Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313030303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a313030303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          Usw8Mh6PV/J2ARaG1NKoP3//oXTg9tbTPTXAFB6IYyw=
Subject key identifier:   F6:4C:2D:1A:76:E9:B1:37:D1:A9:E9:51:26:65:AB:8C:62:16:B3:4A
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       16C338300A83BB35B8A141F198347CE2823EDB97
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313030303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Fri 17 May 2024 02:30:04 +0000
ROA not before:           Fri 17 May 2024 02:25:04 +0000
ROA not after:            Fri 16 May 2025 02:30:04 +0000
asID:                     272869
IP address blocks:        2803:7290:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c3:38:30:0a:83:bb:35:b8:a1:41:f1:98:34:7c:e2:82:3e:db:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: May 17 02:25:04 2024 GMT
            Not After : May 16 02:30:04 2025 GMT
        Subject: CN=F64C2D1A76E9B137D1A9E9512665AB8C6216B34A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:c7:74:cc:99:2d:b3:70:3c:6a:2b:34:81:
                    db:a5:95:c6:47:7d:ac:a1:02:31:97:e8:58:6a:4b:
                    6b:11:a1:a6:c0:bb:6a:2b:64:43:61:24:36:71:f3:
                    79:88:ce:9c:0a:2f:71:9a:4c:ff:26:33:0d:2f:c7:
                    b4:7f:59:1a:7c:d4:42:9b:df:d5:e3:93:a3:2e:52:
                    49:36:61:38:23:1f:54:23:28:3e:13:fd:fe:d8:83:
                    4a:97:d0:20:61:71:e5:ec:62:88:7d:b7:18:76:a9:
                    5d:07:fd:e2:8b:cb:a5:92:0a:ec:87:d6:ec:fb:2b:
                    c1:db:f5:75:1c:08:2d:aa:e7:de:f9:d5:2f:aa:ff:
                    0a:44:d6:02:de:69:43:7a:49:0f:85:73:b7:c8:53:
                    ac:85:57:38:42:8c:16:c9:e0:51:20:0c:7e:3a:63:
                    7c:ce:7f:d6:6a:2d:32:96:af:3c:a9:68:0b:5e:fc:
                    01:cd:50:0c:79:8c:90:c2:ef:5a:e5:e2:6c:f5:e4:
                    aa:85:36:27:98:42:d5:e1:cb:0f:42:3c:76:1f:ed:
                    1e:cc:d9:fc:d2:e8:ad:42:d8:a5:30:c7:0b:69:0c:
                    8e:e7:77:80:d6:22:9b:35:5f:e7:bc:c3:7b:79:68:
                    79:bc:24:0a:5e:25:1d:8e:e3:c7:8a:d5:99:71:6a:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:2D:1A:76:E9:B1:37:D1:A9:E9:51:26:65:AB:8C:62:16:B3:4A
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a313030303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:87:46:92:41:35:62:45:89:41:90:19:41:69:31:2e:ca:41:
         e6:e0:01:5f:6b:fc:f9:24:6a:ec:5f:1c:87:03:9c:25:3d:44:
         a3:87:28:c3:cf:f5:23:69:0f:b9:37:7c:72:7a:d5:ae:53:18:
         29:16:3e:58:cc:fb:b9:be:2d:48:f2:83:b2:d4:0f:19:2d:81:
         d6:ff:10:a8:89:d0:2b:35:5d:e4:6b:90:ff:71:0a:13:b7:48:
         c3:2d:3e:31:25:76:58:5c:58:0d:ae:61:ef:39:17:05:9a:67:
         66:7a:88:a0:52:c0:e6:35:a9:46:6b:bd:da:1c:07:88:9a:06:
         b4:8a:62:3e:a9:39:c4:82:42:93:01:89:ce:dc:cb:a6:79:6b:
         59:f0:87:7d:db:08:67:3e:3c:4a:6e:70:c4:82:e0:c0:87:ff:
         8a:89:fd:a8:c2:8d:61:8b:46:06:cc:31:76:77:56:92:32:79:
         4f:fa:f9:6d:8f:c7:bd:e7:c5:15:e6:72:4b:36:bf:b0:61:0e:
         3d:a4:f9:1c:c2:95:b7:ff:d5:95:c1:06:d8:04:b5:2f:9a:43:
         85:fa:21:5d:8c:f1:0f:13:c8:39:93:cf:c5:04:64:8d:68:a8:
         2f:47:3b:f3:fa:a9:cb:3b:b8:7c:81:3b:dd:38:cb:08:5f:c3:
         fd:26:2d:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----