Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/323830333a313732303a3a2f33322d3332203d3e20323636383135.roa
File:                     323830333a313732303a3a2f33322d3332203d3e20323636383135.roa (raw, json)
Hash identifier:          ClWhRkD9DywI0fNpkibK1XmnJlEG+3osCfSHUIETZ4U=
Subject key identifier:   7B:7A:50:A3:0D:A3:B7:53:00:C1:A1:30:CB:2D:FF:00:3D:9C:D1:79
Certificate issuer:       /CN=3BE200CBC2748D500CCB2B319E104EF022ECFE5D
Certificate serial:       42EAD35D53569619405CED2FF267E136911E1A48
Authority key identifier: 3B:E2:00:CB:C2:74:8D:50:0C:CB:2B:31:9E:10:4E:F0:22:EC:FE:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/323830333a313732303a3a2f33322d3332203d3e20323636383135.roa
Signing time:             Tue 05 Mar 2024 18:15:26 +0000
ROA not before:           Tue 05 Mar 2024 18:10:26 +0000
ROA not after:            Tue 04 Mar 2025 18:15:26 +0000
asID:                     266815
IP address blocks:        2803:1720::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ea:d3:5d:53:56:96:19:40:5c:ed:2f:f2:67:e1:36:91:1e:1a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE200CBC2748D500CCB2B319E104EF022ECFE5D
        Validity
            Not Before: Mar  5 18:10:26 2024 GMT
            Not After : Mar  4 18:15:26 2025 GMT
        Subject: CN=7B7A50A30DA3B75300C1A130CB2DFF003D9CD179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:7d:9f:c8:e6:7b:33:fc:22:b5:4f:79:d5:
                    a8:e2:e1:46:63:17:8a:8b:50:41:22:ab:ae:24:d8:
                    c9:c5:9e:4a:a9:9d:1c:03:97:59:7a:64:6d:8e:43:
                    10:cf:7b:4d:35:9f:b4:b4:c2:47:66:45:dc:7a:70:
                    10:10:8e:b5:43:79:ce:59:ea:49:94:83:66:1d:bc:
                    ea:97:53:de:64:fc:66:41:9b:9f:11:af:22:7c:00:
                    e9:3a:32:19:ce:3c:c6:01:3c:bb:28:51:99:82:bc:
                    f2:d8:07:b5:32:02:5d:c1:e4:75:71:11:54:01:93:
                    9c:25:4c:c3:20:be:37:37:8a:a1:0d:ab:7c:25:91:
                    f7:3d:aa:77:2a:93:05:03:e9:4c:3f:dc:77:b1:da:
                    a2:2a:f7:45:68:d0:bf:5e:48:31:88:dc:57:dd:7e:
                    2e:2f:be:4e:fb:60:0d:4d:96:0c:21:ea:16:0b:c2:
                    3a:af:ef:9d:cb:b4:9d:30:f3:1f:de:f3:b8:5f:7d:
                    b9:48:c4:93:79:c4:6a:eb:07:96:01:83:ab:ee:66:
                    5f:55:27:94:01:4b:7e:e7:0b:e4:42:b5:41:ff:2b:
                    ca:64:b0:b4:b1:d6:78:45:b6:21:b4:98:69:fb:4d:
                    47:cb:33:8b:35:e8:62:79:4d:b2:f0:2a:57:55:ad:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7A:50:A3:0D:A3:B7:53:00:C1:A1:30:CB:2D:FF:00:3D:9C:D1:79
            X509v3 Authority Key Identifier:
                keyid:3B:E2:00:CB:C2:74:8D:50:0C:CB:2B:31:9E:10:4E:F0:22:EC:FE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/323830333a313732303a3a2f33322d3332203d3e20323636383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1720::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:e4:de:b9:88:62:bc:99:b5:05:20:d1:1e:4c:21:f9:8e:
         18:c9:87:eb:a0:46:73:98:c7:02:1f:2e:bf:df:47:bd:02:da:
         39:48:26:6f:0c:2a:3e:87:73:8b:26:74:f6:9b:23:c0:66:4a:
         bb:77:dc:a0:a5:01:71:82:e9:51:92:7a:b5:4a:ff:de:c0:fd:
         5b:a4:18:ae:0d:48:5a:24:b1:1e:67:67:67:18:b7:b8:92:e5:
         b3:91:33:3c:18:30:84:e4:d1:1d:f9:42:1c:54:b0:78:2c:9e:
         fe:1b:46:5c:78:75:94:18:a8:fb:72:db:5a:d6:19:24:ed:70:
         96:16:25:a9:e7:48:d3:6f:4d:16:69:27:00:a0:4e:5d:f3:82:
         ee:b2:02:c5:a8:27:82:74:11:bc:43:a3:cb:b2:17:2d:99:db:
         a8:f9:6b:a4:2b:e5:67:00:78:9e:37:3c:70:fa:18:b8:7c:5e:
         c8:38:c3:93:cf:64:af:ba:29:96:2d:80:76:05:17:2f:e6:5e:
         ca:6e:4e:7b:45:f1:4e:5c:52:46:82:18:07:6d:d9:2c:f3:e5:
         dd:51:35:36:db:4b:55:e4:95:b2:8c:ba:6e:55:2d:c9:6e:e4:
         c3:a1:d5:90:c9:2f:15:6d:cc:0c:c0:fd:0b:dc:1d:1b:e8:e9:
         bb:17:31:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----