Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/323830333a653363303a3a2f33322d3438203d3e20323635373339.roa
File:                     323830333a653363303a3a2f33322d3438203d3e20323635373339.roa (raw, json)
Hash identifier:          6pTHCpZb5Hp4WD55jouWOgaUzJ4fJqyZ/UVYQh2r7RU=
Subject key identifier:   45:00:DD:AB:75:6D:AB:AB:22:C9:67:65:6F:FB:FB:6F:25:D4:A8:68
Certificate issuer:       /CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
Certificate serial:       326939ABB4731046FD88FE9329DE77A140FE92F3
Authority key identifier: 20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/323830333a653363303a3a2f33322d3438203d3e20323635373339.roa
Signing time:             Tue 05 Mar 2024 18:07:07 +0000
ROA not before:           Tue 05 Mar 2024 18:02:07 +0000
ROA not after:            Tue 04 Mar 2025 18:07:07 +0000
asID:                     265739
IP address blocks:        2803:e3c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:69:39:ab:b4:73:10:46:fd:88:fe:93:29:de:77:a1:40:fe:92:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75
        Validity
            Not Before: Mar  5 18:02:07 2024 GMT
            Not After : Mar  4 18:07:07 2025 GMT
        Subject: CN=4500DDAB756DABAB22C967656FFBFB6F25D4A868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:45:68:35:3f:ec:e2:2e:a1:c4:fd:8b:d5:
                    bb:93:83:2a:ea:73:2f:80:dc:e3:75:09:a2:bc:4e:
                    3c:16:b0:7d:38:14:27:50:8d:34:62:2b:8a:99:9a:
                    20:1f:b7:3d:cb:7c:61:c2:cb:f2:c0:02:ad:1c:43:
                    36:7d:09:5e:49:77:24:3e:35:9d:bb:9e:e2:51:7b:
                    d3:05:de:49:59:bb:6f:c3:8a:75:9f:8f:df:cd:d9:
                    94:43:6b:24:6d:16:1b:ed:c3:34:48:84:72:5e:be:
                    b7:10:a7:61:eb:66:1e:4e:ad:7e:52:e5:4b:b4:d5:
                    58:d9:ea:97:15:9c:c9:88:b8:bf:35:0f:ea:c6:4c:
                    5c:45:e8:d2:e8:66:71:2d:f1:b0:3c:b3:4a:9d:58:
                    6e:08:69:5e:a8:3d:db:d7:e3:70:f5:08:27:cc:14:
                    9e:8f:56:ed:7e:cb:1c:36:04:2d:72:f6:2c:43:b7:
                    7e:66:f7:52:3a:69:ce:fd:25:fe:59:8e:12:07:05:
                    51:c8:8f:6e:42:25:1f:db:7d:fb:f5:28:8a:0b:52:
                    ac:84:e9:e3:15:49:bc:f5:e9:cf:7d:50:5c:31:4f:
                    23:11:1c:44:40:11:49:b6:ec:62:7d:cf:3f:73:29:
                    ae:22:09:7e:9b:45:10:47:c3:79:1a:96:d2:49:41:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:00:DD:AB:75:6D:AB:AB:22:C9:67:65:6F:FB:FB:6F:25:D4:A8:68
            X509v3 Authority Key Identifier:
                keyid:20:B5:80:A5:2C:15:A7:B0:EC:2B:5A:24:3E:5E:52:17:D6:DE:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B580A52C15A7B0EC2B5A243E5E5217D6DE9E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71FA917AC5D4BB1E2583D10EB947DE9D70CA3402A57038D36CD1B0260931005/0/323830333a653363303a3a2f33322d3438203d3e20323635373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:56:60:51:1c:f9:d5:6c:cd:a8:95:a0:83:68:fd:fc:7c:4c:
         2e:3d:db:e5:4a:14:ca:83:a8:d1:37:10:4c:8d:e5:40:d8:6c:
         dc:0d:e6:41:7b:76:fa:2c:ed:c7:93:76:41:81:af:71:d5:92:
         88:f7:8e:f8:90:7a:71:ae:63:25:40:74:0a:c1:02:01:50:86:
         b0:39:51:ef:73:e9:7a:7d:42:cf:d4:fe:41:90:b1:90:46:7d:
         1f:de:ee:49:70:16:0a:de:18:3b:d7:92:56:48:7b:5e:03:60:
         2f:8e:ed:e9:9b:be:f9:c3:d0:4e:be:30:fc:b8:b4:51:8d:75:
         59:cd:0d:b2:49:e5:8a:71:f5:d9:88:a0:c6:b0:6d:d3:66:05:
         3b:5b:f4:55:7d:d4:e7:17:e6:cb:d4:a5:af:99:83:c9:cf:c3:
         38:15:ad:fd:7b:85:14:1b:ad:15:5f:e5:21:81:90:6b:04:76:
         6c:c0:50:df:b0:6e:72:7a:ea:ea:12:ca:bd:c6:ad:f1:07:06:
         39:b1:82:25:c8:12:71:dc:70:7e:08:17:20:9f:cd:6b:69:d4:
         4b:f5:d1:22:f2:fb:c2:83:9e:cc:a5:35:a9:64:47:6a:b5:02:
         8e:15:d1:fe:b4:21:ba:26:ab:8c:f2:29:6a:c2:9a:09:cb:f3:
         69:a6:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----