Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/323830333a353963303a3a2f33322d3332203d3e20323634363638.roa
File:                     323830333a353963303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier:          WqzVKKq7NQtg1sF9Ng5a7RYOnN6CAg1RYLqZgdJFjJ0=
Subject key identifier:   6D:03:F7:37:D7:87:D3:F8:4E:C8:FF:68:F8:D4:8A:D5:D9:9D:AE:65
Certificate issuer:       /CN=754E4BD73AEBBA082CF44FF7380173AEE9E5BF86
Certificate serial:       51E0A480D5DE44CC2A3F41EA10075D841E88D3F4
Authority key identifier: 75:4E:4B:D7:3A:EB:BA:08:2C:F4:4F:F7:38:01:73:AE:E9:E5:BF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/323830333a353963303a3a2f33322d3332203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:20:41 +0000
ROA not before:           Tue 05 Mar 2024 18:15:41 +0000
ROA not after:            Tue 04 Mar 2025 18:20:41 +0000
asID:                     264668
IP address blocks:        2803:59c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e0:a4:80:d5:de:44:cc:2a:3f:41:ea:10:07:5d:84:1e:88:d3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754E4BD73AEBBA082CF44FF7380173AEE9E5BF86
        Validity
            Not Before: Mar  5 18:15:41 2024 GMT
            Not After : Mar  4 18:20:41 2025 GMT
        Subject: CN=6D03F737D787D3F84EC8FF68F8D48AD5D99DAE65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6a:4b:25:c4:ef:71:a9:cc:dd:49:7e:0d:34:
                    82:e8:2f:54:0f:dd:1e:e9:fb:f0:da:28:95:4a:8c:
                    82:9f:35:72:44:0c:9c:7e:6d:19:f7:eb:2e:72:dc:
                    d6:9b:1f:1f:60:7a:58:55:7f:b7:75:bb:ed:a4:e3:
                    08:76:e9:a0:6c:73:7d:c6:34:d3:66:8f:ec:33:48:
                    01:13:b3:0e:8c:24:ff:f2:2b:8f:10:a1:4f:a2:41:
                    9f:f6:19:9d:7b:0f:71:04:65:5f:dd:27:73:11:86:
                    99:3d:22:c1:c4:fa:50:5d:97:62:80:1e:f8:c0:96:
                    cf:62:76:d9:33:f5:0a:6c:fc:7d:d0:ba:5a:9e:01:
                    34:41:16:64:c7:f6:6f:f0:5d:cb:21:e1:89:e6:0c:
                    55:b3:7a:38:f2:10:ee:1e:68:d1:06:4f:52:99:64:
                    78:52:36:85:df:65:88:c8:c8:b2:3e:2c:23:04:ad:
                    88:78:a5:21:05:6c:c3:c5:45:51:96:b3:cb:79:2e:
                    12:fa:46:da:7e:ea:61:24:9e:23:72:13:36:2e:64:
                    77:89:0a:13:c6:75:f9:8d:60:3f:0c:3f:83:91:1c:
                    02:0b:b0:28:6d:2e:bf:2c:c2:0b:99:f3:20:05:08:
                    9c:81:b1:7a:49:e9:e4:7a:fc:e0:c0:75:ca:02:9f:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:03:F7:37:D7:87:D3:F8:4E:C8:FF:68:F8:D4:8A:D5:D9:9D:AE:65
            X509v3 Authority Key Identifier:
                keyid:75:4E:4B:D7:3A:EB:BA:08:2C:F4:4F:F7:38:01:73:AE:E9:E5:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/323830333a353963303a3a2f33322d3332203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:59c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:2a:94:e2:c2:54:8e:fe:c9:c0:1d:49:0e:3a:c1:62:ca:
         34:99:b1:46:e6:a1:c9:2b:00:6f:90:20:26:2e:fd:57:49:d5:
         08:ed:d6:46:23:b0:59:aa:b3:17:54:f2:3c:34:25:dc:d6:bc:
         e5:7a:16:aa:14:d0:c0:b5:b1:57:b5:88:da:dd:c5:10:83:81:
         9e:c1:b7:c4:db:f5:4b:71:1d:e0:d4:8e:f0:36:10:34:62:22:
         87:4f:1e:59:85:33:6e:05:a8:ac:dc:74:c1:af:03:d4:4d:dc:
         76:f2:35:9a:e5:cc:0b:ef:c7:3e:7a:1c:5a:24:df:73:67:b9:
         30:bb:e3:23:91:38:37:96:73:e3:2d:6d:e1:34:7a:97:46:b7:
         05:5e:46:f4:4d:4d:97:84:1e:73:85:c1:65:fd:26:02:4f:4c:
         35:99:32:aa:ae:cb:1e:69:47:0c:9f:9b:5e:68:85:fd:62:2f:
         75:a1:ee:d8:ac:79:55:1d:75:f5:3a:9b:46:9b:cd:8e:b7:11:
         b1:dd:fc:06:cf:bb:63:12:a5:be:bd:9b:0c:e0:c9:e4:d9:15:
         ba:90:d0:8f:10:3f:b5:46:b2:dd:6e:6e:0b:ee:5f:85:f6:f1:
         ec:6e:85:7b:9a:38:8d:de:74:45:8a:25:a9:e0:55:94:48:ad:
         d2:03:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----