Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/323830333a373236303a3a2f33322d3438203d3e203532323338.roa
File:                     323830333a373236303a3a2f33322d3438203d3e203532323338.roa (raw, json)
Hash identifier:          eVprBchgZ49JFChh4D8WCIjhxHT5pmtP9u0V6wlMVlQ=
Subject key identifier:   B9:C9:63:C5:FB:4C:3B:60:29:34:67:93:55:AC:5E:7D:AC:DC:F1:CC
Certificate issuer:       /CN=648541E68129C9782F979C83A78D0CB38FE6503F
Certificate serial:       63E09D21EBBF19E0CC86D570265854664872F418
Authority key identifier: 64:85:41:E6:81:29:C9:78:2F:97:9C:83:A7:8D:0C:B3:8F:E6:50:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648541E68129C9782F979C83A78D0CB38FE6503F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/323830333a373236303a3a2f33322d3438203d3e203532323338.roa
Signing time:             Tue 05 Mar 2024 17:40:59 +0000
ROA not before:           Tue 05 Mar 2024 17:35:59 +0000
ROA not after:            Tue 04 Mar 2025 17:40:59 +0000
asID:                     52238
IP address blocks:        2803:7260::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e0:9d:21:eb:bf:19:e0:cc:86:d5:70:26:58:54:66:48:72:f4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=648541E68129C9782F979C83A78D0CB38FE6503F
        Validity
            Not Before: Mar  5 17:35:59 2024 GMT
            Not After : Mar  4 17:40:59 2025 GMT
        Subject: CN=B9C963C5FB4C3B602934679355AC5E7DACDCF1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:96:c8:d4:53:0a:58:8e:bd:f6:99:d7:83:
                    8f:08:e5:13:6f:ee:2b:51:ef:da:65:19:3a:31:98:
                    b6:58:9f:9a:20:b2:bb:a3:54:52:c6:e3:11:e4:69:
                    79:5a:5b:aa:f2:41:23:89:2f:07:28:02:77:02:27:
                    51:33:a6:6c:2e:5f:f5:a9:e9:28:39:f9:4b:ba:c7:
                    af:f8:6a:23:e7:5a:24:63:0e:d8:50:aa:29:83:05:
                    e1:01:1b:b4:a3:d9:8a:3a:2b:eb:c6:df:51:29:2c:
                    50:4e:67:2e:d1:7f:43:11:40:da:25:53:92:49:0e:
                    18:23:fc:1e:0f:7e:22:2c:43:8e:2c:69:61:c6:be:
                    71:14:ef:7f:43:89:fa:9c:2e:4a:4e:e9:e7:28:2e:
                    6a:2f:2f:11:62:d9:cd:1d:8e:b0:54:e1:60:0f:e4:
                    db:1c:3c:d2:91:e3:e4:0e:20:46:d1:5a:e9:b7:d7:
                    0b:34:44:dc:69:75:6c:58:e1:49:69:4b:7a:ec:25:
                    54:00:d9:37:54:76:da:55:1e:0d:e5:e1:d5:e8:12:
                    96:67:e1:a9:9d:ac:13:db:14:21:e5:5b:16:e8:d7:
                    87:13:06:03:24:cd:60:23:9b:0b:2e:57:9f:ff:b8:
                    cb:bc:c5:13:3e:5c:3f:ba:05:85:37:6d:79:1e:fd:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C9:63:C5:FB:4C:3B:60:29:34:67:93:55:AC:5E:7D:AC:DC:F1:CC
            X509v3 Authority Key Identifier:
                keyid:64:85:41:E6:81:29:C9:78:2F:97:9C:83:A7:8D:0C:B3:8F:E6:50:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/648541E68129C9782F979C83A78D0CB38FE6503F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/648541E68129C9782F979C83A78D0CB38FE6503F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEA8BC4FB7E4D885452244FC4CA3C0BF4C7E20297CF952A609DE0B01EB80DB63/0/323830333a373236303a3a2f33322d3438203d3e203532323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7260::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:4c:17:7f:9c:d6:0d:ef:e3:ab:c2:ba:d1:11:53:73:83:44:
         e4:df:5f:77:fb:d7:7a:06:63:db:b6:49:38:e0:17:8d:94:f8:
         75:f7:4d:e9:93:2a:9f:25:05:25:10:bf:78:4a:b3:9a:6b:a7:
         fa:d4:e9:d9:1f:20:4e:1b:30:b3:f8:95:40:bf:cf:ca:d4:73:
         fd:14:27:d6:79:81:67:e9:bb:b4:ab:20:46:f2:94:f1:6d:c6:
         ca:46:86:73:c2:f9:2e:1b:2b:3e:ac:d3:bd:fc:dd:97:a9:d3:
         a4:dc:12:ee:0f:34:9b:9e:b7:1c:b5:9c:d0:68:74:0c:4e:c9:
         ff:be:2b:85:e1:27:c1:47:6f:e0:03:89:1a:0a:5f:a8:d1:7c:
         bf:4a:d2:36:cb:9c:d2:1c:ef:9d:39:8d:bb:08:ec:04:42:b0:
         d8:98:5d:7e:8a:67:d3:50:0c:6d:4f:18:40:7e:ec:e3:9f:d9:
         2b:f8:b6:68:fc:d8:ea:97:38:49:6a:7e:b7:1f:5b:e7:09:65:
         ae:9b:87:73:9e:0f:2d:72:4a:97:e0:37:7d:e4:35:c0:ca:c7:
         ca:2d:90:dd:96:9a:9a:d7:cd:9e:6f:29:ae:29:b6:ab:48:86:
         60:4c:e2:ef:13:18:84:f4:97:ad:ec:8c:4f:91:02:99:cd:3b:
         96:3c:79:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----