Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2385B23BB4A894C60C9593DE69A3778D0B8EDE355006085BD0BDF51AAACF2B0/0/323830333a643661303a3a2f33322d3438203d3e20323636383937.roa
File:                     323830333a643661303a3a2f33322d3438203d3e20323636383937.roa (raw, json)
Hash identifier:          rBIWV8dUIAJUGAw1VwaznkN/6R4+6WFQowdBw2lZ/wA=
Subject key identifier:   B3:41:51:DE:CF:D5:83:92:BA:03:4B:3C:DD:34:49:68:9C:94:4A:C8
Certificate issuer:       /CN=C1F08F1F348D2795FF0DB685EB093E8A59532845
Certificate serial:       120504E9FDEC64BECBC89D590A95EB52EE14970F
Authority key identifier: C1:F0:8F:1F:34:8D:27:95:FF:0D:B6:85:EB:09:3E:8A:59:53:28:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1F08F1F348D2795FF0DB685EB093E8A59532845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2385B23BB4A894C60C9593DE69A3778D0B8EDE355006085BD0BDF51AAACF2B0/0/323830333a643661303a3a2f33322d3438203d3e20323636383937.roa
Signing time:             Tue 05 Mar 2024 17:55:37 +0000
ROA not before:           Tue 05 Mar 2024 17:50:37 +0000
ROA not after:            Tue 04 Mar 2025 17:55:37 +0000
asID:                     266897
IP address blocks:        2803:d6a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:05:04:e9:fd:ec:64:be:cb:c8:9d:59:0a:95:eb:52:ee:14:97:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1F08F1F348D2795FF0DB685EB093E8A59532845
        Validity
            Not Before: Mar  5 17:50:37 2024 GMT
            Not After : Mar  4 17:55:37 2025 GMT
        Subject: CN=B34151DECFD58392BA034B3CDD3449689C944AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ff:25:ad:05:fb:83:46:2c:84:1a:5d:99:9b:
                    0c:02:fb:59:5c:af:07:39:da:9a:3f:e6:18:79:50:
                    a5:b3:7c:2e:e1:8d:80:3a:c8:0b:a6:c6:be:bb:9d:
                    b6:33:c5:04:26:33:8d:0f:b7:bf:41:8c:6c:93:e1:
                    ab:4a:c4:92:3a:be:5b:32:24:66:ec:52:35:da:49:
                    61:65:d5:5a:93:a5:e9:4b:6b:8b:7e:48:01:47:72:
                    93:e8:40:2e:27:c5:33:37:4a:a9:63:f3:d9:eb:f0:
                    0d:ed:9f:ca:17:7d:c6:bf:bd:18:e3:dc:da:37:55:
                    df:4c:61:29:d5:a5:a6:4e:eb:d9:08:47:7d:35:85:
                    68:09:86:5c:67:1b:ed:f7:6e:78:65:d0:5a:cf:20:
                    db:2f:e4:2e:c4:df:c1:a6:1b:af:62:e5:55:e7:fa:
                    08:bf:e8:8d:36:e6:13:de:02:86:f8:0d:ac:3b:be:
                    5b:1d:80:f8:e8:cd:b2:62:f2:35:f0:4c:43:79:4c:
                    8a:3d:a6:e1:53:4a:c9:dd:b8:86:78:e6:b3:f0:96:
                    61:37:08:eb:8c:53:35:2c:4f:2d:df:8d:c9:3a:0c:
                    f8:c3:c8:c7:b7:be:50:bb:74:94:d0:4c:28:9c:ad:
                    d5:56:0f:25:ef:af:7e:1e:6a:cc:82:b8:7b:ca:3e:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:51:DE:CF:D5:83:92:BA:03:4B:3C:DD:34:49:68:9C:94:4A:C8
            X509v3 Authority Key Identifier:
                keyid:C1:F0:8F:1F:34:8D:27:95:FF:0D:B6:85:EB:09:3E:8A:59:53:28:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2385B23BB4A894C60C9593DE69A3778D0B8EDE355006085BD0BDF51AAACF2B0/0/C1F08F1F348D2795FF0DB685EB093E8A59532845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1F08F1F348D2795FF0DB685EB093E8A59532845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2385B23BB4A894C60C9593DE69A3778D0B8EDE355006085BD0BDF51AAACF2B0/0/323830333a643661303a3a2f33322d3438203d3e20323636383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:9e:c0:c2:e5:47:da:1a:c4:5a:89:09:7d:5c:3e:d3:c9:
         67:b8:f0:1f:e3:0c:6a:e2:5b:21:72:14:b0:91:c9:d1:e6:f9:
         b6:f5:bf:e0:b8:e7:72:26:b0:69:cf:88:f4:93:f0:8a:65:a6:
         90:cd:a1:03:26:14:5e:9c:70:db:da:84:57:f6:f5:9e:20:6c:
         e8:90:ac:c3:c9:6e:45:a2:5a:5c:9c:88:73:7b:cd:44:7c:fe:
         74:cd:f5:25:e3:be:5d:24:e0:aa:c2:cd:bb:10:43:d0:28:2b:
         d4:1b:c1:d0:56:fc:eb:10:90:64:7a:98:3a:ed:71:ba:c2:b2:
         2f:4f:a7:b1:2d:bf:96:27:4f:b7:18:88:cd:1f:27:74:36:a8:
         a6:8e:60:1e:4f:fd:a6:7b:e9:66:11:80:23:90:05:99:a8:73:
         62:cb:3e:3d:4f:7c:ef:b2:fa:9a:5f:b1:b9:35:f9:b9:a4:c1:
         0a:74:60:6f:f7:30:ad:33:36:14:7b:ee:0e:e8:ae:5f:6a:ff:
         98:13:b3:69:5d:57:db:2d:60:bf:cd:84:74:6d:3b:79:83:fe:
         a6:8e:78:b3:3d:27:22:e9:5e:7a:26:62:40:86:9f:43:d3:a7:
         9c:1e:fa:f3:1e:e8:c3:66:d9:c8:65:6c:fa:be:39:59:b0:5c:
         7d:0c:1a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----