Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E499583CC9C8EE2E3743439FCD93C2FC487B3E90C3D5E2AE61A2CCB6208D71C9/0/323830333a3736303a3a2f33322d3438203d3e20323639383136.roa
File:                     323830333a3736303a3a2f33322d3438203d3e20323639383136.roa (raw, json)
Hash identifier:          q1dshVcc4Aga2aqUoZdgZjtLHXL3qiuHW2ML5UbZ4jI=
Subject key identifier:   9D:BC:C4:5B:23:E6:C0:F6:AE:C0:DF:29:D9:69:5F:9B:23:3A:2D:5E
Certificate issuer:       /CN=2A6F12C7D0ED80CAAC6A041574B354411BC7D940
Certificate serial:       6406F48EFB6F3E27ABF9BD3F246614CFC840E631
Authority key identifier: 2A:6F:12:C7:D0:ED:80:CA:AC:6A:04:15:74:B3:54:41:1B:C7:D9:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6F12C7D0ED80CAAC6A041574B354411BC7D940.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E499583CC9C8EE2E3743439FCD93C2FC487B3E90C3D5E2AE61A2CCB6208D71C9/0/323830333a3736303a3a2f33322d3438203d3e20323639383136.roa
Signing time:             Tue 05 Mar 2024 17:53:37 +0000
ROA not before:           Tue 05 Mar 2024 17:48:37 +0000
ROA not after:            Tue 04 Mar 2025 17:53:37 +0000
asID:                     269816
IP address blocks:        2803:760::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:06:f4:8e:fb:6f:3e:27:ab:f9:bd:3f:24:66:14:cf:c8:40:e6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6F12C7D0ED80CAAC6A041574B354411BC7D940
        Validity
            Not Before: Mar  5 17:48:37 2024 GMT
            Not After : Mar  4 17:53:37 2025 GMT
        Subject: CN=9DBCC45B23E6C0F6AEC0DF29D9695F9B233A2D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:3f:51:3d:18:0f:d1:d4:30:86:8e:b5:33:
                    a9:4c:7d:2a:4b:29:b2:31:78:35:42:86:38:4c:af:
                    78:b9:af:96:f8:28:98:4f:e1:b0:15:dc:b5:55:9d:
                    00:78:48:0a:db:8d:ec:3c:dd:ba:71:d0:80:25:2f:
                    11:5c:c7:b8:b6:57:c9:fc:cd:0f:e6:58:7a:bc:a0:
                    54:65:e9:09:4c:f0:9c:23:76:d2:bf:45:6b:c8:f5:
                    28:d0:0c:2a:f2:63:c9:54:e4:d1:f0:44:00:0b:91:
                    36:69:cc:37:65:74:60:a8:17:f2:4c:6a:68:99:67:
                    54:82:70:ea:15:48:f7:22:6e:72:05:48:6f:91:91:
                    41:bd:4b:d4:c5:82:74:45:f5:b4:dd:92:06:72:71:
                    23:cd:66:16:65:de:3a:c2:94:1b:14:7b:ff:18:d4:
                    a5:97:ab:b7:ee:b8:01:5a:61:bb:11:94:0a:e3:fa:
                    7b:ec:df:cd:6d:e9:69:32:a6:3b:92:f0:e6:61:23:
                    b4:37:49:d0:f1:e7:dd:66:27:38:df:bb:61:eb:ff:
                    6e:ac:62:bd:9f:29:8d:33:aa:fd:23:3a:45:ab:cd:
                    5b:6c:b4:1a:50:20:9e:0b:f8:4f:46:11:ff:78:7d:
                    ae:cf:01:70:ac:0a:7d:65:ab:6c:f2:a1:31:a4:a7:
                    a3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BC:C4:5B:23:E6:C0:F6:AE:C0:DF:29:D9:69:5F:9B:23:3A:2D:5E
            X509v3 Authority Key Identifier:
                keyid:2A:6F:12:C7:D0:ED:80:CA:AC:6A:04:15:74:B3:54:41:1B:C7:D9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E499583CC9C8EE2E3743439FCD93C2FC487B3E90C3D5E2AE61A2CCB6208D71C9/0/2A6F12C7D0ED80CAAC6A041574B354411BC7D940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6F12C7D0ED80CAAC6A041574B354411BC7D940.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E499583CC9C8EE2E3743439FCD93C2FC487B3E90C3D5E2AE61A2CCB6208D71C9/0/323830333a3736303a3a2f33322d3438203d3e20323639383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:760::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:90:08:19:03:c9:c3:a9:be:c4:e3:90:61:38:01:1f:ee:7d:
         49:fe:60:e8:40:4e:3e:5f:2a:46:6f:76:ef:f0:1a:4a:87:2b:
         84:4b:65:e5:4a:71:24:6c:c0:23:11:eb:46:b9:ca:25:ab:44:
         f1:e8:9f:00:bb:a0:98:47:c8:cb:cb:5d:d5:4a:6c:b4:25:f9:
         df:c3:1a:ef:4d:04:bc:e0:19:46:e9:27:28:a7:69:dd:3b:70:
         b0:b9:6a:10:66:ab:64:1c:26:a5:5f:4b:a2:0d:94:2c:ed:fe:
         1d:dc:7c:9d:ed:26:dc:42:1e:d3:2b:1f:f1:60:3d:a2:4b:3b:
         f4:c7:ce:1b:c4:be:ec:73:79:ee:63:79:63:fe:5f:33:86:1b:
         84:86:ab:7f:be:1d:e0:45:a0:7e:21:7e:bc:a8:b2:ed:04:f8:
         9a:02:6e:49:ec:df:0b:07:6c:11:a4:f8:63:7c:cd:cd:50:40:
         8a:06:49:11:71:d1:53:7f:71:4c:68:e6:54:5c:96:00:c6:3a:
         a1:ac:7e:07:a0:21:57:c0:90:63:3e:c7:ca:dd:ed:36:48:c4:
         17:5b:be:26:49:87:a0:0b:71:a1:4d:56:4e:60:b3:7e:ff:11:
         f3:86:38:5c:e3:3d:2f:99:1a:16:97:65:9d:7f:03:c2:a0:e9:
         b6:12:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----