Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB77D0B4D23BCBE780AE5CA174587C8EA98CBEDD91FCCB151A80B5E5A151CF13/0/323830333a666131303a3a2f33322d3438203d3e20323731393336.roa
File:                     323830333a666131303a3a2f33322d3438203d3e20323731393336.roa (raw, json)
Hash identifier:          M9LCebKaoTxqa/XPp2FPW/GWd/gclNkkXDZSbHRTV2U=
Subject key identifier:   5C:50:4D:B9:BE:B0:A9:05:DB:01:F2:7F:09:DC:81:EE:F2:48:0C:98
Certificate issuer:       /CN=53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B
Certificate serial:       646D84EE87B2EBB38FD421616F122FAC50F7832F
Authority key identifier: 53:C6:FA:7F:2B:93:D2:B9:11:B3:F4:9B:BF:9C:49:C0:99:EE:D2:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB77D0B4D23BCBE780AE5CA174587C8EA98CBEDD91FCCB151A80B5E5A151CF13/0/323830333a666131303a3a2f33322d3438203d3e20323731393336.roa
Signing time:             Tue 05 Mar 2024 17:50:36 +0000
ROA not before:           Tue 05 Mar 2024 17:45:36 +0000
ROA not after:            Tue 04 Mar 2025 17:50:36 +0000
asID:                     271936
IP address blocks:        2803:fa10::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6d:84:ee:87:b2:eb:b3:8f:d4:21:61:6f:12:2f:ac:50:f7:83:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B
        Validity
            Not Before: Mar  5 17:45:36 2024 GMT
            Not After : Mar  4 17:50:36 2025 GMT
        Subject: CN=5C504DB9BEB0A905DB01F27F09DC81EEF2480C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:dc:20:ba:dd:93:0a:f6:5d:43:ee:11:2e:
                    fa:c9:fd:04:70:5b:24:29:cd:0c:00:a6:31:12:73:
                    23:bb:df:f0:d1:3f:52:ce:91:35:02:53:e6:c6:a2:
                    2c:6b:b3:6c:a5:37:b2:56:84:f1:91:b7:74:5f:ac:
                    08:00:fb:0d:ee:fd:50:25:30:2a:10:17:6e:92:63:
                    0c:7d:db:ed:a0:fe:27:67:71:fa:4b:e5:ad:15:56:
                    86:3e:4d:10:e4:cb:40:82:9d:45:12:9b:94:80:71:
                    f9:a7:17:a9:64:47:8f:b6:df:34:0e:d7:22:83:af:
                    2c:8f:58:d2:43:a6:09:bc:7c:d2:3c:87:b7:c7:70:
                    50:88:6c:db:b5:b3:c8:1a:5b:50:79:d4:3c:49:8c:
                    12:58:28:f1:65:07:61:2f:dd:b6:6d:06:18:8b:ef:
                    eb:54:c3:0e:1b:06:32:21:d0:04:22:32:80:00:ce:
                    97:2c:90:c7:de:7b:bf:74:da:1a:fd:7f:5b:6a:29:
                    a2:d2:ea:71:56:92:e8:f0:c0:df:90:16:37:a2:b7:
                    83:8e:31:48:c4:1f:4c:f4:6c:32:5b:74:dd:d9:8f:
                    57:18:17:74:e2:c7:8e:ae:1a:a9:40:65:35:bf:08:
                    da:18:08:04:9d:d1:d1:6a:db:80:d5:dd:99:18:1f:
                    66:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:50:4D:B9:BE:B0:A9:05:DB:01:F2:7F:09:DC:81:EE:F2:48:0C:98
            X509v3 Authority Key Identifier:
                keyid:53:C6:FA:7F:2B:93:D2:B9:11:B3:F4:9B:BF:9C:49:C0:99:EE:D2:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB77D0B4D23BCBE780AE5CA174587C8EA98CBEDD91FCCB151A80B5E5A151CF13/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C6FA7F2B93D2B911B3F49BBF9C49C099EED29B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB77D0B4D23BCBE780AE5CA174587C8EA98CBEDD91FCCB151A80B5E5A151CF13/0/323830333a666131303a3a2f33322d3438203d3e20323731393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa10::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:75:d7:fa:74:0b:c6:fc:e2:e0:b0:fb:4d:2f:91:a8:2e:24:
         90:28:21:ad:89:22:15:2c:68:7d:42:eb:d0:65:04:a4:1e:f6:
         b9:05:1d:97:1a:9d:69:b9:9b:45:2c:d5:a1:aa:37:7f:93:9d:
         93:27:08:a9:1b:95:32:bf:f8:07:8e:e1:36:4d:e2:9a:6b:e6:
         f3:0a:c4:26:eb:c3:ca:76:f7:f9:2d:41:e7:6a:ec:e2:3a:48:
         a9:cf:32:59:8a:1f:cf:fc:f1:a5:db:90:e6:7f:61:e1:8e:44:
         49:ee:86:80:60:84:2f:ff:eb:10:1e:51:55:8d:aa:2c:51:85:
         89:12:78:28:42:ec:c6:29:1e:ba:61:7b:20:8e:e9:c2:2b:d9:
         11:8b:4a:94:57:29:84:22:d7:fd:87:dd:e6:07:c7:13:49:c6:
         e4:38:de:70:fc:71:bf:5f:cc:b7:ea:dd:b6:8f:0e:63:41:f2:
         12:b0:6f:d0:38:e7:fe:89:b4:64:70:9e:ac:8f:3a:b7:4e:f7:
         12:da:d5:1f:2d:82:71:7d:b9:d3:f4:bb:17:1f:25:c0:1d:78:
         4d:81:51:c8:f7:17:21:eb:18:06:9b:8a:5f:31:04:87:c6:3b:
         c7:2d:d5:b1:50:31:89:a2:57:66:42:78:46:1c:a7:0b:15:8f:
         67:cb:aa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----