Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/323830333a633938303a3a2f33322d3332203d3e20323634383539.roa
File:                     323830333a633938303a3a2f33322d3332203d3e20323634383539.roa (raw, json)
Hash identifier:          g1G9fiaMtTjdB9igEdPM9j8Lu/iszJeWtoRgq+bFNIY=
Subject key identifier:   C3:95:84:A7:B6:8C:17:C4:EA:91:09:FD:79:FA:A1:7B:D8:7F:84:3B
Certificate issuer:       /CN=F7D87FB819806FE80F6C92775F08B1C90C271956
Certificate serial:       42C262141E0E23712FC3C61B5048062D3B411D1B
Authority key identifier: F7:D8:7F:B8:19:80:6F:E8:0F:6C:92:77:5F:08:B1:C9:0C:27:19:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7D87FB819806FE80F6C92775F08B1C90C271956.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/323830333a633938303a3a2f33322d3332203d3e20323634383539.roa
Signing time:             Tue 04 Jun 2024 20:10:00 +0000
ROA not before:           Tue 04 Jun 2024 20:05:00 +0000
ROA not after:            Tue 03 Jun 2025 20:10:00 +0000
asID:                     264859
IP address blocks:        2803:c980::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c2:62:14:1e:0e:23:71:2f:c3:c6:1b:50:48:06:2d:3b:41:1d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D87FB819806FE80F6C92775F08B1C90C271956
        Validity
            Not Before: Jun  4 20:05:00 2024 GMT
            Not After : Jun  3 20:10:00 2025 GMT
        Subject: CN=C39584A7B68C17C4EA9109FD79FAA17BD87F843B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:03:86:10:dc:3b:1a:2a:3d:d3:4c:5c:07:
                    e9:cf:4a:22:ae:42:87:79:f4:48:9e:9f:9d:f6:0b:
                    d9:68:33:11:db:9a:6c:ea:f1:3b:37:6c:e5:29:f5:
                    45:6a:df:2b:92:16:58:02:8d:7c:eb:aa:27:1e:7f:
                    90:35:fb:81:52:07:ae:ea:11:7f:6a:dc:88:6d:ba:
                    32:9f:3e:d0:bc:dd:55:68:9c:86:28:5a:09:55:cf:
                    ee:29:9f:fb:60:d8:16:be:ff:9b:14:ae:2a:b7:17:
                    38:0d:58:b6:fc:38:39:30:81:65:c1:d8:f4:ed:87:
                    2d:59:8b:2b:77:a2:9d:3e:d7:fb:32:f6:f4:0d:7c:
                    8f:3b:58:b3:ba:2e:ea:ab:9b:2a:8e:d5:85:ba:41:
                    d6:eb:14:dd:2b:4b:b8:07:36:be:be:bb:ac:67:21:
                    22:66:8d:98:aa:2a:7e:ba:0e:aa:96:17:84:c2:3c:
                    c5:15:7c:cb:b3:9d:4a:34:73:6f:dd:2f:d8:a0:ef:
                    53:b3:eb:49:80:85:49:70:f8:93:af:12:e4:ba:8a:
                    b7:ee:bc:34:48:94:59:81:56:ba:2b:8c:82:86:38:
                    09:a3:48:c3:db:46:6e:5d:f4:fe:9f:fb:b3:5b:7d:
                    e0:fa:d2:3b:ba:2b:11:91:fb:40:70:a4:b2:48:bd:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:95:84:A7:B6:8C:17:C4:EA:91:09:FD:79:FA:A1:7B:D8:7F:84:3B
            X509v3 Authority Key Identifier:
                keyid:F7:D8:7F:B8:19:80:6F:E8:0F:6C:92:77:5F:08:B1:C9:0C:27:19:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/F7D87FB819806FE80F6C92775F08B1C90C271956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7D87FB819806FE80F6C92775F08B1C90C271956.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/323830333a633938303a3a2f33322d3332203d3e20323634383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c980::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:03:83:7f:36:55:e1:98:4d:36:c8:66:f5:c1:1d:e4:49:e2:
         81:ba:ef:2d:e6:43:b7:3f:24:b7:f9:f3:85:8b:94:e3:4f:a2:
         12:18:a8:6d:54:90:cb:03:00:22:96:bc:24:0c:e2:7f:78:37:
         6e:42:c5:aa:24:e3:70:a4:eb:5c:e6:73:37:1a:33:91:28:70:
         e3:f9:b0:3a:3e:fb:36:70:f3:da:01:d9:af:87:4f:bc:3b:05:
         f9:c4:24:7c:69:7b:95:f8:f1:2b:3f:db:98:a7:5f:08:79:76:
         97:2f:50:e5:21:5c:41:3f:3c:bf:eb:f9:3a:c3:00:05:38:89:
         56:fa:5e:7c:20:64:71:33:7a:76:ef:8b:60:09:96:0f:35:d4:
         81:a4:b4:1d:31:f7:af:71:14:dc:23:23:a2:e9:4f:60:ea:48:
         4a:81:de:68:88:05:0c:2c:b4:b5:a0:13:ae:8a:94:51:23:5e:
         8a:d3:eb:3f:d4:b4:ee:4a:4e:74:39:7c:bb:1f:7d:e2:23:26:
         5d:a3:9b:48:77:05:a5:27:15:51:a2:04:2d:83:e1:9f:42:56:
         32:c8:86:f9:60:f3:be:3a:0a:a0:cb:b5:6d:34:37:68:a9:2b:
         7c:25:9d:73:4d:2d:5e:84:f4:58:e3:84:9d:80:59:3a:00:57:
         17:d1:44:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----