Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/323830333a363136303a3a2f33322d3332203d3e20323639373738.roa
File:                     323830333a363136303a3a2f33322d3332203d3e20323639373738.roa (raw, json)
Hash identifier:          307FPzHtFM7vIRy0eBvvvoWgJoE1NQRF6FoYT4W9Dag=
Subject key identifier:   71:00:64:84:EE:23:A3:8A:35:10:2B:45:51:89:44:FF:5E:47:F7:3E
Certificate issuer:       /CN=33331641F47777E6D39D660CBD610B3AC5C71200
Certificate serial:       24F9588EEE11DEDD4D7CD812E081F1054564E516
Authority key identifier: 33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/323830333a363136303a3a2f33322d3332203d3e20323639373738.roa
Signing time:             Sat 21 Dec 2024 04:30:01 +0000
ROA not before:           Sat 21 Dec 2024 04:25:01 +0000
ROA not after:            Sat 20 Dec 2025 04:30:01 +0000
asID:                     269778
IP address blocks:        2803:6160::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f9:58:8e:ee:11:de:dd:4d:7c:d8:12:e0:81:f1:05:45:64:e5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33331641F47777E6D39D660CBD610B3AC5C71200
        Validity
            Not Before: Dec 21 04:25:01 2024 GMT
            Not After : Dec 20 04:30:01 2025 GMT
        Subject: CN=71006484EE23A38A35102B45518944FF5E47F73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:4c:32:1d:d1:a4:5b:2d:73:be:92:6e:39:
                    f8:b1:cb:89:ba:e2:ce:58:b2:a1:c3:fc:d2:fe:6c:
                    dd:d1:15:0d:8b:44:90:ee:4d:d0:d7:c7:42:af:a7:
                    78:41:54:ce:a1:e2:50:35:44:ae:74:c4:b8:07:ee:
                    fc:0d:09:3c:02:1c:fe:41:f7:f2:05:06:fc:a1:fb:
                    f6:28:7e:0c:49:ac:d0:b2:51:42:9c:13:36:07:39:
                    28:b9:c7:0d:e3:ab:00:6f:01:ec:9a:18:ed:28:a1:
                    3e:dc:65:a8:f6:12:61:eb:40:45:f7:6f:9c:3e:7f:
                    08:1f:85:49:df:0d:4f:65:05:d6:27:7e:0d:28:45:
                    fc:23:d3:73:c0:6b:b9:e9:23:19:4b:6d:ca:22:90:
                    64:9f:fa:3a:52:f6:a3:22:62:3a:fd:05:67:ad:bf:
                    3d:46:78:3a:ca:cb:23:bf:3b:a5:98:d7:fd:14:bf:
                    23:89:1a:59:64:97:2b:66:0e:54:c1:2f:37:b0:07:
                    2e:3c:b2:e5:25:b3:80:f0:d4:83:2b:f7:98:08:a1:
                    d3:52:c4:ff:f5:02:67:77:19:ec:61:01:c9:2e:80:
                    01:66:05:af:2a:d4:e1:f3:e2:37:38:b7:86:d2:78:
                    27:b7:37:eb:6f:81:c1:c8:6d:33:45:96:f9:2f:b4:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:00:64:84:EE:23:A3:8A:35:10:2B:45:51:89:44:FF:5E:47:F7:3E
            X509v3 Authority Key Identifier:
                keyid:33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/323830333a363136303a3a2f33322d3332203d3e20323639373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6160::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:23:c4:d0:ee:94:68:df:62:0d:5b:fa:55:4a:c3:4d:a8:fe:
         42:a6:34:60:bd:f7:b7:fd:e4:10:ae:97:2e:25:7e:e1:b0:86:
         d9:96:ca:94:19:ad:81:f1:53:c0:e2:27:6e:17:de:7b:c3:3d:
         e2:fe:61:6c:11:0e:da:e6:db:f7:a4:b2:6b:3a:ef:55:df:35:
         d9:d2:8c:60:9d:ae:64:85:99:87:cc:37:17:36:f0:60:4b:0d:
         7b:ba:be:ec:60:dd:fb:d1:e1:18:34:77:59:2d:06:51:ae:f3:
         b5:49:02:47:a8:e1:3e:56:6c:43:74:b8:2d:19:5a:bb:8a:0e:
         1b:65:6a:02:3e:fe:02:af:a4:6a:2c:3c:8a:79:5a:b0:a5:df:
         af:0f:12:dc:05:34:81:f6:71:ba:44:38:9e:00:97:71:9d:4a:
         b7:1b:de:45:e5:70:e2:92:76:37:dc:ad:c9:af:29:43:55:03:
         98:7a:df:f2:ff:d9:f1:60:7a:47:bc:1a:cf:0a:63:a8:9e:81:
         eb:89:a5:fa:47:23:df:a7:5d:d2:ac:df:60:52:00:a4:89:ad:
         9b:82:bf:7e:9d:48:8f:2f:1e:80:a0:8a:2b:97:f5:97:50:d6:
         d4:90:15:06:3a:28:14:72:6d:de:98:3f:b6:c4:64:14:47:d0:
         ea:a8:f1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----