Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/323830333a363531303a3a2f33322d3332203d3e20323732303236.roa
File:                     323830333a363531303a3a2f33322d3332203d3e20323732303236.roa (raw, json)
Hash identifier:          odMW67Pgnvq47JjfkOTYY3CbTkbk3H+E8vqv5fNKB4M=
Subject key identifier:   A2:69:4F:4D:2D:C7:DA:2F:AC:B4:89:6E:E4:97:9C:21:29:AB:B0:66
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       26A79B4CB950A8F8D1F3D372255289C971BBDB24
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/323830333a363531303a3a2f33322d3332203d3e20323732303236.roa
Signing time:             Tue 05 Mar 2024 18:20:03 +0000
ROA not before:           Tue 05 Mar 2024 18:15:03 +0000
ROA not after:            Tue 04 Mar 2025 18:20:03 +0000
asID:                     272026
IP address blocks:        2803:6510::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a7:9b:4c:b9:50:a8:f8:d1:f3:d3:72:25:52:89:c9:71:bb:db:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: Mar  5 18:15:03 2024 GMT
            Not After : Mar  4 18:20:03 2025 GMT
        Subject: CN=A2694F4D2DC7DA2FACB4896EE4979C2129ABB066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:ad:d3:fe:74:3e:dd:35:58:15:52:36:cb:
                    1d:00:d7:3b:89:04:5b:e8:55:88:20:69:5f:dd:54:
                    fd:d2:89:cf:90:41:ad:b4:09:21:b4:f7:9b:0a:5e:
                    d6:0a:d2:0b:f8:50:ec:7d:36:06:d1:81:50:59:1c:
                    ba:5a:48:95:05:97:f4:dd:47:82:8c:bd:d5:6a:16:
                    de:6e:6b:9a:c7:61:02:f2:9b:2c:3b:6a:f4:97:e3:
                    bc:5a:3c:aa:fe:56:a0:1c:40:3c:df:58:14:3f:41:
                    83:20:dd:57:f5:65:78:4a:68:65:1d:b3:d7:fd:e2:
                    95:3c:30:d3:d0:bc:11:0e:c8:08:26:3a:b4:23:1c:
                    35:a7:0d:9e:c6:90:2a:77:48:3b:89:00:51:09:83:
                    97:c9:0f:97:25:00:c4:76:c4:d7:95:26:d9:00:ce:
                    cf:dc:75:c5:cd:47:fe:bf:ca:a1:a3:2f:69:4e:d9:
                    5a:1a:c2:0c:44:ab:b4:19:cc:65:d0:bb:7e:65:2f:
                    0e:4c:83:1e:b7:95:bd:28:45:08:e6:ec:7a:d8:18:
                    0f:76:18:6d:31:32:9f:28:ac:6e:63:09:68:1b:83:
                    da:78:d4:0b:ba:1f:37:0d:b6:11:7a:3e:d1:8a:61:
                    63:60:10:50:05:3b:7b:d2:7a:fb:38:dc:20:6e:85:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:69:4F:4D:2D:C7:DA:2F:AC:B4:89:6E:E4:97:9C:21:29:AB:B0:66
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/323830333a363531303a3a2f33322d3332203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6510::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:77:c1:ed:17:38:a4:8e:30:f6:4a:32:ad:c8:db:eb:04:9b:
         5e:8e:3a:21:3e:37:e7:0c:72:27:13:27:b0:d1:14:16:41:40:
         40:bc:15:79:72:d5:78:bc:e1:d3:7a:eb:86:fc:65:7f:fd:3c:
         34:f5:58:e5:a6:38:ea:07:e0:d8:c0:08:e1:a1:69:d7:b6:3a:
         41:77:a3:a1:c2:61:d9:43:23:b8:95:64:9f:7f:d0:e6:6d:0d:
         4c:65:9e:27:4e:02:09:f4:f2:73:8d:24:51:c8:27:0b:d9:21:
         c1:2f:55:db:92:f7:aa:ad:16:6c:db:30:2f:ee:59:30:5f:f5:
         70:33:0d:3d:16:da:78:d2:01:62:3f:e6:ef:b7:42:ae:b8:79:
         e3:ed:c0:11:79:39:3e:0a:dd:cb:3c:f0:ef:7c:ea:1e:70:06:
         ba:81:bc:3a:82:74:8c:f9:b6:63:58:8c:34:07:5e:ea:dd:00:
         f9:2b:fb:f9:4e:b8:46:39:09:7e:1a:19:18:80:1a:9e:64:b8:
         f6:cd:af:8b:e9:24:4f:0b:81:37:5e:c0:5d:1f:60:72:c2:84:
         4a:b9:9f:1c:77:a4:ba:d3:96:49:ac:d2:34:ce:92:e8:e2:3e:
         73:91:8d:27:87:ae:36:3c:b3:16:62:c5:06:45:d3:e7:cc:5b:
         81:e6:7f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----