Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a353763303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          HMxqZDnW4WFdM2TeNo30iYSwTTUx2gQTs6xk23idKcI=
Subject key identifier:   98:F8:63:F6:9F:85:83:2B:A1:EC:F6:58:A4:73:C8:71:35:82:FA:C0
Certificate issuer:       /CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
Certificate serial:       0B2E03D8A8C3CD42F23775CF4317C364A81FE690
Authority key identifier: BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:04:05 +0000
ROA not before:           Tue 05 Mar 2024 17:59:05 +0000
ROA not after:            Tue 04 Mar 2025 18:04:05 +0000
asID:                     264668
IP address blocks:        2803:57c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2e:03:d8:a8:c3:cd:42:f2:37:75:cf:43:17:c3:64:a8:1f:e6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886
        Validity
            Not Before: Mar  5 17:59:05 2024 GMT
            Not After : Mar  4 18:04:05 2025 GMT
        Subject: CN=98F863F69F85832BA1ECF658A473C8713582FAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c3:ee:39:7d:1b:0a:77:1d:24:d2:0f:b1:d1:
                    53:35:32:7d:4d:f0:7b:36:c2:4a:ca:9b:33:69:95:
                    68:51:25:d1:e4:e9:23:de:00:74:01:b3:20:38:42:
                    34:2c:d5:cb:33:3e:bb:41:45:19:2f:df:f7:52:b6:
                    48:d8:2b:02:13:80:40:11:e3:56:41:31:15:92:e7:
                    cb:0b:d9:bc:bb:70:30:87:4d:b3:0c:4b:90:99:c3:
                    53:96:a9:fe:9c:86:bd:e8:2a:9f:23:db:db:3d:02:
                    5e:bd:d4:80:08:dd:90:97:2a:15:3d:cb:0b:bc:b7:
                    f1:ac:3f:2d:73:6a:73:90:85:da:34:24:50:90:2b:
                    df:59:b8:21:22:f0:0c:98:24:28:c6:e2:54:79:e2:
                    43:bc:fc:9f:72:7b:78:e5:8c:9f:df:ea:87:21:6c:
                    17:98:9b:49:ed:e8:af:f3:31:c9:93:3c:56:ea:ce:
                    d9:d0:f0:97:2e:60:af:01:20:8a:27:30:1a:f4:cb:
                    00:91:8d:15:1a:be:fd:66:63:db:c0:4f:ad:98:aa:
                    53:a3:fa:aa:45:15:89:f1:52:b1:e7:6b:10:d6:91:
                    fd:9d:f0:d7:f0:ff:83:c0:9d:05:da:8f:55:f0:c6:
                    cc:cd:94:84:88:22:fe:d7:28:56:5a:06:a6:4e:7d:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F8:63:F6:9F:85:83:2B:A1:EC:F6:58:A4:73:C8:71:35:82:FA:C0
            X509v3 Authority Key Identifier:
                keyid:BA:43:CC:9D:A5:DF:2E:86:CD:E2:76:C6:DD:5F:82:6F:16:2A:58:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA43CC9DA5DF2E86CDE276C6DD5F826F162A5886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D75AA3199BFADD81E2FA56BEDC57BEDECD719BC9E063F9F77E6730C4C5CB4FD/0/323830333a353763303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:57c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:b0:b7:7e:a1:1e:4b:50:1c:38:ce:af:ba:16:cf:e6:7d:43:
         99:e4:dc:10:a7:23:51:48:67:fd:5d:f6:05:5f:7f:fa:44:41:
         78:18:d2:b3:29:6b:36:fd:45:94:57:2c:33:2a:53:f0:d8:fd:
         5f:1f:67:fe:46:b7:24:ba:c6:50:96:c9:c1:26:11:9c:aa:4f:
         32:ec:d0:2c:81:1b:4b:30:f9:99:dc:a8:2a:7a:82:54:64:c8:
         5b:da:2e:29:69:26:d5:a7:ce:99:34:b2:f8:c0:d8:75:de:a1:
         36:e8:4f:e5:84:ac:70:59:79:cb:40:ec:2e:eb:1c:46:d1:9d:
         88:f7:6a:6d:e1:45:12:a0:63:c0:a6:72:8f:ec:1a:70:8d:99:
         1c:a4:c8:cc:2a:3b:77:ca:11:45:52:ad:2e:a6:25:fb:25:bb:
         5f:4c:ec:ef:41:52:ab:26:23:9d:77:55:8b:13:0a:19:14:dc:
         85:bf:44:0a:c1:2b:88:88:f5:8e:84:54:fe:0f:b5:f5:0e:ee:
         c4:a3:60:00:79:28:48:f9:84:8a:14:83:49:d0:16:8a:e0:f7:
         8b:58:4e:04:af:5f:4d:00:2f:60:44:4d:1f:5c:f6:62:ef:ad:
         ec:e0:ab:81:ac:43:51:96:30:b8:da:37:b3:fc:1f:4f:a8:5b:
         08:85:02:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----