Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/323830333a393363303a3a2f33322d3332203d3e20323635373431.roa
File:                     323830333a393363303a3a2f33322d3332203d3e20323635373431.roa (raw, json)
Hash identifier:          ++iQb2riJ/7Ojhh3Vmr8mtwZQuIoidIt17syqflnqlM=
Subject key identifier:   77:F1:B6:51:E2:A4:FD:B9:EA:AA:E3:F1:CA:15:07:40:D1:D3:6C:3A
Certificate issuer:       /CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
Certificate serial:       18449D0D733229EBB66508B8482164A11F7F74E9
Authority key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/323830333a393363303a3a2f33322d3332203d3e20323635373431.roa
Signing time:             Sat 16 Mar 2024 00:00:00 +0000
ROA not before:           Fri 15 Mar 2024 23:55:00 +0000
ROA not after:            Sat 15 Mar 2025 00:00:00 +0000
asID:                     265741
IP address blocks:        2803:93c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:44:9d:0d:73:32:29:eb:b6:65:08:b8:48:21:64:a1:1f:7f:74:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
        Validity
            Not Before: Mar 15 23:55:00 2024 GMT
            Not After : Mar 15 00:00:00 2025 GMT
        Subject: CN=77F1B651E2A4FDB9EAAAE3F1CA150740D1D36C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:7b:90:cd:cf:bc:ef:93:b3:7c:df:84:f5:
                    42:da:84:a4:cb:9c:5e:cc:38:42:de:d8:a9:c2:8d:
                    a9:12:6c:f2:2e:07:1e:f7:8b:81:ea:64:0d:0a:30:
                    33:66:2c:8c:7a:89:36:ba:86:a9:44:b7:c8:84:b2:
                    84:32:80:12:53:0d:c9:66:52:07:9d:37:de:2f:a8:
                    20:fb:df:62:aa:f8:2c:be:9d:f2:88:55:c4:ad:b7:
                    64:92:5a:cb:d3:d9:05:88:9d:ba:ce:6e:f2:b7:81:
                    cc:2a:2f:62:85:34:e5:3e:08:ed:5d:bb:c4:28:10:
                    a9:35:f7:e0:3f:81:1c:97:18:03:5b:05:8f:66:ca:
                    29:72:ab:7a:49:a0:c5:84:60:9b:69:4f:54:ed:53:
                    d9:1b:ab:d4:81:ff:f5:49:04:6a:01:95:a3:18:22:
                    0d:90:d1:78:47:d2:14:db:61:b2:d3:09:30:0a:a0:
                    48:03:3d:3a:c0:8f:3f:f4:76:78:01:f6:f6:01:3c:
                    1c:03:bb:60:33:54:92:7c:07:db:6f:af:26:6b:2b:
                    4e:54:54:f6:0e:02:6e:09:8f:b3:4c:70:1a:63:d3:
                    87:c3:97:c6:12:34:e8:d8:11:41:42:da:6f:fc:5b:
                    7c:45:40:81:97:31:2d:e1:a7:07:5f:97:59:a1:da:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F1:B6:51:E2:A4:FD:B9:EA:AA:E3:F1:CA:15:07:40:D1:D3:6C:3A
            X509v3 Authority Key Identifier:
                keyid:71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/323830333a393363303a3a2f33322d3332203d3e20323635373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:93c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:3d:b2:c1:56:e5:fa:34:b5:5d:a0:21:2f:7a:f1:d2:3a:6c:
         9a:61:cc:b8:9d:3a:9e:00:93:b5:0e:11:44:ae:66:94:96:86:
         d3:4f:be:3c:59:f4:bd:13:7e:ae:3a:1b:aa:c4:6b:1f:94:a7:
         7e:c8:f1:c6:b2:03:88:17:6b:83:d2:37:6e:76:ab:8e:d3:f7:
         ae:fe:20:ff:91:85:88:7f:05:4c:97:86:4d:ee:a7:e7:86:6e:
         1c:92:d6:02:6a:42:15:f9:b4:bf:fe:76:70:d8:15:72:be:ab:
         49:92:4f:dd:10:34:5c:32:5a:fe:3e:37:ec:e8:bb:cb:a6:dc:
         37:f8:c4:a7:0a:ab:4a:c9:7d:60:9b:ad:a1:d9:b9:dd:f4:34:
         59:f0:52:9f:ab:4e:9d:b2:ec:7b:fc:c6:38:82:d6:0a:b8:f0:
         d0:92:34:25:ef:0e:69:5b:43:10:87:72:07:eb:68:26:d2:17:
         8f:5b:de:3c:eb:dc:dd:d8:20:cb:c0:ba:21:4c:47:af:7f:02:
         ad:46:20:8d:ad:a2:9b:e0:f4:06:71:8c:65:2e:5b:06:4f:09:
         c8:c4:d4:8d:c4:9d:c7:ce:03:b0:7e:0b:86:f6:fd:8d:65:9c:
         c1:16:20:31:68:3a:91:c4:3c:78:dc:46:d1:e8:7a:43:a4:ca:
         4c:3c:95:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----