Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/323830333a623231303a3a2f33322d3438203d3e20323731393134.roa
File:                     323830333a623231303a3a2f33322d3438203d3e20323731393134.roa (raw, json)
Hash identifier:          3yOVGKvV9TU3wvsH/HMooyWVH9IkCOrsQg6rqJhnZNg=
Subject key identifier:   00:7E:A8:3D:CA:9F:8E:32:6B:CC:33:38:F3:7C:96:1B:38:FC:0E:C2
Certificate issuer:       /CN=20AE62643C64442088545A3D5BA49A68A414B159
Certificate serial:       3D7219984DA29DFE64F4586D90AA1E65D47E0B2D
Authority key identifier: 20:AE:62:64:3C:64:44:20:88:54:5A:3D:5B:A4:9A:68:A4:14:B1:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AE62643C64442088545A3D5BA49A68A414B159.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/323830333a623231303a3a2f33322d3438203d3e20323731393134.roa
Signing time:             Tue 05 Mar 2024 18:01:31 +0000
ROA not before:           Tue 05 Mar 2024 17:56:31 +0000
ROA not after:            Tue 04 Mar 2025 18:01:31 +0000
asID:                     271914
IP address blocks:        2803:b210::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:72:19:98:4d:a2:9d:fe:64:f4:58:6d:90:aa:1e:65:d4:7e:0b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AE62643C64442088545A3D5BA49A68A414B159
        Validity
            Not Before: Mar  5 17:56:31 2024 GMT
            Not After : Mar  4 18:01:31 2025 GMT
        Subject: CN=007EA83DCA9F8E326BCC3338F37C961B38FC0EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:61:d1:64:34:06:ae:f4:5b:a0:b0:78:82:
                    48:80:1c:27:72:01:43:e7:c7:60:74:ee:1e:11:67:
                    84:22:03:cf:c9:3f:c7:f2:06:fb:ad:5c:3a:fa:71:
                    93:7b:22:6f:67:84:a5:ba:a1:2c:45:cc:98:8c:10:
                    f4:11:31:9b:dc:20:93:af:c1:e3:d2:a1:46:3d:69:
                    18:fa:e8:83:0d:c7:9c:fb:48:d2:8c:e0:56:7c:b4:
                    00:80:32:a3:a9:d8:56:f0:4b:62:71:f9:fc:c2:0e:
                    21:f7:50:85:b9:66:d6:12:80:25:55:5a:df:ea:dc:
                    03:c8:0e:2d:8c:33:c9:b3:5b:0f:86:0c:fb:3c:9a:
                    a5:b7:4b:96:d8:ea:c1:22:73:a7:02:7f:16:84:0c:
                    48:5b:58:1a:df:57:ac:d8:e7:43:82:9a:0e:b6:5a:
                    2e:81:a0:b5:d4:82:07:45:7f:bb:22:4e:68:61:34:
                    0d:e3:5c:72:1d:4c:a3:0e:38:bd:e1:3f:8f:24:69:
                    cc:2d:5a:bc:d2:ed:de:ba:99:10:93:ba:99:59:07:
                    45:50:85:9b:84:bc:12:6c:6a:7c:03:63:ce:ce:5e:
                    69:3b:2a:2c:00:79:a7:bf:83:24:9b:e4:6c:ad:13:
                    38:88:7a:00:06:19:9d:3f:34:12:f4:4c:5b:46:3c:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7E:A8:3D:CA:9F:8E:32:6B:CC:33:38:F3:7C:96:1B:38:FC:0E:C2
            X509v3 Authority Key Identifier:
                keyid:20:AE:62:64:3C:64:44:20:88:54:5A:3D:5B:A4:9A:68:A4:14:B1:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/20AE62643C64442088545A3D5BA49A68A414B159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AE62643C64442088545A3D5BA49A68A414B159.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/323830333a623231303a3a2f33322d3438203d3e20323731393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b210::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:b6:4d:78:6e:b3:d5:38:c9:2d:a9:96:b0:af:ce:2a:8c:d8:
         89:07:71:f7:ff:1c:68:85:c5:10:2c:29:e5:34:a8:84:98:17:
         32:e3:02:b1:07:77:21:fc:fb:80:1e:2c:8c:41:71:ca:ef:6e:
         4f:3f:b5:6b:53:fd:44:2a:6d:f5:92:0c:01:3b:53:c4:95:03:
         55:45:fe:57:b0:46:d2:47:c0:1d:28:07:65:fe:ae:16:43:9b:
         77:f2:31:0f:b9:96:32:aa:0b:8d:f0:bf:e9:56:2c:16:6d:ed:
         5e:5f:89:11:8c:5c:ed:cc:76:1d:69:05:cd:83:5a:89:ea:34:
         8c:31:84:03:70:3d:8c:70:75:ef:a5:2f:75:d6:ea:33:d0:4a:
         b7:28:05:ba:38:c5:19:0c:ba:df:55:99:b8:64:36:d0:7c:fe:
         19:04:a1:a0:29:35:93:0c:62:81:11:3f:a8:8c:4f:e6:9d:3b:
         cd:d1:31:3d:44:81:e8:5f:60:9c:6d:3a:35:88:c9:e8:36:21:
         fe:40:de:c1:ca:9d:c3:a4:98:8b:85:97:37:83:d7:1e:ca:51:
         4d:ac:7a:11:86:11:d4:3c:c6:b9:59:59:93:5a:ee:ce:9c:5c:
         fc:2a:ab:76:9a:0c:0b:f7:da:5a:a7:02:07:55:15:e3:b0:4e:
         d2:86:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----