Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3438203d3e20323634373630.roa
File:                     323830333a323063303a3a2f33322d3438203d3e20323634373630.roa (raw, json)
Hash identifier:          mC52BnfAusyhOgHDJPsWL6eaXuYOB1YSBOAovE1fnHE=
Subject key identifier:   AF:0D:88:CE:6F:D0:39:CD:DD:1C:94:0E:B7:35:21:26:79:D7:D6:70
Certificate issuer:       /CN=88DE53E0010338ADE050EFFAA4698BF37488EE71
Certificate serial:       34F9FED3A93B0F1C9B5FB3B27C3FF44EFE47DA1F
Authority key identifier: 88:DE:53:E0:01:03:38:AD:E0:50:EF:FA:A4:69:8B:F3:74:88:EE:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3438203d3e20323634373630.roa
Signing time:             Tue 05 Mar 2024 17:42:32 +0000
ROA not before:           Tue 05 Mar 2024 17:37:32 +0000
ROA not after:            Tue 04 Mar 2025 17:42:32 +0000
asID:                     264760
IP address blocks:        2803:20c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f9:fe:d3:a9:3b:0f:1c:9b:5f:b3:b2:7c:3f:f4:4e:fe:47:da:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88DE53E0010338ADE050EFFAA4698BF37488EE71
        Validity
            Not Before: Mar  5 17:37:32 2024 GMT
            Not After : Mar  4 17:42:32 2025 GMT
        Subject: CN=AF0D88CE6FD039CDDD1C940EB735212679D7D670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:66:28:c9:f6:5a:c8:22:c4:de:0f:a5:80:
                    ab:0e:c0:cd:3a:70:e1:14:7e:19:b8:91:6d:c4:ad:
                    07:4b:be:07:fd:37:8d:48:09:57:ed:17:e2:a0:c8:
                    af:ed:3c:d6:2f:ac:1c:11:7d:0b:ef:84:7b:13:d3:
                    45:01:60:5a:29:98:e0:65:28:ea:7a:57:d9:5b:72:
                    d1:08:30:25:e1:64:41:d5:f2:27:4d:d1:b5:eb:6e:
                    35:55:b5:f4:5a:dd:ec:58:09:bd:a0:98:31:fb:df:
                    c7:95:26:b5:cd:f7:ce:a9:9f:25:5e:39:ab:a3:60:
                    ec:a9:59:00:77:13:69:34:e1:9d:3d:83:61:4a:2a:
                    94:92:0a:5c:41:64:e2:e1:b1:ed:b4:dc:9d:13:43:
                    10:bc:f4:63:81:95:a3:c3:66:2d:bb:b7:11:d8:37:
                    a4:69:b5:de:e0:72:c7:44:4d:a9:b0:38:21:5f:2e:
                    c2:d4:e1:c9:3d:e2:6c:65:e4:38:20:4b:b0:3b:15:
                    8c:25:f8:4e:4f:d9:46:42:2f:4d:52:6a:aa:17:34:
                    42:4e:59:43:d7:bc:fc:0f:4a:46:49:a7:05:89:df:
                    04:58:40:08:0f:0c:05:a0:ed:14:18:fe:4a:2d:d3:
                    91:18:33:e9:b6:d2:fe:c1:41:04:ca:6c:cc:79:dc:
                    35:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0D:88:CE:6F:D0:39:CD:DD:1C:94:0E:B7:35:21:26:79:D7:D6:70
            X509v3 Authority Key Identifier:
                keyid:88:DE:53:E0:01:03:38:AD:E0:50:EF:FA:A4:69:8B:F3:74:88:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88DE53E0010338ADE050EFFAA4698BF37488EE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC339F302BF9DA1172B48C488FDA83F5D5DD3FFECAC9E5F52DE39169F7691BFA/0/323830333a323063303a3a2f33322d3438203d3e20323634373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:20c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:b1:04:65:0d:1d:d4:17:ae:ca:34:39:eb:a0:7e:33:ed:0a:
         15:58:ca:ad:38:e4:f1:36:f2:b9:23:ed:18:19:21:1c:ef:a3:
         17:89:4b:29:1e:d5:75:0e:1d:b8:d2:5e:44:a9:89:48:7a:d9:
         ca:26:c6:d8:0d:c4:03:91:6b:9f:67:a7:f1:c4:8d:39:40:4e:
         9d:6d:f8:9c:5a:1f:17:45:1c:94:ad:25:9a:b5:a6:be:fa:9d:
         e8:a9:b1:72:d4:fe:4c:3a:97:83:97:72:aa:51:e1:bb:8a:03:
         88:85:d9:39:65:78:d1:4e:79:8c:88:7e:32:5c:77:37:91:4e:
         d0:0f:0a:07:72:c1:47:79:68:09:b4:02:6d:b7:8a:32:c4:a0:
         68:48:45:4d:6a:08:b4:9a:cb:78:02:d4:2b:54:80:b5:d6:11:
         5f:7e:b3:78:6d:55:24:ec:4c:2e:cc:57:3a:8d:a3:a0:1c:e5:
         4a:f8:6a:07:dc:6c:6c:76:9a:4c:9a:8a:9b:d2:c6:2c:fa:72:
         7b:eb:b5:f4:4c:cb:57:db:01:a2:b0:38:65:a3:5f:49:0b:ac:
         d6:ae:4d:47:06:73:c4:fc:f1:56:f7:50:1d:62:ad:bd:f1:dd:
         39:f1:b1:21:49:78:1d:5a:7f:df:e1:25:c1:b7:20:9a:1f:0e:
         c9:a9:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----