Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11DA7C033570EBD09568B0329C7E1D2CB5AAD5DB0FA8D6EBB646E48CEB4DD/0/323830333a643332303a3a2f33322d3332203d3e20323633363839.roa
File:                     323830333a643332303a3a2f33322d3332203d3e20323633363839.roa (raw, json)
Hash identifier:          b4+9IrkXeufTlFDlONsWIl+fyD5ikUulGFsU4ebx4fU=
Subject key identifier:   93:6F:51:AF:9D:01:B4:A0:37:B5:A5:B9:52:6F:43:28:8B:4A:1D:1A
Certificate issuer:       /CN=701A710C7B4945AFB1D3F487ADF5526472D4B798
Certificate serial:       1ACF37E4405E51F868D5280D13D855FACC489D15
Authority key identifier: 70:1A:71:0C:7B:49:45:AF:B1:D3:F4:87:AD:F5:52:64:72:D4:B7:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701A710C7B4945AFB1D3F487ADF5526472D4B798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F11DA7C033570EBD09568B0329C7E1D2CB5AAD5DB0FA8D6EBB646E48CEB4DD/0/323830333a643332303a3a2f33322d3332203d3e20323633363839.roa
Signing time:             Tue 05 Mar 2024 18:08:50 +0000
ROA not before:           Tue 05 Mar 2024 18:03:50 +0000
ROA not after:            Tue 04 Mar 2025 18:08:50 +0000
asID:                     263689
IP address blocks:        2803:d320::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cf:37:e4:40:5e:51:f8:68:d5:28:0d:13:d8:55:fa:cc:48:9d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701A710C7B4945AFB1D3F487ADF5526472D4B798
        Validity
            Not Before: Mar  5 18:03:50 2024 GMT
            Not After : Mar  4 18:08:50 2025 GMT
        Subject: CN=936F51AF9D01B4A037B5A5B9526F43288B4A1D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:d7:40:b8:2b:0c:e9:be:ed:04:ba:21:a2:
                    c5:de:66:45:c1:aa:08:a0:4d:e7:aa:58:ab:8a:da:
                    d2:a6:1e:71:68:7d:cb:4d:36:19:c3:40:9b:36:3a:
                    bb:7e:92:a1:95:79:e1:c4:cc:01:11:67:5e:a9:de:
                    9d:f5:7a:58:57:62:5b:54:a1:c0:eb:86:72:9b:06:
                    c0:93:20:9f:ee:a1:61:76:4d:32:4d:f2:72:28:ec:
                    59:26:11:06:50:7a:de:4c:57:ca:72:c0:b0:93:55:
                    5b:fc:f1:de:df:65:1b:50:1b:96:ed:7c:30:12:5b:
                    23:06:11:fa:dd:35:6c:a2:f0:2a:a7:eb:a1:ad:f0:
                    25:41:00:54:6c:3e:b3:8a:01:39:bd:d8:32:95:aa:
                    45:60:ce:11:e0:5c:d4:32:0d:0c:73:11:81:0c:25:
                    19:a1:c5:da:d9:71:4a:69:f9:83:5e:93:19:35:fd:
                    17:d4:7d:32:f7:d7:69:72:46:5e:f7:18:09:34:79:
                    07:44:0f:68:ce:86:9c:9e:7f:0c:f7:5f:d2:81:21:
                    3e:3f:ea:f6:9f:a5:67:37:c6:f0:5d:f9:3b:53:60:
                    24:b8:be:5e:33:15:fb:91:6a:fc:dc:c0:3c:4a:24:
                    a8:d1:59:f6:09:99:10:b3:bb:d0:af:25:07:62:dd:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6F:51:AF:9D:01:B4:A0:37:B5:A5:B9:52:6F:43:28:8B:4A:1D:1A
            X509v3 Authority Key Identifier:
                keyid:70:1A:71:0C:7B:49:45:AF:B1:D3:F4:87:AD:F5:52:64:72:D4:B7:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11DA7C033570EBD09568B0329C7E1D2CB5AAD5DB0FA8D6EBB646E48CEB4DD/0/701A710C7B4945AFB1D3F487ADF5526472D4B798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701A710C7B4945AFB1D3F487ADF5526472D4B798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11DA7C033570EBD09568B0329C7E1D2CB5AAD5DB0FA8D6EBB646E48CEB4DD/0/323830333a643332303a3a2f33322d3332203d3e20323633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d320::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:2c:08:9e:e6:a4:93:3b:f7:5e:53:30:d1:02:12:57:05:1c:
         cb:ee:f1:bb:8c:c9:db:c4:62:85:ef:92:52:1a:d6:43:6d:0b:
         ce:8f:a0:1f:cd:6f:7d:e7:26:0c:f5:ef:19:67:ed:22:b6:a6:
         df:d7:1a:55:23:a4:47:ed:50:04:a2:0d:40:d3:93:05:80:e8:
         77:69:e7:71:02:5b:85:c9:95:65:58:7d:cd:0e:ee:98:7e:2e:
         4c:7c:a2:d5:da:cf:2a:76:c5:ea:fc:a3:68:05:cc:87:70:45:
         f0:c9:fd:61:ca:df:31:28:6a:19:76:92:37:76:7f:bb:d6:7e:
         0f:e9:fe:76:d2:00:a2:10:3f:b6:bd:c1:f2:a2:7f:25:d5:92:
         89:39:77:73:5a:9f:13:46:6d:5e:bb:38:2e:9c:3a:0d:24:84:
         c7:41:15:f4:17:62:24:a7:fd:84:66:54:a2:7b:62:c3:6c:9b:
         19:96:5b:51:37:2e:17:91:a2:08:42:aa:b7:15:e7:2f:d1:f1:
         e2:4d:91:ba:64:8b:33:63:6e:ff:e3:7b:c3:15:39:96:20:c2:
         34:5a:6b:98:e3:38:c9:5d:6b:12:cc:4f:cf:20:2c:3f:6e:67:
         52:4b:48:95:a4:9d:ff:ec:dd:70:e3:f9:2e:4a:cc:1f:70:f2:
         bf:56:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----