Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/323830333a6432303a3a2f33322d3332203d3e20323635363834.roa
File:                     323830333a6432303a3a2f33322d3332203d3e20323635363834.roa (raw, json)
Hash identifier:          xvWmK9K1BpRciO+T+cR82VhgkRzdY0Pcy23PcTLKuXw=
Subject key identifier:   2C:8C:C4:6E:E6:B9:28:D2:70:DF:1B:E4:71:5E:3D:17:02:A8:CE:4C
Certificate issuer:       /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Certificate serial:       384B20AC0BD11EA16576976625226937914D50A8
Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/323830333a6432303a3a2f33322d3332203d3e20323635363834.roa
Signing time:             Thu 21 Mar 2024 19:15:04 +0000
ROA not before:           Thu 21 Mar 2024 19:10:04 +0000
ROA not after:            Thu 20 Mar 2025 19:15:04 +0000
asID:                     265684
IP address blocks:        2803:d20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4b:20:ac:0b:d1:1e:a1:65:76:97:66:25:22:69:37:91:4d:50:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
        Validity
            Not Before: Mar 21 19:10:04 2024 GMT
            Not After : Mar 20 19:15:04 2025 GMT
        Subject: CN=2C8CC46EE6B928D270DF1BE4715E3D1702A8CE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:94:18:86:72:ca:89:96:af:2f:40:5e:a7:
                    54:7c:c5:f9:90:bd:ad:3b:66:85:8e:68:ac:13:10:
                    08:a4:87:ba:ac:45:74:13:99:47:7f:f7:03:95:0d:
                    a8:68:af:3c:6c:f4:6a:ca:21:f9:38:cf:65:90:ad:
                    f8:29:5c:b5:e7:4f:7d:83:9d:a8:f3:be:33:0a:af:
                    f0:e1:66:97:77:e1:c1:a4:79:50:06:bd:69:fa:a4:
                    56:14:0b:01:5b:16:8c:67:a7:6a:bd:cc:92:f6:61:
                    5d:81:ff:52:b8:31:55:73:6e:d0:c3:98:75:bf:a9:
                    fe:71:d0:46:64:f9:77:72:f7:02:74:f9:e8:e8:89:
                    8a:fe:36:b6:6e:8e:94:ef:d6:fd:4b:c3:57:03:fa:
                    8c:9b:83:e6:62:2e:8c:da:aa:bb:16:f7:ff:af:6f:
                    e4:ef:54:be:f4:46:1b:ee:2f:a7:33:5a:12:7d:bb:
                    b5:3d:08:d8:79:a7:78:75:dd:6c:ad:9e:5e:3e:bc:
                    db:77:d8:3a:c7:af:50:fd:f8:f0:f5:e0:9e:64:aa:
                    51:d1:3e:44:f3:f3:18:51:cf:a6:07:6c:b7:ee:db:
                    af:20:cc:e2:da:f0:41:c5:2e:ef:c4:59:ce:5b:a6:
                    12:4c:a7:db:46:3c:84:ec:9a:1d:f1:d5:68:2f:36:
                    97:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8C:C4:6E:E6:B9:28:D2:70:DF:1B:E4:71:5E:3D:17:02:A8:CE:4C
            X509v3 Authority Key Identifier:
                keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/323830333a6432303a3a2f33322d3332203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:bf:59:0d:a3:79:c9:19:b1:83:b8:79:d3:db:04:df:95:5a:
         dd:88:c8:8b:37:d4:e3:93:95:45:98:ec:82:74:50:7a:be:12:
         20:2c:56:84:31:93:0a:00:fd:ff:52:d4:0f:ac:4b:57:51:6c:
         6b:df:7e:bd:d7:b7:b6:6e:ab:f4:da:ed:db:85:08:22:4b:dc:
         5a:32:4f:45:c3:e5:90:10:b6:82:e4:fa:af:2e:71:e4:70:9d:
         d9:c3:10:a5:f6:e9:e1:9a:23:b3:b8:61:2b:fd:5c:13:dc:8c:
         3b:c3:0f:44:e1:17:05:bf:6d:bb:93:39:81:fc:94:19:7d:03:
         0c:07:0c:cd:87:6b:6b:ae:ad:7a:cf:0c:16:5f:b2:00:16:86:
         1e:10:9a:0b:8c:27:e3:e1:55:b4:67:1e:0a:fb:90:bb:8c:d3:
         51:41:d3:98:75:17:37:69:8d:3a:ed:2b:03:dd:c2:8e:90:74:
         4c:da:55:2b:92:b6:ce:de:c4:79:b4:28:04:7e:fe:ba:ae:e8:
         b6:b6:a6:25:30:d6:28:94:74:51:c7:e2:c0:b0:0b:98:4c:2d:
         73:a6:4d:5d:6f:bd:21:c3:82:f4:f4:80:d0:e1:d1:c9:e3:a0:
         5e:32:46:09:c1:69:c7:2d:93:35:32:28:b5:06:7e:da:ba:09:
         c0:26:03:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----