Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20323633383132.roa
File:                     323830333a643565303a3a2f33322d3438203d3e20323633383132.roa (raw, json)
Hash identifier:          T07YtjedsNsDj/dRIUvqGfsPXcZGQqescOWQrQJ1Pu8=
Subject key identifier:   C5:43:D6:D1:96:93:FF:55:AC:FC:23:7A:5D:EF:3B:F4:33:D6:1E:0F
Certificate issuer:       /CN=534C99354C22A0048A232EFCDC85F70E7478E04F
Certificate serial:       6326022E5270E96FDCBD3A8983A469D94D4279B3
Authority key identifier: 53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20323633383132.roa
Signing time:             Tue 05 Mar 2024 17:58:50 +0000
ROA not before:           Tue 05 Mar 2024 17:53:50 +0000
ROA not after:            Tue 04 Mar 2025 17:58:50 +0000
asID:                     263812
IP address blocks:        2803:d5e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:26:02:2e:52:70:e9:6f:dc:bd:3a:89:83:a4:69:d9:4d:42:79:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534C99354C22A0048A232EFCDC85F70E7478E04F
        Validity
            Not Before: Mar  5 17:53:50 2024 GMT
            Not After : Mar  4 17:58:50 2025 GMT
        Subject: CN=C543D6D19693FF55ACFC237A5DEF3BF433D61E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e5:30:19:c6:43:cb:9e:8b:d8:d2:60:0e:93:
                    e7:c7:77:f4:03:16:e3:c9:f7:60:32:6a:5f:da:4a:
                    8a:6a:9a:1b:09:b4:6a:5e:8f:df:16:3b:97:0e:29:
                    71:c0:d0:7e:16:dc:7f:50:0c:c0:11:30:a6:87:23:
                    70:da:4a:5e:fb:a4:2a:14:ab:af:4e:67:72:59:af:
                    e0:aa:30:a7:9f:79:32:fd:49:64:92:fb:67:c8:1c:
                    40:39:9a:02:b4:06:e8:f2:96:ed:c4:14:60:a2:0a:
                    36:ec:e3:53:1d:30:c1:64:ca:4a:e0:36:7c:be:19:
                    62:15:2b:9b:52:4a:19:05:aa:29:ba:97:84:98:71:
                    af:54:20:64:e2:f0:3e:2c:62:e8:c0:8d:1f:a3:be:
                    55:6a:a4:ca:86:fe:04:40:e6:b2:d5:fc:3f:8b:67:
                    91:29:57:2b:c2:37:a4:fd:5f:8b:21:7b:b2:fc:a7:
                    f5:4e:6f:c6:2b:a0:2b:5d:f8:aa:3c:ce:81:4e:2c:
                    a7:03:e1:a9:94:39:22:80:12:dc:10:93:3c:8e:6b:
                    bd:9c:1b:35:a5:22:7c:3c:bf:bc:57:b3:7e:41:25:
                    a0:c4:87:af:a1:de:9b:e5:9e:ae:c6:87:08:b0:28:
                    00:2f:b6:3a:17:2b:8f:84:6d:77:0a:65:cb:0c:82:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:43:D6:D1:96:93:FF:55:AC:FC:23:7A:5D:EF:3B:F4:33:D6:1E:0F
            X509v3 Authority Key Identifier:
                keyid:53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:af:75:bf:7f:c2:8b:3f:de:0e:4f:9b:3e:88:df:d3:e1:52:
         c9:34:17:b3:f1:9c:82:94:cc:a3:b3:5b:58:47:1b:c0:dc:44:
         0d:e6:09:6b:aa:53:45:23:a7:f0:20:98:11:3f:f0:ee:ef:62:
         d9:ab:52:cd:32:00:e2:9a:71:6e:c9:83:2a:c1:d5:a6:75:8e:
         29:ed:3b:d2:f3:80:82:c9:fc:2a:ed:c8:b8:b9:6b:2b:9c:79:
         83:b6:d3:d1:6e:63:f1:1b:74:a0:c6:73:04:cb:2a:01:a9:f3:
         8d:7a:1f:a6:ac:89:51:77:16:bd:c2:5d:3a:c2:9c:6c:11:3d:
         16:39:10:e2:9e:07:33:e5:91:c0:10:a8:e8:58:d0:99:96:fd:
         15:85:7b:48:3c:c6:f6:8e:27:61:4f:86:02:d6:77:4b:b1:ef:
         9f:63:cc:a5:e8:2e:07:7d:85:19:65:ef:e3:13:d1:86:a1:e0:
         c1:f0:b4:f9:7a:8b:1e:06:d5:d0:38:62:4a:9f:2d:d6:3a:99:
         da:6e:39:83:42:db:02:92:70:5c:5d:1f:a8:64:b2:82:d7:5b:
         31:07:da:91:8c:56:29:ad:b0:7e:54:a5:83:b7:17:a1:c2:3c:
         68:4b:0d:ae:7f:34:cb:9c:0b:17:d0:57:31:c7:6d:6c:59:a4:
         11:c9:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----