Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/323830333a656565303a3a2f33322d3438203d3e20323639393837.roa
File:                     323830333a656565303a3a2f33322d3438203d3e20323639393837.roa (raw, json)
Hash identifier:          E8SUChl0JokXiEJ3IYqSTkGWJFi4QF0tx5ELkP4Z7gs=
Subject key identifier:   5F:8F:10:6E:92:0A:71:55:78:EB:E9:69:66:20:01:98:4E:E8:BB:81
Certificate issuer:       /CN=2705C975E2CC4D594CF89CC53B26AD206D9F1C2F
Certificate serial:       680460D378DDED763798497CB6CABDF97284369D
Authority key identifier: 27:05:C9:75:E2:CC:4D:59:4C:F8:9C:C5:3B:26:AD:20:6D:9F:1C:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/323830333a656565303a3a2f33322d3438203d3e20323639393837.roa
Signing time:             Tue 05 Mar 2024 17:40:33 +0000
ROA not before:           Tue 05 Mar 2024 17:35:33 +0000
ROA not after:            Tue 04 Mar 2025 17:40:33 +0000
asID:                     269987
IP address blocks:        2803:eee0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:04:60:d3:78:dd:ed:76:37:98:49:7c:b6:ca:bd:f9:72:84:36:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2705C975E2CC4D594CF89CC53B26AD206D9F1C2F
        Validity
            Not Before: Mar  5 17:35:33 2024 GMT
            Not After : Mar  4 17:40:33 2025 GMT
        Subject: CN=5F8F106E920A715578EBE969662001984EE8BB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:b0:c6:66:fb:d8:32:10:e0:3d:1e:ac:b9:
                    fe:07:8e:71:21:df:92:9b:b9:89:46:4a:b4:71:96:
                    a5:1b:01:01:cd:0a:4c:eb:ac:c7:b5:13:a7:30:4a:
                    f7:22:fa:8c:94:1b:60:e8:ce:5c:88:80:6f:45:af:
                    34:2f:09:4b:aa:da:19:8b:33:bb:4a:e4:64:a9:6e:
                    d6:23:db:e1:f2:87:b9:1c:c8:2a:ae:54:b2:c7:e1:
                    0e:da:0f:d6:d5:b1:11:e0:f3:06:ed:f4:98:cb:1f:
                    d5:cc:23:14:d5:16:b7:a4:87:4b:f0:48:a4:33:87:
                    a6:d7:14:ae:71:29:ca:f7:9b:c9:40:8c:ba:80:ef:
                    1f:5e:f0:2a:0d:47:6c:2c:4c:02:e0:be:3e:f5:72:
                    03:ff:e2:49:d5:d8:7b:e5:c7:87:a2:1f:65:52:a8:
                    ed:26:68:99:27:c8:9a:3e:a1:d8:95:65:0f:6f:6b:
                    70:ca:f0:92:fe:74:6c:8d:70:26:68:a4:db:8a:c9:
                    0f:91:57:41:c9:0f:e0:8a:8a:18:7c:18:7b:b3:45:
                    26:f9:5f:f6:c8:ee:4f:f2:e0:05:9a:b6:01:08:79:
                    ea:d5:28:7a:27:3d:68:f7:c7:92:43:8d:87:83:2c:
                    b2:f4:ad:65:fe:c8:1c:cf:2e:f2:06:88:c8:22:f3:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8F:10:6E:92:0A:71:55:78:EB:E9:69:66:20:01:98:4E:E8:BB:81
            X509v3 Authority Key Identifier:
                keyid:27:05:C9:75:E2:CC:4D:59:4C:F8:9C:C5:3B:26:AD:20:6D:9F:1C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2705C975E2CC4D594CF89CC53B26AD206D9F1C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1730BC18DF9F2E39D28611C9A12011BCBE42CF0E6D789A6B5EA40F4A76687FE/0/323830333a656565303a3a2f33322d3438203d3e20323639393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:b2:4c:8a:d7:7e:d9:04:84:ea:cf:e4:5b:d8:31:bd:e3:72:
         d8:46:dc:38:f3:32:12:e6:5c:f1:aa:fc:39:3c:57:1e:d8:1c:
         07:4d:2a:98:42:6a:4b:78:01:9f:a2:8d:fd:fd:74:81:08:29:
         d8:97:13:06:f1:f2:c9:ea:b7:6b:fe:17:74:b4:83:ab:8d:dd:
         b5:98:30:90:f3:04:75:0f:0a:37:f4:ec:97:de:ae:c3:70:2b:
         29:d0:3d:eb:14:10:3f:7a:87:33:be:25:43:42:8c:ac:7d:1b:
         e7:17:5e:a3:7a:36:b6:99:9e:6f:be:92:9b:32:43:f4:ac:f8:
         c4:60:1b:4f:15:eb:58:cd:b2:fb:d0:86:b3:a9:75:0b:40:86:
         9e:0c:23:43:76:00:a5:52:07:77:a2:77:83:4d:18:64:a5:bd:
         13:d8:7d:0e:13:e4:8a:06:0e:39:e3:ed:e2:63:7c:f3:01:de:
         69:3b:9b:d4:2f:97:31:27:14:9a:8f:bd:3c:9f:8b:30:34:ad:
         7d:3e:5a:27:c4:46:53:98:3f:70:1d:33:8a:e7:c7:84:74:2f:
         b5:e6:80:64:4a:f1:81:d4:4c:97:25:ec:3a:5a:7e:1f:f1:ef:
         a7:99:54:ae:65:cc:4c:07:78:0d:4b:36:5e:68:10:87:96:37:
         97:25:9a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----