Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/323830333a6432303a3a2f33322d3332203d3e20323636363936.roa
File:                     323830333a6432303a3a2f33322d3332203d3e20323636363936.roa (raw, json)
Hash identifier:          mjrelByTXY65k+8XtzNbOMeTPkoqm96Q5yh1S+YEjo8=
Subject key identifier:   B8:FF:54:C1:95:3A:67:22:1B:34:8F:C1:93:3C:25:D3:7A:A1:4F:EC
Certificate issuer:       /CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
Certificate serial:       09A650FB099C7980DD4443608880F377C17F5E64
Authority key identifier: DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/323830333a6432303a3a2f33322d3332203d3e20323636363936.roa
Signing time:             Thu 21 Mar 2024 18:50:00 +0000
ROA not before:           Thu 21 Mar 2024 18:45:00 +0000
ROA not after:            Thu 20 Mar 2025 18:50:00 +0000
asID:                     266696
IP address blocks:        2803:d20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a6:50:fb:09:9c:79:80:dd:44:43:60:88:80:f3:77:c1:7f:5e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB
        Validity
            Not Before: Mar 21 18:45:00 2024 GMT
            Not After : Mar 20 18:50:00 2025 GMT
        Subject: CN=B8FF54C1953A67221B348FC1933C25D37AA14FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:ba:b5:d4:54:48:6a:01:3b:6d:4e:39:22:
                    14:86:5e:2c:f5:46:4f:cd:63:a8:e3:3f:11:7f:fa:
                    82:94:1a:ac:c2:58:67:ba:3c:b6:0e:6c:84:d7:a3:
                    5b:cf:aa:51:e6:c1:a2:ef:6f:bd:b6:d7:41:dc:f5:
                    c6:9c:69:e8:71:0a:5f:6c:4f:bd:fb:32:9b:cc:d8:
                    4b:2f:f6:09:14:12:e2:98:95:76:69:3a:1e:95:3a:
                    62:f0:be:6e:db:fd:9d:ac:20:a8:96:8c:a2:a0:b8:
                    6c:69:42:e2:e0:99:7f:ba:30:dd:f9:29:e6:d9:de:
                    78:6a:dc:e1:ea:69:44:67:9c:11:04:6a:52:dc:4b:
                    0c:49:87:ed:63:27:8e:ca:94:3b:67:6f:f6:51:16:
                    42:30:6b:02:6a:27:7b:ef:e5:43:c9:1d:c3:4e:d2:
                    16:79:15:7b:d7:af:1e:e7:e2:9e:75:e3:f9:dd:57:
                    89:7e:1c:7a:db:0b:d3:25:49:22:c2:ca:e6:29:51:
                    32:54:37:0d:b1:ad:40:6b:24:45:31:63:ed:06:7a:
                    14:84:6a:30:67:17:95:0c:2d:95:32:8e:96:44:67:
                    ca:f0:3e:ed:8f:5e:82:0a:e9:86:c3:f7:e8:7f:bf:
                    f8:bd:66:dd:85:79:62:ad:a9:98:52:71:95:96:bd:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FF:54:C1:95:3A:67:22:1B:34:8F:C1:93:3C:25:D3:7A:A1:4F:EC
            X509v3 Authority Key Identifier:
                keyid:DE:FA:5C:5A:FE:63:F6:B0:2C:3C:33:39:9D:2C:19:2E:24:DC:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEFA5C5AFE63F6B02C3C33399D2C192E24DCF7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D939D9ABEA691570A5D804C203149B30ADA870DF9D368FE15C53E58B1B4DE3FC/0/323830333a6432303a3a2f33322d3332203d3e20323636363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:df:05:8a:1b:5f:f5:55:f8:9a:9f:f4:c9:1a:f2:54:68:
         e8:b0:65:b3:09:77:70:eb:7e:59:84:2c:f1:89:a4:18:e3:6a:
         4a:13:fb:d5:9a:d0:07:a8:b3:f8:d3:a0:79:a3:a2:76:36:63:
         16:3a:9a:8d:c4:fd:17:a7:ec:d3:2b:d2:97:d5:be:bd:11:a4:
         71:f9:ba:5e:60:dd:73:ea:1e:d2:9b:6d:47:c3:c0:b5:bc:42:
         62:03:d2:f5:bf:60:7a:e2:79:44:39:08:c1:4b:bb:06:ab:74:
         56:61:6d:24:69:80:46:31:ed:ab:af:1a:d0:aa:a9:8e:89:11:
         2d:77:da:95:91:b8:85:0b:ff:a8:dd:e3:8c:38:5f:db:5c:f0:
         64:2d:14:2f:d5:3e:3f:0c:82:05:1d:c3:78:24:02:67:e8:04:
         76:6d:8d:dd:fb:9f:09:ca:44:e3:18:30:09:91:1e:46:13:a6:
         2f:32:dc:d5:d5:fd:21:18:8a:fa:d8:8b:74:66:ef:2d:fc:60:
         e3:61:fe:47:01:13:b6:76:f6:9e:80:9c:ea:b7:79:4e:23:89:
         e2:91:bf:1f:a2:6b:e4:37:be:b5:d8:13:4f:db:a7:40:c5:7e:
         ed:5e:06:10:61:57:e6:8f:e5:fe:e8:a0:c2:a6:17:34:09:e7:
         ef:37:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----