323731393330.roa (raw, json)
Hash identifier:          6QgHKkBf5U1E84WAB2fZWFw8xajL3Vh/ylisuRfcZ7Y=
Subject key identifier:   1E:3C:2E:D3:3E:E6:82:D2:3A:02:20:D8:23:54:02:6F:03:6B:E3:11
Certificate issuer:       /CN=E93FA671B6BB58186AC92380F285964D21BE8982
Certificate serial:       5A0C1DD2CA8F8D3D557307DEC078787466C16E2D
Authority key identifier: E9:3F:A6:71:B6:BB:58:18:6A:C9:23:80:F2:85:96:4D:21:BE:89:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E93FA671B6BB58186AC92380F285964D21BE8982.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87F0ED2128675276C08144AE1A9B9B3882E0E3D6E29C5898C6AF9F98852AB1FC/0/323830333a356131303a3a2f33322d3438203d3e20323731393330.roa
Signing time:             Tue 05 Mar 2024 18:11:10 +0000
ROA not before:           Tue 05 Mar 2024 18:06:10 +0000
ROA not after:            Tue 04 Mar 2025 18:11:10 +0000
asID:                     271930
IP address blocks:        2803:5a10::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0c:1d:d2:ca:8f:8d:3d:55:73:07:de:c0:78:78:74:66:c1:6e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93FA671B6BB58186AC92380F285964D21BE8982
        Validity
            Not Before: Mar  5 18:06:10 2024 GMT
            Not After : Mar  4 18:11:10 2025 GMT
        Subject: CN=1E3C2ED33EE682D23A0220D82354026F036BE311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:85:11:77:86:b6:48:e5:2d:55:47:2e:b7:
                    0c:c1:01:41:15:f5:f9:89:54:a5:cb:bb:9d:1c:1a:
                    a0:91:f7:ef:e5:7f:13:bd:78:67:66:58:23:21:de:
                    35:83:e9:8a:0c:4f:0e:f9:5d:02:a3:8b:be:66:6f:
                    8a:8d:e8:99:80:02:1f:3a:59:93:b6:58:cb:60:f9:
                    d2:64:a5:07:e1:e5:16:f4:52:9a:9c:36:60:e0:a2:
                    ae:5f:13:8e:fa:41:44:e4:a5:70:08:6b:9b:30:85:
                    d9:dc:6f:37:31:5f:66:cd:94:ed:08:ab:81:b0:0a:
                    66:72:1b:c1:51:99:bb:0f:3f:30:e5:d5:03:67:0f:
                    e5:0c:34:fc:c4:76:0b:ec:7c:a1:13:bb:d8:1b:56:
                    d7:15:db:cd:1d:36:dd:91:a0:aa:40:ba:02:c3:6c:
                    d1:f2:ce:73:43:24:c1:d9:ff:d0:25:58:09:a2:bc:
                    97:90:d5:00:14:4f:70:71:99:31:6a:17:d2:f8:7c:
                    8a:a0:e5:81:6d:c3:70:ab:84:10:f3:e1:2f:d9:8a:
                    1d:e6:98:17:80:94:3c:d3:90:d1:1e:08:30:eb:29:
                    5d:93:7f:66:0e:a0:7e:8c:67:c7:cc:48:27:d8:ee:
                    d0:c1:99:13:cd:04:15:1d:37:4c:21:69:0a:1b:41:
                    0a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3C:2E:D3:3E:E6:82:D2:3A:02:20:D8:23:54:02:6F:03:6B:E3:11
            X509v3 Authority Key Identifier:
                keyid:E9:3F:A6:71:B6:BB:58:18:6A:C9:23:80:F2:85:96:4D:21:BE:89:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87F0ED2128675276C08144AE1A9B9B3882E0E3D6E29C5898C6AF9F98852AB1FC/0/E93FA671B6BB58186AC92380F285964D21BE8982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E93FA671B6BB58186AC92380F285964D21BE8982.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87F0ED2128675276C08144AE1A9B9B3882E0E3D6E29C5898C6AF9F98852AB1FC/0/323830333a356131303a3a2f33322d3438203d3e20323731393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:ad:b4:f0:63:9a:1f:57:1c:56:e5:ad:b2:32:3b:3d:ed:68:
         17:86:f9:09:51:49:e0:36:7b:4c:8f:de:4c:3a:23:06:94:b7:
         cf:ed:f7:14:ac:fb:b9:5e:4d:a0:d3:97:a8:5c:8e:3c:fe:db:
         25:44:2f:52:4a:ba:c8:ab:c7:37:ae:65:28:c0:03:42:58:43:
         83:70:20:b6:15:4d:48:2a:c2:8e:81:51:c9:11:9c:6e:2d:c9:
         c8:12:94:d0:d5:03:cd:71:8e:00:f1:61:49:5b:fc:1e:c1:84:
         2a:d1:63:55:4f:74:4d:3a:46:57:3d:88:ab:7e:96:c9:77:23:
         a5:3f:e8:58:09:af:db:39:25:fb:cb:2a:d2:c2:c6:c7:ba:f4:
         ac:c9:5e:b4:51:6e:0c:37:48:11:2c:41:5b:fe:65:66:c2:16:
         1a:84:85:60:1a:25:65:8d:c8:f5:64:2b:b6:49:92:79:70:89:
         e3:ba:86:2d:dc:5e:7a:e1:11:2d:aa:36:c9:86:53:aa:85:a3:
         17:55:ba:d2:f4:dd:a2:8a:2c:1a:91:1a:c6:a9:57:7d:23:2b:
         85:3e:2d:08:2f:a9:d0:5a:f6:f6:d1:56:ff:8d:06:12:8b:b8:
         a6:6a:78:f3:68:68:cf:54:9b:7e:85:a3:bc:fa:42:25:85:b1:
         86:20:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----