Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20333935313631.roa
File:                     323830333a643565303a3a2f33322d3438203d3e20333935313631.roa (raw, json)
Hash identifier:          kfAAktjvzprO7yiwzDlkwLw1PGtUkfBaAN0MOFiuYBk=
Subject key identifier:   D2:8B:93:6B:61:C0:71:97:F4:43:75:5D:EE:52:B9:8A:FC:44:A5:5F
Certificate issuer:       /CN=534C99354C22A0048A232EFCDC85F70E7478E04F
Certificate serial:       3F5689F63C3446666143B29E5DAB8D53FE9346F9
Authority key identifier: 53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20333935313631.roa
Signing time:             Tue 05 Mar 2024 17:58:51 +0000
ROA not before:           Tue 05 Mar 2024 17:53:51 +0000
ROA not after:            Tue 04 Mar 2025 17:58:51 +0000
asID:                     395161
IP address blocks:        2803:d5e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:56:89:f6:3c:34:46:66:61:43:b2:9e:5d:ab:8d:53:fe:93:46:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534C99354C22A0048A232EFCDC85F70E7478E04F
        Validity
            Not Before: Mar  5 17:53:51 2024 GMT
            Not After : Mar  4 17:58:51 2025 GMT
        Subject: CN=D28B936B61C07197F443755DEE52B98AFC44A55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:05:93:43:e3:60:05:da:f5:22:a0:e5:c2:
                    f2:6e:12:8a:9f:75:84:4b:56:fc:dc:6b:13:f0:04:
                    13:16:fd:ec:e8:bd:a2:a6:1c:bb:a3:bb:2f:cb:4a:
                    30:db:5a:b4:64:ff:42:84:e7:71:fa:04:6a:40:9e:
                    97:3b:b7:88:17:bb:c3:a0:7c:59:f9:31:75:f5:22:
                    37:65:be:6c:66:dc:c5:e0:a5:9c:a3:2b:16:06:ba:
                    89:d1:61:cb:21:6c:a3:83:61:8b:ec:ec:6b:3c:40:
                    fa:75:16:40:90:06:36:89:39:e2:db:69:e8:e3:46:
                    5a:c6:cc:3d:f2:b6:76:fe:5f:b1:ab:ad:7c:91:d7:
                    51:dc:88:a4:5e:f0:f3:42:e1:12:2a:b4:c7:88:8c:
                    c2:02:69:5f:7f:f5:03:ab:59:bd:e3:dd:00:30:e0:
                    bc:02:23:a9:e4:9c:91:17:e4:a5:ac:60:71:f4:11:
                    14:9a:04:db:d7:42:c8:bd:06:b9:3b:97:be:4b:73:
                    66:d6:f9:68:6a:c7:f6:da:62:ee:47:c3:6d:e1:11:
                    30:d7:64:5b:64:d4:05:07:68:8a:28:51:09:83:58:
                    4d:e8:84:7f:90:88:77:1c:7a:b0:26:8a:3a:92:23:
                    93:3d:18:cf:e2:d8:12:3a:1b:6e:9e:ba:c5:27:91:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8B:93:6B:61:C0:71:97:F4:43:75:5D:EE:52:B9:8A:FC:44:A5:5F
            X509v3 Authority Key Identifier:
                keyid:53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:f0:b2:46:cc:6d:a8:c7:73:0a:a1:b0:cc:75:ae:c2:67:60:
         83:f4:da:7c:50:7a:c6:b8:bb:11:17:45:ce:9c:4a:6c:dd:c8:
         95:75:ed:bd:ac:7d:1c:59:e4:08:66:9f:1a:28:ae:85:98:e6:
         da:e6:45:74:f7:d9:a4:2d:04:8c:24:ad:41:47:8b:ed:05:2f:
         d4:76:d5:c4:ae:b4:fa:ad:a5:70:d1:42:7a:17:2e:58:2e:94:
         03:99:06:2c:de:22:74:93:8c:7f:a4:91:20:d0:94:88:6f:e0:
         4b:7c:88:66:79:4d:6d:d1:85:69:78:d2:e0:46:be:22:c8:1c:
         10:f9:6c:ec:64:7a:1b:8a:0b:1b:20:2e:de:83:33:1e:d6:63:
         4e:27:88:0f:db:0b:48:f7:00:10:ab:f2:37:e5:ff:b8:1f:06:
         ee:80:21:ec:1f:38:c2:68:a4:ed:02:95:e5:df:3a:3e:56:e2:
         26:bf:8e:29:9e:c0:44:bd:82:c1:8f:f3:e6:f3:88:40:4c:16:
         4b:ec:fe:1a:cb:78:47:e8:67:4a:51:cf:0f:eb:59:f3:74:09:
         93:65:79:3b:1f:05:cd:eb:98:a6:22:a6:ce:18:b4:df:c0:c2:
         20:b8:81:f3:34:a0:c4:c7:68:fb:86:4d:fb:bd:1e:8d:d7:a9:
         52:7d:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----