Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/323830333a636338303a3a2f33322d3536203d3e203230323037.roa
File:                     323830333a636338303a3a2f33322d3536203d3e203230323037.roa (raw, json)
Hash identifier:          Zd4qvANFr6p+ps3hkCetiFucDpFwWJhIDa6rJPZP2oo=
Subject key identifier:   EB:26:D0:41:84:E5:93:63:BD:88:3E:C9:34:F5:03:1F:E5:51:6E:2D
Certificate issuer:       /CN=845FC621EC41AE7512D63082015413006FEF3E35
Certificate serial:       7E05F12C08FF453AEE4675D2F158C1CBB75C97E8
Authority key identifier: 84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/323830333a636338303a3a2f33322d3536203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:02:04 +0000
ROA not before:           Tue 05 Mar 2024 17:57:04 +0000
ROA not after:            Tue 04 Mar 2025 18:02:04 +0000
asID:                     20207
IP address blocks:        2803:cc80::/32 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:05:f1:2c:08:ff:45:3a:ee:46:75:d2:f1:58:c1:cb:b7:5c:97:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845FC621EC41AE7512D63082015413006FEF3E35
        Validity
            Not Before: Mar  5 17:57:04 2024 GMT
            Not After : Mar  4 18:02:04 2025 GMT
        Subject: CN=EB26D04184E59363BD883EC934F5031FE5516E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:da:9d:b9:a8:3a:4c:66:a3:72:12:fd:5f:f0:
                    b9:ca:ce:f9:54:f5:dd:2b:92:22:1e:42:95:71:72:
                    08:2f:cf:a7:5c:55:93:e9:e7:09:51:d6:75:1d:7f:
                    cc:ca:2b:ee:e0:3c:1c:b6:fd:23:23:2c:7d:86:8b:
                    54:38:23:fb:e2:3d:ad:46:6e:93:ef:c8:e1:86:80:
                    2e:79:be:8e:4e:d8:d7:10:e0:a7:06:8d:76:a1:f4:
                    72:0b:68:17:e0:0d:e2:81:a6:45:af:7a:c4:a6:51:
                    86:60:ba:12:89:bc:cc:6b:50:e0:06:d6:1e:bd:14:
                    f9:64:64:45:03:e7:a2:61:65:42:8a:30:45:5a:cf:
                    7d:37:e4:62:37:63:a8:b8:19:ca:f4:6f:4f:6e:e7:
                    32:11:9c:b6:3a:25:0b:ca:c0:39:a5:ef:d6:9b:48:
                    5a:51:97:ef:36:af:11:ff:d5:4f:af:31:95:57:57:
                    80:fd:4b:5a:5c:55:97:e6:39:50:29:6c:51:61:ba:
                    09:89:13:c0:c3:ac:9d:37:a4:81:1f:05:e8:78:99:
                    ec:b0:a7:02:1b:e1:bc:96:d6:f0:bf:cb:86:4e:3d:
                    80:5a:f5:4a:c3:20:a3:63:fe:7a:00:ad:4f:e7:13:
                    5e:00:4b:95:ec:40:31:9c:f4:25:aa:f5:a9:ff:23:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:26:D0:41:84:E5:93:63:BD:88:3E:C9:34:F5:03:1F:E5:51:6E:2D
            X509v3 Authority Key Identifier:
                keyid:84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/323830333a636338303a3a2f33322d3536203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:68:8c:96:e1:78:c0:03:81:94:5a:fd:ee:5f:2d:7a:71:86:
         56:1b:b7:8d:fc:83:6f:b7:5d:14:cf:e0:02:c8:f8:cd:68:a0:
         27:ff:a7:cc:39:19:79:03:28:9c:c7:b2:2e:57:05:9f:7e:77:
         65:3f:0c:24:f6:ed:2e:82:d6:e5:48:24:d2:01:6d:97:67:92:
         ea:3a:0c:02:5a:ce:26:0d:6f:36:35:90:75:15:38:c9:e1:d2:
         f7:79:9b:6d:e0:b6:01:8d:f2:f7:c5:4e:74:9a:4f:a7:f1:64:
         fa:12:1d:95:6f:f7:df:87:5a:f7:c4:84:db:8a:7b:98:23:3d:
         35:c8:cf:21:f8:be:04:84:44:87:9a:ef:9c:82:c3:cb:2e:7b:
         a7:b1:dd:a2:d8:89:20:c6:82:31:25:56:7a:18:71:02:7c:dc:
         92:42:c7:5c:fe:46:cb:7f:f3:44:fc:2c:5d:98:19:64:c3:88:
         33:ac:c1:33:53:a7:23:c8:0a:0a:96:35:aa:b4:bf:31:cc:10:
         20:18:cc:dd:52:18:84:1c:68:ca:86:00:5e:7a:0f:da:73:93:
         fb:2e:8e:c2:8b:36:02:ef:9a:6a:d2:fa:6a:8e:e8:24:0e:16:
         72:cc:0a:81:02:c8:81:5d:eb:be:93:54:1c:0d:ef:91:05:26:
         95:14:08:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----