Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203237383936.roa
File:                     323830333a613634303a3a2f33322d3536203d3e203237383936.roa (raw, json)
Hash identifier:          d1p/QztD/Mg/brXkhnY03hwr/n05mhF02kO1gyKP3Ns=
Subject key identifier:   CC:97:81:78:74:B5:E5:24:F7:26:3D:61:CD:C0:49:76:31:38:78:19
Certificate issuer:       /CN=70B51DCC347573651055FC72DB19C170524018CC
Certificate serial:       4EBB988FA611F0851E3E7EA1EC81FCDC948B7A3E
Authority key identifier: 70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203237383936.roa
Signing time:             Tue 05 Mar 2024 18:12:51 +0000
ROA not before:           Tue 05 Mar 2024 18:07:51 +0000
ROA not after:            Tue 04 Mar 2025 18:12:51 +0000
asID:                     27896
IP address blocks:        2803:a640::/32 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bb:98:8f:a6:11:f0:85:1e:3e:7e:a1:ec:81:fc:dc:94:8b:7a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B51DCC347573651055FC72DB19C170524018CC
        Validity
            Not Before: Mar  5 18:07:51 2024 GMT
            Not After : Mar  4 18:12:51 2025 GMT
        Subject: CN=CC97817874B5E524F7263D61CDC0497631387819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:10:42:eb:1e:16:d9:8f:5b:25:73:9a:c6:c1:
                    76:b0:ba:04:e8:71:bc:ce:4b:b5:e5:43:c0:9c:39:
                    4b:9b:9f:8c:1b:d4:5d:18:e7:bc:85:71:31:94:25:
                    85:4c:31:29:56:b1:22:48:c1:36:f5:b1:d6:b8:9a:
                    c5:e9:91:58:a2:61:06:9e:8d:ed:d3:cf:06:71:5a:
                    a5:5b:1d:75:f3:f1:60:3d:5c:6e:b4:25:e5:d6:d5:
                    44:1c:a8:8d:e4:03:d5:58:e6:61:52:d1:51:d6:bb:
                    5b:82:95:4a:77:6e:c7:fc:5b:f6:0c:e4:3d:f5:a2:
                    2d:b7:31:91:8a:6a:92:e2:73:39:0e:18:c9:e7:40:
                    aa:cb:e5:5d:71:7e:a1:ce:0f:5b:c1:ef:9a:61:34:
                    d1:42:8e:be:60:d4:a0:23:1e:16:57:47:83:f5:0b:
                    81:4b:e2:a3:0c:61:2f:eb:c8:fd:c5:75:43:1b:c1:
                    6e:d3:7a:fc:f2:22:9c:a6:d9:c3:fe:ba:e0:4e:f4:
                    a8:14:08:64:ca:41:f0:4f:ca:57:05:19:3f:02:ff:
                    ff:8d:cb:14:ac:3b:a0:07:77:4c:91:ab:b3:35:2a:
                    75:39:32:66:53:9a:de:3a:ee:b5:b8:80:db:65:e4:
                    66:d8:21:33:bb:1c:86:f2:50:d4:e0:ca:a1:35:52:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:97:81:78:74:B5:E5:24:F7:26:3D:61:CD:C0:49:76:31:38:78:19
            X509v3 Authority Key Identifier:
                keyid:70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203237383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a640::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:81:78:d0:f7:26:e3:51:ac:35:70:bc:34:8f:2a:27:6f:6c:
         2e:53:55:e2:6b:a3:e7:b9:23:73:a1:af:18:f3:3e:d6:fe:83:
         20:c0:50:d4:5f:be:ed:b3:c4:6e:2c:e0:2d:4b:f8:44:83:50:
         79:da:cb:83:32:9d:3d:e3:ec:e8:a3:4d:5d:38:c2:58:bd:bb:
         65:f8:a8:6d:c8:5d:6e:b5:da:55:4f:5d:3c:ac:89:9d:31:d4:
         60:3b:3f:31:12:29:32:1d:b6:68:11:fc:24:2e:6e:2e:20:b6:
         aa:2f:a4:f0:49:8e:93:92:a1:69:c9:77:4f:3e:c5:f8:48:f1:
         61:55:fa:8c:88:8a:a2:81:e5:69:c8:71:4c:f5:50:e6:16:54:
         82:86:03:e9:a1:24:ab:78:04:6a:4a:f3:01:1f:f0:85:bc:fb:
         6d:53:4c:72:3c:2b:65:80:b2:35:6e:e6:b2:e2:9f:46:66:a9:
         f1:10:f3:b6:d4:6b:f2:1c:76:53:c9:25:b7:92:ab:7f:d0:96:
         99:f5:7d:f6:bd:4b:2f:29:47:f8:67:e8:4d:e3:28:f1:67:a7:
         da:cf:d8:f2:74:64:36:21:b6:f2:39:71:33:64:ce:a7:99:ae:
         bc:a7:06:2c:8e:bb:38:c0:80:ef:84:ad:f5:ef:64:da:24:08:
         46:54:60:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----