Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/323830333a386332303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a386332303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          6iGB9SNhmopqLbzbhxaeeGzWMtNsN363YGZZUWjYLUA=
Subject key identifier:   21:C1:C7:39:2A:1C:1A:88:48:DB:3B:52:E2:9D:97:D6:18:A6:D0:D2
Certificate issuer:       /CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
Certificate serial:       3981E024E738BD1AC98B00F1CD770244B3EC50D9
Authority key identifier: BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/323830333a386332303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:48:24 +0000
ROA not before:           Tue 05 Mar 2024 17:43:24 +0000
ROA not after:            Tue 04 Mar 2025 17:48:24 +0000
asID:                     52468
IP address blocks:        2803:8c20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:81:e0:24:e7:38:bd:1a:c9:8b:00:f1:cd:77:02:44:b3:ec:50:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
        Validity
            Not Before: Mar  5 17:43:24 2024 GMT
            Not After : Mar  4 17:48:24 2025 GMT
        Subject: CN=21C1C7392A1C1A8848DB3B52E29D97D618A6D0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:f5:99:87:06:07:60:55:90:b2:88:fc:76:
                    09:31:f4:f8:06:ae:77:af:e4:62:e5:4c:6f:70:2f:
                    78:84:eb:0c:80:e3:04:cc:0b:98:ae:17:01:9f:e7:
                    97:1a:b0:c6:ed:be:b5:26:00:f6:72:b4:87:5e:bd:
                    79:0e:7f:db:70:fd:aa:01:74:0f:59:9b:1f:e3:d3:
                    ee:f7:36:ce:a9:58:9d:15:fe:a2:e8:e8:52:ef:dc:
                    cc:71:d2:20:83:dd:f3:d5:b3:de:8f:13:ee:a2:8e:
                    9f:00:33:6c:5d:2a:b9:a7:53:47:c6:79:01:b7:cf:
                    64:27:73:9b:d5:ef:1b:46:cc:b1:d5:db:31:39:6b:
                    59:df:a7:4d:a0:59:09:bb:5a:58:e5:4a:57:bc:73:
                    a9:7b:9d:4b:2f:8a:b2:25:0b:6d:21:3c:7a:74:cd:
                    3d:44:92:d7:a1:19:dc:e4:64:bc:a0:35:b0:29:e9:
                    77:02:07:bd:bc:a5:de:68:25:df:20:9c:c7:4e:0a:
                    38:a8:e5:87:4d:4c:74:fc:fb:85:4d:7b:14:1e:a6:
                    b8:75:7e:be:24:36:d8:f6:09:ba:35:40:4f:27:e7:
                    75:6a:21:00:94:d1:d6:74:8e:2b:df:f2:99:80:ce:
                    00:4b:b7:db:54:bb:6b:01:9e:54:df:c3:6a:25:cf:
                    83:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C1:C7:39:2A:1C:1A:88:48:DB:3B:52:E2:9D:97:D6:18:A6:D0:D2
            X509v3 Authority Key Identifier:
                keyid:BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/323830333a386332303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:10:ed:0e:f8:43:44:6c:22:7d:97:7b:a2:b4:10:f6:18:
         be:62:24:f8:21:72:d9:4f:18:cc:a3:8e:3f:26:b3:b7:69:fb:
         95:d9:22:2c:e3:2f:2f:20:ef:94:3d:60:c2:2d:c5:47:e4:2b:
         62:84:96:df:ec:0e:e8:21:8d:20:54:12:f5:41:85:8b:87:bd:
         6d:e9:36:2a:1d:9f:f6:cc:6a:7a:11:42:dc:d2:a8:36:95:ee:
         1f:50:05:e0:d9:f9:64:89:17:9f:da:06:71:58:8a:bf:d8:ed:
         03:d4:71:8c:31:cd:0b:9d:0c:1a:3f:ed:d9:5d:24:f1:28:98:
         df:1c:de:83:cc:05:ee:da:d2:df:da:6a:66:dd:44:a0:f1:a5:
         3d:e1:25:98:09:3c:11:57:5f:3f:a5:de:61:ac:c7:40:89:44:
         90:4e:8f:95:92:9e:ea:1a:bf:e9:4f:15:25:d7:6d:fb:81:c1:
         9a:2e:45:c5:2a:27:14:cf:72:fe:93:cb:ac:f9:0f:a6:1b:ab:
         80:bc:80:c4:5c:4d:4d:51:ad:88:f9:f2:2f:31:36:88:9b:40:
         39:75:44:52:af:b0:97:59:62:4e:62:d6:52:3f:1d:fa:24:b6:
         b6:74:1e:5a:6e:f5:51:73:5d:eb:67:8c:f1:0a:22:73:e1:c5:
         59:87:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----