Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/323830333a323038303a3a2f33322d3332203d3e20323633313730.roa
File:                     323830333a323038303a3a2f33322d3332203d3e20323633313730.roa (raw, json)
Hash identifier:          jj+T6Iclva9E2DD2vpvDHPOBktobFctAymGhXgSJkeg=
Subject key identifier:   7F:9B:BE:B7:67:B9:71:96:71:11:10:5E:3C:11:F0:83:C2:50:8D:49
Certificate issuer:       /CN=211623745083F5BD547E7869C6748AF8F2418ECF
Certificate serial:       3D16509F245C712DB84F71BF957BA29960DD1224
Authority key identifier: 21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/323830333a323038303a3a2f33322d3332203d3e20323633313730.roa
Signing time:             Tue 05 Mar 2024 17:41:40 +0000
ROA not before:           Tue 05 Mar 2024 17:36:40 +0000
ROA not after:            Tue 04 Mar 2025 17:41:40 +0000
asID:                     263170
IP address blocks:        2803:2080::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:16:50:9f:24:5c:71:2d:b8:4f:71:bf:95:7b:a2:99:60:dd:12:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211623745083F5BD547E7869C6748AF8F2418ECF
        Validity
            Not Before: Mar  5 17:36:40 2024 GMT
            Not After : Mar  4 17:41:40 2025 GMT
        Subject: CN=7F9BBEB767B971967111105E3C11F083C2508D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:aa:da:bc:e2:33:d4:54:05:55:40:86:0a:
                    5b:38:08:73:94:20:4a:1c:f5:38:4b:65:62:5e:48:
                    2e:22:29:98:b6:70:ea:0c:52:1c:17:52:e0:83:33:
                    a2:09:eb:83:34:a7:c2:0c:b8:86:69:b9:bd:3f:89:
                    36:a9:5a:cb:b6:2b:72:71:e7:08:5d:8c:ad:d4:8f:
                    9e:fe:fa:8b:e2:64:d6:3c:09:8e:8f:d7:80:eb:c9:
                    89:51:65:92:7c:eb:09:6b:e5:8d:a6:44:35:d7:aa:
                    85:75:5a:47:1e:ca:ef:96:0c:c3:58:e9:04:09:18:
                    f3:7f:5b:6d:d0:7a:bd:11:09:3d:e5:fa:d6:86:83:
                    8b:a0:06:04:a3:03:96:b3:d0:68:2b:ab:b0:46:f6:
                    f1:de:75:e2:0b:b6:e8:90:49:49:dd:46:a6:d2:a8:
                    5c:d5:76:e2:39:01:31:8c:39:b7:b8:3f:23:08:ef:
                    53:fd:f5:ee:61:21:0f:62:c6:b5:b2:df:80:90:65:
                    dd:cc:e1:76:22:fd:4e:76:09:86:c8:d2:0f:70:d1:
                    ae:30:06:82:5a:75:a8:64:12:fa:6f:44:aa:c6:a9:
                    f7:d7:75:74:b5:ff:2d:4b:a6:63:ca:6b:7d:12:7c:
                    57:07:a8:b4:28:68:6b:20:fa:02:01:d5:45:c8:a8:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9B:BE:B7:67:B9:71:96:71:11:10:5E:3C:11:F0:83:C2:50:8D:49
            X509v3 Authority Key Identifier:
                keyid:21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/323830333a323038303a3a2f33322d3332203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2080::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:41:91:7c:16:d1:98:99:fa:cc:1f:fa:8f:f2:5e:92:eb:f5:
         84:da:fd:45:83:da:2b:79:80:51:1c:2c:a6:8a:52:55:fb:82:
         5b:a5:2f:20:dc:60:8a:36:bd:72:9d:e4:a3:be:e4:b7:6a:a1:
         8d:b8:e5:92:de:a5:74:44:93:6e:85:ae:a6:f1:0e:1e:99:5c:
         85:84:8a:a2:da:84:0e:0e:fd:44:e0:63:1c:ab:1a:6c:73:77:
         1c:17:2d:c1:5c:cc:fc:6c:cf:28:36:48:49:b1:ed:d6:39:6d:
         39:05:44:5c:12:6b:ea:15:a6:18:cb:b1:b3:75:62:fc:36:67:
         87:22:af:18:69:c7:ed:59:75:d4:33:70:30:ae:21:c0:78:46:
         49:71:8f:e7:f2:14:2a:73:c6:9b:c0:27:6a:35:5e:92:73:6a:
         2b:cd:88:84:c1:05:52:d5:73:b8:8a:bb:ca:47:71:9a:e3:92:
         43:c2:54:bf:16:c5:4d:cc:6b:12:91:04:2e:93:83:08:a2:6b:
         63:cf:7b:b2:98:dc:31:e1:8b:f7:6e:04:48:7e:b8:6b:7e:99:
         4f:a2:19:9c:1b:47:27:e2:03:90:18:2c:10:8a:84:60:ad:63:
         39:66:9b:6b:40:fd:48:cf:8f:a2:b9:b9:a7:82:c7:3e:36:29:
         c3:03:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----