Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a3a2f33352d3336203d3e20323637383331.roa
File:                     323830333a383436303a3a2f33352d3336203d3e20323637383331.roa (raw, json)
Hash identifier:          c6Djx0qLmu+JBGHSlffDkyDVN6VAHk4MnMiq1eBKSIM=
Subject key identifier:   80:77:2C:22:8E:D9:9B:14:B2:AF:04:F3:C9:D9:44:92:C9:3E:5C:23
Certificate issuer:       /CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
Certificate serial:       50329F76AD89511B725530A5652595EAC9F14005
Authority key identifier: 80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a3a2f33352d3336203d3e20323637383331.roa
Signing time:             Wed 14 Aug 2024 04:15:00 +0000
ROA not before:           Wed 14 Aug 2024 04:10:00 +0000
ROA not after:            Wed 13 Aug 2025 04:15:00 +0000
asID:                     267831
IP address blocks:        2803:8460::/35 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:32:9f:76:ad:89:51:1b:72:55:30:a5:65:25:95:ea:c9:f1:40:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E7F1CB4C1BF7A3201ABC878853169CBCE6007A
        Validity
            Not Before: Aug 14 04:10:00 2024 GMT
            Not After : Aug 13 04:15:00 2025 GMT
        Subject: CN=80772C228ED99B14B2AF04F3C9D94492C93E5C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:af:ee:b5:06:17:5b:cc:e6:b4:0f:59:c0:
                    6a:ce:4c:f2:ac:44:cd:82:c9:72:3e:c3:dd:52:0f:
                    e1:f5:3c:b9:8c:f0:45:83:77:28:80:05:a3:f7:87:
                    21:63:28:cb:ee:cc:59:b0:e9:1f:12:a1:6f:b5:53:
                    ac:b9:2c:6b:95:42:6f:6c:07:8b:66:62:26:79:9a:
                    cf:90:5d:d1:78:fe:88:63:b4:98:bd:07:84:c4:1b:
                    96:ad:dc:f7:70:d2:29:a6:a2:a0:c0:22:4b:6e:23:
                    da:6f:1d:9c:06:ee:ac:ee:5c:df:7a:c7:a5:c9:6a:
                    e4:3b:69:c3:29:a3:b4:fd:1a:7f:38:62:6e:32:0e:
                    88:93:96:2a:07:49:96:c5:fe:70:a6:ce:9b:98:12:
                    75:c3:21:ce:46:c9:e7:1a:36:d8:cb:0f:5f:ac:38:
                    a1:e0:14:26:f1:d1:75:bc:13:aa:11:41:69:1f:9e:
                    cd:d3:f9:d6:07:4d:26:c9:b4:a5:e9:de:bc:d7:77:
                    8a:35:6c:59:eb:6c:96:de:7c:1c:d2:7c:5a:90:33:
                    b6:9b:37:a1:68:77:61:38:8f:60:eb:3b:31:c2:27:
                    c3:b5:04:8c:25:bc:15:bd:c5:b6:49:73:03:77:37:
                    47:78:87:a2:2d:4a:d6:f4:ad:4a:ce:b9:b4:74:86:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:77:2C:22:8E:D9:9B:14:B2:AF:04:F3:C9:D9:44:92:C9:3E:5C:23
            X509v3 Authority Key Identifier:
                keyid:80:E7:F1:CB:4C:1B:F7:A3:20:1A:BC:87:88:53:16:9C:BC:E6:00:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80E7F1CB4C1BF7A3201ABC878853169CBCE6007A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C95F97F11ABED759F694B57751B239FCE39EB0EC97B387972A72309E5209AEE4/0/323830333a383436303a3a2f33352d3336203d3e20323637383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8460::/35

    Signature Algorithm: sha256WithRSAEncryption
         66:b9:62:5d:73:99:33:18:97:ee:6c:45:11:1c:aa:5d:d9:69:
         d7:8d:d2:e0:59:17:dc:c1:de:d6:6c:6a:7e:24:f4:ca:27:06:
         e8:34:24:ce:e0:94:03:26:68:07:d1:cf:2a:7c:70:14:58:c0:
         ae:48:e4:6f:27:44:eb:71:1f:eb:ee:4f:9a:b9:ca:0e:76:fa:
         df:99:42:0c:c5:2d:54:f9:93:65:4e:94:28:53:b5:4b:5f:1f:
         a2:1b:d9:58:4c:af:7d:bc:34:52:e0:f0:47:72:d8:31:05:f5:
         ed:37:83:59:c6:c2:87:8d:57:cf:ff:4e:c3:f8:d6:d7:7a:69:
         4e:90:1d:22:8e:93:1e:72:bc:f6:45:2e:11:bd:ca:73:40:d2:
         d4:f1:6a:c1:91:d4:ef:e2:8a:82:00:16:47:11:9b:7f:e7:ed:
         6e:2c:1f:67:2e:29:7a:02:de:22:3f:51:47:2a:e3:c4:0c:0e:
         26:a4:e8:2a:5a:76:e7:51:8a:80:62:f6:0a:f6:af:26:4e:e5:
         b3:4b:b7:2d:eb:a9:5c:a1:49:8b:04:62:a7:00:34:76:a9:86:
         65:5d:4f:9f:98:ac:c3:53:58:1e:6b:99:b4:49:5a:dd:f0:09:
         9c:92:dd:52:cc:8c:94:85:a4:82:9c:85:c8:75:fe:c3:bc:2f:
         2e:60:f2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----