Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/323830333a616634303a3a2f33322d3335203d3e20323634373434.roa
File:                     323830333a616634303a3a2f33322d3335203d3e20323634373434.roa (raw, json)
Hash identifier:          1B2LO/hhrCaPshqo7xDQFc4+L2xss5azKFclhb9f+8Q=
Subject key identifier:   D0:BB:A7:E2:4F:F0:74:82:92:24:D4:BD:8E:4C:0C:11:10:F0:B7:29
Certificate issuer:       /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial:       5ED6FBAB16B19B43F0D64DD492A4301A7EE94D99
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/323830333a616634303a3a2f33322d3335203d3e20323634373434.roa
Signing time:             Tue 05 Mar 2024 18:10:35 +0000
ROA not before:           Tue 05 Mar 2024 18:05:35 +0000
ROA not after:            Tue 04 Mar 2025 18:10:35 +0000
asID:                     264744
IP address blocks:        2803:af40::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d6:fb:ab:16:b1:9b:43:f0:d6:4d:d4:92:a4:30:1a:7e:e9:4d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
        Validity
            Not Before: Mar  5 18:05:35 2024 GMT
            Not After : Mar  4 18:10:35 2025 GMT
        Subject: CN=D0BBA7E24FF074829224D4BD8E4C0C1110F0B729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:47:90:2b:45:f9:30:bf:56:96:20:e2:d0:
                    fb:d6:8b:49:ec:e6:ec:ae:19:74:49:f5:c9:fc:bb:
                    f0:1e:d1:33:1f:fe:2a:76:7a:ef:c5:14:32:ec:9e:
                    fd:89:7a:fb:4f:67:a9:4c:14:4c:b7:69:76:42:be:
                    17:cb:46:13:18:92:e0:e0:bc:77:21:6d:fb:78:40:
                    f4:0b:d9:90:b1:07:80:35:d6:14:6f:c2:05:be:38:
                    c4:0c:86:fd:c2:6d:07:6f:3d:4f:dc:6b:1e:81:c4:
                    92:3b:5a:92:74:06:24:ea:24:ff:a8:1a:43:ea:bd:
                    10:cb:8a:da:70:bc:58:7f:0a:62:dc:19:1b:52:07:
                    23:ef:ce:bc:4e:a4:e4:13:68:68:b8:9d:09:be:07:
                    04:28:59:f1:e4:05:20:b2:19:f3:e9:2e:47:87:61:
                    7f:43:66:47:75:8a:ab:c3:b9:7e:88:d2:18:82:69:
                    ba:d0:da:54:3c:61:98:42:1f:b5:b9:88:13:c3:f4:
                    6e:6c:ba:91:ad:5c:8b:16:6a:dd:1c:c8:b4:e3:4e:
                    cc:02:15:36:71:5c:76:01:da:46:14:15:62:80:71:
                    e4:1a:26:67:82:d6:48:69:c7:ab:93:20:75:2f:c8:
                    1a:84:78:8f:c8:4e:32:38:b8:d9:f1:ce:a5:ee:82:
                    07:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BB:A7:E2:4F:F0:74:82:92:24:D4:BD:8E:4C:0C:11:10:F0:B7:29
            X509v3 Authority Key Identifier:
                keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/323830333a616634303a3a2f33322d3335203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af40::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:e7:98:31:64:a3:91:11:31:b8:63:bd:fc:0b:99:3a:81:
         3b:f0:a0:30:ff:88:29:79:8b:c2:7b:3c:a0:51:8c:37:1f:fc:
         cf:3c:0d:90:b6:f4:56:b8:da:62:b4:17:94:bd:61:28:ba:a9:
         24:88:76:d2:a6:ba:01:ff:f1:c0:e1:4f:fa:e1:25:46:ac:57:
         df:19:01:ec:51:9d:61:76:2b:3a:df:59:35:b3:82:b8:76:e9:
         1a:b5:74:a2:b1:56:47:aa:53:ca:d8:92:fe:1e:21:26:7f:b8:
         9e:08:18:81:85:36:89:fb:16:d7:6a:4a:d7:4d:87:cf:31:84:
         3c:4e:ef:c9:2c:12:f7:b6:5d:c6:1a:96:8a:7d:27:37:03:7c:
         20:8c:cd:c6:24:e4:47:d9:b4:6a:2b:5a:50:a4:40:2e:f8:30:
         ad:e5:55:93:0b:4f:05:c8:23:21:7b:98:4a:d8:fc:9b:cd:1f:
         f2:a5:f5:4e:85:99:67:f0:43:05:a9:c7:51:d6:da:66:8b:4c:
         e2:92:7b:51:cf:d1:86:4c:e1:a2:84:55:77:0b:63:42:88:fa:
         e1:c2:92:be:67:5f:99:96:ee:91:34:43:1e:b9:17:16:fe:3e:
         fd:20:c5:b2:a9:72:2b:db:8b:7e:fd:1a:e3:6e:97:e5:1b:ee:
         39:c8:33:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----