Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7C06F3612F9EF4D88F4C241F8F17EC5BBD6D0735B18C3B5E223BE4569B48D78/0/323830333a326235303a3a2f33322d3334203d3e20323733393038.roa
File:                     323830333a326235303a3a2f33322d3334203d3e20323733393038.roa (raw, json)
Hash identifier:          pGq+X8Xjy0/YEfaMU6rElgOeX8b2Ls6rFXwNPbo2zgg=
Subject key identifier:   36:80:29:4D:CB:15:33:67:CC:75:F1:2E:BB:E2:B9:C7:CB:97:A2:CB
Certificate issuer:       /CN=E6E73B984B2E0B4F7A8698A00070BE6A094C8198
Certificate serial:       2A76AFF6189128A4CAF4FFEB4802E871C66DD608
Authority key identifier: E6:E7:3B:98:4B:2E:0B:4F:7A:86:98:A0:00:70:BE:6A:09:4C:81:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6E73B984B2E0B4F7A8698A00070BE6A094C8198.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7C06F3612F9EF4D88F4C241F8F17EC5BBD6D0735B18C3B5E223BE4569B48D78/0/323830333a326235303a3a2f33322d3334203d3e20323733393038.roa
Signing time:             Fri 30 Aug 2024 01:50:00 +0000
ROA not before:           Fri 30 Aug 2024 01:45:00 +0000
ROA not after:            Fri 29 Aug 2025 01:50:00 +0000
asID:                     273908
IP address blocks:        2803:2b50::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:76:af:f6:18:91:28:a4:ca:f4:ff:eb:48:02:e8:71:c6:6d:d6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E73B984B2E0B4F7A8698A00070BE6A094C8198
        Validity
            Not Before: Aug 30 01:45:00 2024 GMT
            Not After : Aug 29 01:50:00 2025 GMT
        Subject: CN=3680294DCB153367CC75F12EBBE2B9C7CB97A2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:64:91:d6:ab:84:77:aa:6c:32:b9:77:a6:60:
                    41:c0:f6:16:3f:16:e2:5a:dc:51:bd:68:3a:9b:f3:
                    01:7c:7f:8d:4d:f8:1b:79:1e:58:5b:73:f8:3f:eb:
                    05:98:0f:0c:1a:22:d9:50:68:23:ab:9f:16:03:ea:
                    0e:4c:9e:80:6f:9a:0b:4c:73:71:78:d5:c6:8c:26:
                    ff:d0:d8:ed:25:d9:60:9c:36:81:33:37:2f:97:3d:
                    6a:5d:9a:92:9f:a1:8a:cc:78:40:b5:c9:5b:0a:5d:
                    3e:b6:e7:9f:8f:15:a4:d9:a1:ba:f3:52:6a:31:bd:
                    78:05:a4:cb:4a:6d:6c:13:bf:3a:91:61:c1:8a:ed:
                    e8:a8:d5:fb:8d:1a:70:0a:77:8d:6e:ed:e3:0a:bb:
                    1f:bd:3c:58:b8:e9:c9:bd:10:2e:f2:6c:14:6b:5b:
                    1b:d8:9d:de:fa:e1:7b:24:3c:74:89:06:5e:b8:66:
                    b3:ca:fa:84:29:b4:f9:9f:a6:49:1d:b3:2c:36:a6:
                    49:b3:14:0e:97:ee:f3:62:24:43:29:91:c2:87:25:
                    ba:94:fb:0c:c7:94:a0:15:b7:8f:82:99:2b:f9:47:
                    71:36:91:aa:93:47:32:72:c1:31:a5:ce:3b:7f:c4:
                    53:68:73:fd:0d:9a:39:87:3a:63:64:a8:c8:5d:03:
                    c5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:80:29:4D:CB:15:33:67:CC:75:F1:2E:BB:E2:B9:C7:CB:97:A2:CB
            X509v3 Authority Key Identifier:
                keyid:E6:E7:3B:98:4B:2E:0B:4F:7A:86:98:A0:00:70:BE:6A:09:4C:81:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7C06F3612F9EF4D88F4C241F8F17EC5BBD6D0735B18C3B5E223BE4569B48D78/0/E6E73B984B2E0B4F7A8698A00070BE6A094C8198.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6E73B984B2E0B4F7A8698A00070BE6A094C8198.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7C06F3612F9EF4D88F4C241F8F17EC5BBD6D0735B18C3B5E223BE4569B48D78/0/323830333a326235303a3a2f33322d3334203d3e20323733393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b50::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:65:e6:11:8f:dd:34:af:49:20:90:fc:fe:08:4c:36:3c:e5:
         f2:ee:da:05:65:35:d3:30:45:ee:b5:77:a7:dd:d7:23:23:76:
         1b:1a:1b:42:1f:19:d5:95:b1:07:43:eb:4f:1f:b6:4a:e9:b7:
         a4:c3:ac:36:c1:46:de:dd:63:e2:7e:cc:ab:4a:dd:a5:23:e6:
         73:c7:4d:e6:00:ab:e8:36:37:c3:a6:c5:3a:b8:0d:17:a1:b0:
         d9:ad:f3:ba:05:ce:21:71:40:1c:c3:4e:c8:69:36:b1:f2:03:
         f1:8f:18:85:ec:e0:5e:d1:cb:7c:b0:43:74:c5:03:5f:06:ad:
         6d:30:5c:e9:b4:aa:00:0d:77:f8:82:c1:bd:c2:69:a4:ac:72:
         cc:62:e7:44:ce:3d:18:98:3e:9e:c1:75:6e:ee:0c:14:b9:5c:
         18:79:b6:c6:f6:1a:78:ff:be:93:98:75:21:d8:b1:66:c0:e2:
         a1:74:6b:48:e6:7b:43:35:c5:18:ff:f2:8a:ae:ed:07:37:3f:
         8e:3b:21:20:a6:7f:d8:d3:78:d8:40:61:0f:bf:91:95:27:87:
         07:2e:40:31:d9:22:48:fd:7c:23:ba:cb:07:63:c3:86:26:68:
         1e:6c:04:3d:5b:be:bf:28:98:12:d8:9d:77:04:76:43:c8:c5:
         77:ed:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----