Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a333030303a3a2f33362d3336203d3e20323634373833.roa
File:                     323830333a346634303a333030303a3a2f33362d3336203d3e20323634373833.roa (raw, json)
Hash identifier:          S0bpnqg1DHyzKilboFeGnvjo9Py2HAkc3gKWZwkdBts=
Subject key identifier:   14:FE:10:67:70:EC:4A:D0:8F:F7:A9:44:94:BB:9C:A6:17:F7:ED:99
Certificate issuer:       /CN=374826A56A8903CBC7AC7D67F83BA920D4796A8F
Certificate serial:       505282E85E7F80CDE802EA075F550969F679833E
Authority key identifier: 37:48:26:A5:6A:89:03:CB:C7:AC:7D:67:F8:3B:A9:20:D4:79:6A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a333030303a3a2f33362d3336203d3e20323634373833.roa
Signing time:             Mon 19 Aug 2024 16:05:00 +0000
ROA not before:           Mon 19 Aug 2024 16:00:00 +0000
ROA not after:            Mon 18 Aug 2025 16:05:00 +0000
asID:                     264783
IP address blocks:        2803:4f40:3000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:52:82:e8:5e:7f:80:cd:e8:02:ea:07:5f:55:09:69:f6:79:83:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374826A56A8903CBC7AC7D67F83BA920D4796A8F
        Validity
            Not Before: Aug 19 16:00:00 2024 GMT
            Not After : Aug 18 16:05:00 2025 GMT
        Subject: CN=14FE106770EC4AD08FF7A94494BB9CA617F7ED99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:a3:07:a1:43:81:ca:7a:64:5b:e0:68:89:
                    29:53:47:a8:2d:a1:50:9b:f3:f1:a2:99:5b:44:c8:
                    ec:e3:c0:31:c2:d4:05:39:3e:99:e3:45:3b:6f:ea:
                    05:6c:14:31:79:2d:c6:18:f5:6c:ac:06:85:3e:6c:
                    02:d1:f4:cf:c4:e9:04:5e:0c:a1:c3:5e:91:a5:4c:
                    8f:7b:f7:00:9f:2c:40:35:4c:ba:fd:0f:16:c2:97:
                    66:f5:32:52:9f:24:04:09:8a:b4:5b:68:4c:d1:c6:
                    6c:21:dd:b1:11:eb:0e:bb:65:72:17:a4:44:80:eb:
                    2d:cb:ad:90:5c:a0:12:d9:c4:31:2b:6b:ac:ee:ac:
                    f3:cd:8f:d3:5e:1d:d6:34:5a:8f:e3:6d:8a:75:ad:
                    38:f2:ac:6d:f2:e6:00:13:e2:75:33:59:1a:e4:a1:
                    f2:42:1a:15:25:6b:7b:69:aa:03:0f:72:98:0f:05:
                    51:2b:e7:f7:78:0b:17:3d:7f:ca:b6:48:0a:0a:0e:
                    22:c4:42:7a:d8:ad:cf:91:1b:f2:5f:24:51:36:5e:
                    3b:e6:f5:6e:47:ea:8e:0e:e9:95:92:42:66:52:72:
                    15:95:ea:74:9c:b5:a1:94:8b:42:d1:9e:21:f5:95:
                    eb:86:93:b2:d7:d0:b7:c5:90:bb:45:cd:3f:93:ab:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FE:10:67:70:EC:4A:D0:8F:F7:A9:44:94:BB:9C:A6:17:F7:ED:99
            X509v3 Authority Key Identifier:
                keyid:37:48:26:A5:6A:89:03:CB:C7:AC:7D:67:F8:3B:A9:20:D4:79:6A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/374826A56A8903CBC7AC7D67F83BA920D4796A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7E48E60343962289AFF4081A04A0E7A1B80BE3905AA3DE2422E1435C9F017CC/0/323830333a346634303a333030303a3a2f33362d3336203d3e20323634373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f40:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:4b:d5:04:a9:ce:d3:46:d9:c8:2d:29:9f:cb:bc:35:be:
         a8:4a:01:01:99:75:4a:59:9a:8a:29:92:97:e0:1e:50:f7:9e:
         32:14:2e:96:b6:05:e5:a9:25:97:84:d0:99:8b:7e:3f:e2:9e:
         66:f1:d9:04:78:93:97:b9:da:1a:a4:04:8f:1b:7a:4d:27:c2:
         7d:2d:0d:48:a7:80:d7:7c:d2:19:cc:30:2b:cf:d0:a4:e2:8e:
         07:a7:50:8f:4a:9a:2d:79:31:60:d3:6b:56:de:a3:17:53:8d:
         d4:fc:09:b3:9b:59:2e:38:c6:85:28:c3:e3:7b:5d:f6:53:dd:
         05:ba:65:25:14:b3:39:3d:a0:b0:41:8e:bf:fe:47:26:5f:f0:
         2a:ba:d8:ea:93:7f:21:2e:8c:9f:4e:9d:a0:8f:75:ac:dd:3a:
         1f:61:c1:36:a5:0f:13:4b:08:6c:d0:2a:24:d0:99:6b:05:0b:
         78:11:b4:c5:bd:1d:ab:49:07:26:ed:93:d1:0c:54:cc:9e:f5:
         4b:f4:ce:67:00:aa:71:de:e2:50:01:67:1a:5f:2e:ea:a4:69:
         0e:3e:5d:00:7d:da:f2:4e:8f:da:ec:b1:ba:84:a3:5e:46:37:
         0d:a0:26:5b:d9:90:59:8b:52:de:94:0f:2f:ae:e0:1a:ea:9e:
         eb:99:20:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----