Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203436313938.roa
File:                     323830333a613634303a3a2f33322d3536203d3e203436313938.roa (raw, json)
Hash identifier:          O/nhCDrJJiKMUNuTYebhEDtPJpr3xhsMg6Pp+joHQ+I=
Subject key identifier:   F4:C8:7B:F8:99:AA:E2:F8:D8:4E:DD:06:45:CE:14:CD:02:B6:B2:1D
Certificate issuer:       /CN=70B51DCC347573651055FC72DB19C170524018CC
Certificate serial:       4B62E4BB502F3D548081D31B1AD5F30093093B90
Authority key identifier: 70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203436313938.roa
Signing time:             Tue 05 Mar 2024 18:12:51 +0000
ROA not before:           Tue 05 Mar 2024 18:07:51 +0000
ROA not after:            Tue 04 Mar 2025 18:12:51 +0000
asID:                     46198
IP address blocks:        2803:a640::/32 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:62:e4:bb:50:2f:3d:54:80:81:d3:1b:1a:d5:f3:00:93:09:3b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B51DCC347573651055FC72DB19C170524018CC
        Validity
            Not Before: Mar  5 18:07:51 2024 GMT
            Not After : Mar  4 18:12:51 2025 GMT
        Subject: CN=F4C87BF899AAE2F8D84EDD0645CE14CD02B6B21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:f3:c7:2f:c4:58:2e:f5:95:50:ca:f9:45:
                    cb:c9:ff:f6:12:b0:bb:68:d7:a4:0b:24:a9:b5:49:
                    1f:17:3d:c3:47:22:07:8c:9e:f0:b5:b9:fa:be:ec:
                    80:73:72:08:1a:fe:46:0f:42:ad:14:5a:a8:76:4b:
                    01:92:78:58:63:d1:36:6f:3b:2b:8e:8f:35:db:b6:
                    4b:3f:f0:cf:c9:4d:20:4a:50:54:b0:e2:1b:36:2b:
                    63:88:ab:c3:59:66:9b:bc:23:ba:55:1d:34:58:9a:
                    d5:46:b4:ad:64:34:6d:ce:45:89:cf:7c:31:65:aa:
                    e4:e7:92:3a:ea:3d:0f:1d:eb:0d:a8:83:ba:f9:13:
                    9f:52:dc:04:e0:5d:21:47:76:ab:db:8c:13:c9:35:
                    03:5d:16:46:a3:20:ec:92:e7:2e:21:4f:00:e6:04:
                    50:8d:db:39:e8:2b:f2:30:a8:8b:eb:fa:4a:fd:a5:
                    6f:b5:d0:62:8e:d7:49:e1:ff:c1:8f:ee:09:44:71:
                    ee:ca:33:f8:e6:f8:2d:e2:30:e2:f6:9f:78:6b:47:
                    85:83:a3:c4:75:4a:41:ab:00:fd:b6:79:27:c3:ec:
                    05:5b:db:84:ad:55:c5:68:d2:21:5d:ee:ea:b9:ec:
                    d9:de:20:c3:7f:0e:4e:94:00:79:24:00:09:cf:47:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:7B:F8:99:AA:E2:F8:D8:4E:DD:06:45:CE:14:CD:02:B6:B2:1D
            X509v3 Authority Key Identifier:
                keyid:70:B5:1D:CC:34:75:73:65:10:55:FC:72:DB:19:C1:70:52:40:18:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/70B51DCC347573651055FC72DB19C170524018CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B51DCC347573651055FC72DB19C170524018CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0CDE723D82FA920B88EAAFDCC612A1728AAE76F6ECCBDAA52C3D699FF78D069/0/323830333a613634303a3a2f33322d3536203d3e203436313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a640::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:36:14:4c:a3:67:fc:08:29:aa:94:ee:ed:90:56:e2:7a:a5:
         80:8d:fa:7f:26:02:52:a7:28:28:27:53:ce:0b:5a:0d:23:f8:
         9f:94:5c:9e:ac:d4:d3:ae:12:0e:87:4c:03:23:7d:77:c4:2a:
         0b:48:17:fd:ab:9c:1b:fa:eb:10:86:2b:79:eb:b2:ff:73:84:
         c1:aa:e0:fc:a4:9d:87:09:e1:c1:df:e0:b9:ef:2f:ee:70:c9:
         b2:2f:db:b0:20:87:9c:0f:28:29:c4:7f:2c:79:95:9d:89:5f:
         17:78:6b:f7:c2:d6:c6:53:30:86:63:13:89:f8:8d:f0:ae:ef:
         c6:4b:36:f2:cf:f5:cb:fd:f4:f2:e0:16:20:5e:5d:b4:96:89:
         cc:21:71:4c:fd:b6:52:f0:57:dd:eb:1a:9f:0f:0c:1d:46:2c:
         7a:cb:01:9e:8d:c3:bd:9a:ea:60:b5:e0:67:b0:71:84:78:1a:
         14:d5:0d:07:73:68:64:ee:9e:49:a2:78:ac:b0:bf:1a:27:76:
         37:6c:49:61:e1:64:7c:7a:63:18:92:95:ea:11:4d:ea:c1:e3:
         da:4c:95:7b:a2:a5:68:f2:ce:9b:78:e8:2c:43:1d:83:ba:0e:
         3d:f9:b7:6b:87:7a:be:5c:04:ae:85:29:45:50:ac:2d:28:a2:
         f2:3d:b1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----