Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a346361303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          hyyJBq126G0wSU381obqKhzKLNOxOzcV40j/LolNsQg=
Subject key identifier:   60:B2:D7:21:69:3F:D5:EB:A5:B5:A8:93:4F:BC:F6:23:DD:EC:F7:CA
Certificate issuer:       /CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
Certificate serial:       6DE945AF926593EF1F9C2BB069115D86FE1F42EF
Authority key identifier: B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:54:55 +0000
ROA not before:           Tue 05 Mar 2024 17:49:55 +0000
ROA not after:            Tue 04 Mar 2025 17:54:55 +0000
asID:                     52468
IP address blocks:        2803:4ca0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e9:45:af:92:65:93:ef:1f:9c:2b:b0:69:11:5d:86:fe:1f:42:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
        Validity
            Not Before: Mar  5 17:49:55 2024 GMT
            Not After : Mar  4 17:54:55 2025 GMT
        Subject: CN=60B2D721693FD5EBA5B5A8934FBCF623DDECF7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ff:fd:13:46:38:f1:6c:19:34:6c:9e:bf:01:
                    6b:09:91:f5:f7:37:6d:ba:c3:a1:3e:86:62:99:de:
                    28:50:38:8c:80:46:be:8b:b9:37:2a:3c:ae:05:8e:
                    df:5a:a7:da:74:7e:73:7a:ab:0b:e5:e1:b8:36:e1:
                    82:f6:e2:ae:7a:77:15:85:0c:24:96:74:2c:2e:c5:
                    8c:5e:93:28:c1:97:41:18:4a:8e:a1:a8:b4:67:b9:
                    59:c3:9a:4c:fe:0e:5e:8f:e1:25:42:07:c1:b2:13:
                    c6:55:a9:14:5f:39:73:41:58:6f:75:78:71:ea:95:
                    56:d0:27:84:bf:99:0a:ad:52:c0:65:8e:5e:e7:c3:
                    3b:c1:f2:05:2f:0a:73:84:7d:75:05:67:2a:a3:2c:
                    3f:35:c6:10:41:13:da:ae:cf:6b:ab:3e:18:3b:d0:
                    b9:c9:5a:b2:a6:f7:b9:a8:1e:01:28:6a:41:7b:f5:
                    67:35:1f:ae:15:65:ce:80:fe:cc:0f:16:f2:b5:92:
                    ab:07:ca:e8:22:94:d9:02:6e:a5:08:bf:e8:6a:2f:
                    04:03:98:3a:b6:2c:e5:56:00:b2:15:ae:4d:9b:96:
                    aa:07:3a:6c:bb:41:62:ba:07:12:03:1c:f3:08:3c:
                    74:11:96:4d:67:9f:8a:75:c3:6e:77:84:b3:99:d8:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B2:D7:21:69:3F:D5:EB:A5:B5:A8:93:4F:BC:F6:23:DD:EC:F7:CA
            X509v3 Authority Key Identifier:
                keyid:B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/323830333a346361303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:0d:9e:54:f8:d9:5a:69:8b:e8:30:b0:1d:0a:42:73:ea:c0:
         c8:80:25:81:46:5b:46:8e:75:45:ec:c3:69:06:77:ac:6f:e1:
         e3:7d:8c:27:f2:51:f8:f4:5b:41:f8:ac:6a:05:ba:fe:a7:03:
         3e:d7:31:a1:d0:ed:cb:18:93:70:2d:1b:59:b7:9a:a9:ec:73:
         31:3a:88:ef:0c:f7:41:9a:4b:ff:0a:2a:7e:e5:d2:dd:79:0c:
         18:c3:4f:00:46:78:b9:1e:33:11:1a:07:b4:13:f2:1f:80:8e:
         25:a7:da:05:95:3b:ae:72:e5:e0:7b:ba:b5:bf:4f:6f:b7:ef:
         db:73:08:e2:20:32:d5:53:88:9c:4a:c3:40:bf:b6:d6:0f:da:
         12:6f:d0:12:b0:02:92:37:c0:10:8a:3d:8f:3d:05:eb:6f:e7:
         d7:b8:3e:bb:a5:52:52:82:02:60:02:82:83:d2:19:c7:89:5d:
         65:71:c4:6a:7c:e5:50:01:76:fe:94:84:88:a9:79:7d:8d:85:
         a5:d1:f7:ed:90:bc:79:28:9a:1c:47:73:37:d4:99:f0:09:93:
         75:5d:e7:71:68:c1:2f:d2:42:9e:ba:bf:72:86:c5:1e:02:a5:
         35:5f:03:0d:4c:ee:50:20:d0:80:d1:59:e1:ca:3f:eb:cd:e4:
         63:a7:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----