Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAB5F656D665E3546BCB0AD1964771D3B4A3B7BF77363B6A9EC7BE8BCAC73126/0/323830333a643931303a3a2f33322d3332203d3e20323732303131.roa
File:                     323830333a643931303a3a2f33322d3332203d3e20323732303131.roa (raw, json)
Hash identifier:          nknyT9Uc2YyBBheHuv7KFhJWGZSzM7bZT55Xytuhfg4=
Subject key identifier:   97:30:5B:D7:8F:43:0C:B9:2A:B4:3E:9A:7F:7B:E1:89:7C:B5:41:03
Certificate issuer:       /CN=A9E3C56198CC897143ABFB547CF22B7BD8A3A706
Certificate serial:       2163D0525DA59D4F7DFED7B2048A6D925B50FC0A
Authority key identifier: A9:E3:C5:61:98:CC:89:71:43:AB:FB:54:7C:F2:2B:7B:D8:A3:A7:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9E3C56198CC897143ABFB547CF22B7BD8A3A706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAB5F656D665E3546BCB0AD1964771D3B4A3B7BF77363B6A9EC7BE8BCAC73126/0/323830333a643931303a3a2f33322d3332203d3e20323732303131.roa
Signing time:             Tue 05 Mar 2024 17:58:07 +0000
ROA not before:           Tue 05 Mar 2024 17:53:07 +0000
ROA not after:            Tue 04 Mar 2025 17:58:07 +0000
asID:                     272011
IP address blocks:        2803:d910::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:63:d0:52:5d:a5:9d:4f:7d:fe:d7:b2:04:8a:6d:92:5b:50:fc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E3C56198CC897143ABFB547CF22B7BD8A3A706
        Validity
            Not Before: Mar  5 17:53:07 2024 GMT
            Not After : Mar  4 17:58:07 2025 GMT
        Subject: CN=97305BD78F430CB92AB43E9A7F7BE1897CB54103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:b1:a9:14:15:1b:01:d6:f1:46:3e:dc:db:
                    c7:85:e3:73:6d:fd:1c:b5:e6:2b:36:db:f8:b8:63:
                    d8:39:3a:a0:cd:0d:4e:88:38:e8:8a:f3:f4:99:3d:
                    d1:d5:a1:da:f3:23:0c:77:9a:0b:1a:25:9f:32:85:
                    69:04:d6:39:54:8b:11:cb:73:6d:22:16:89:85:c6:
                    be:d2:cb:74:02:eb:70:6b:ab:50:73:50:3b:e4:76:
                    02:c3:9e:01:c2:8a:2e:04:c1:e5:7a:56:23:88:21:
                    4c:4b:10:30:41:0b:31:8f:e9:c7:4d:f7:f3:16:48:
                    75:73:fa:dc:8a:c6:35:7f:9b:d2:d4:c2:1e:a8:49:
                    fa:ea:13:9b:80:63:53:45:5e:d4:8e:38:a8:e5:a4:
                    d4:54:dc:19:42:bf:fc:78:56:f3:84:71:24:ad:64:
                    b4:66:a5:13:2d:d7:aa:91:0b:85:2e:cd:95:9b:a1:
                    e5:fa:cb:95:fa:65:02:86:24:98:d8:86:0f:60:0b:
                    03:3d:ef:ee:52:61:96:f3:fc:41:9b:97:bf:70:98:
                    4f:5d:07:a8:2e:2c:d2:8b:1e:f0:c7:c0:67:0d:65:
                    16:26:a4:c7:3a:6a:7a:ca:e1:35:fa:e2:4c:cb:44:
                    84:e3:6c:4f:48:cc:bc:6e:fb:a1:6c:f4:6a:0a:39:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:5B:D7:8F:43:0C:B9:2A:B4:3E:9A:7F:7B:E1:89:7C:B5:41:03
            X509v3 Authority Key Identifier:
                keyid:A9:E3:C5:61:98:CC:89:71:43:AB:FB:54:7C:F2:2B:7B:D8:A3:A7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAB5F656D665E3546BCB0AD1964771D3B4A3B7BF77363B6A9EC7BE8BCAC73126/0/A9E3C56198CC897143ABFB547CF22B7BD8A3A706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9E3C56198CC897143ABFB547CF22B7BD8A3A706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAB5F656D665E3546BCB0AD1964771D3B4A3B7BF77363B6A9EC7BE8BCAC73126/0/323830333a643931303a3a2f33322d3332203d3e20323732303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d910::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:d1:0f:83:d0:e4:20:a9:34:aa:0e:78:86:cb:b9:56:22:
         70:42:dc:d3:12:b3:79:40:62:ed:23:0f:b9:f9:15:23:70:ab:
         c6:32:4a:ea:14:be:7a:a0:56:3a:21:fa:c7:c4:9f:ae:f2:7e:
         dd:81:b2:e4:36:e8:b1:e6:09:20:ad:5d:e3:d3:91:e6:c5:19:
         e0:93:16:1b:35:76:56:9b:29:95:e0:ad:53:58:fa:aa:db:40:
         31:3d:cf:28:8e:1c:c6:06:b0:8d:59:17:d1:29:70:3d:5b:33:
         f6:df:40:86:f7:8f:55:f9:80:ef:0f:d6:c9:3e:f7:4d:7d:f1:
         0b:43:67:53:c3:be:ec:a3:af:c2:16:89:20:7d:c3:5f:16:12:
         2b:f6:ec:a3:5a:cf:ec:fa:8c:3e:0a:44:bd:cb:28:81:d8:09:
         f2:be:06:4f:0d:eb:57:53:9d:78:5d:89:f6:5b:75:ed:19:1e:
         02:05:d2:88:af:85:c5:c2:a6:8d:df:b1:50:5c:79:e7:b3:f9:
         02:6f:3a:e6:7c:a6:8f:1a:fb:51:de:0a:28:58:f9:2e:28:65:
         4a:24:17:09:68:95:20:32:8d:34:6e:75:0c:40:dc:b1:7a:1b:
         ec:b4:eb:ce:1a:2d:a8:ea:14:b8:ef:bf:9e:d5:4c:4a:40:5d:
         97:1d:76:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----