Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3430303a3a2f33382d3338203d3e203532343638.roa
File:                     323830333a6231303a3430303a3a2f33382d3338203d3e203532343638.roa (raw, json)
Hash identifier:          Y171XxJbzSlNY5V/C5yJx5I9CNCHI64g3EkfNEQJAbc=
Subject key identifier:   D1:C1:9B:A0:1A:DD:5E:72:46:4F:AC:99:2D:84:FD:F8:4D:33:93:0A
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       0C0A788E246D00873100048906222F7CD4E389A7
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3430303a3a2f33382d3338203d3e203532343638.roa
Signing time:             Thu 15 Aug 2024 19:55:00 +0000
ROA not before:           Thu 15 Aug 2024 19:50:00 +0000
ROA not after:            Thu 14 Aug 2025 19:55:00 +0000
asID:                     52468
IP address blocks:        2803:b10:400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0a:78:8e:24:6d:00:87:31:00:04:89:06:22:2f:7c:d4:e3:89:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Aug 15 19:50:00 2024 GMT
            Not After : Aug 14 19:55:00 2025 GMT
        Subject: CN=D1C19BA01ADD5E72464FAC992D84FDF84D33930A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ce:2a:b0:4b:4f:62:e9:7e:ec:25:5b:a2:f9:
                    97:08:e1:38:54:d1:21:e0:f4:c8:1d:32:00:50:cc:
                    52:cd:c5:07:e6:65:2d:80:06:d0:81:f7:dd:d6:51:
                    b7:9f:44:d8:58:21:5c:37:dc:50:c6:5d:02:c6:30:
                    c9:16:88:3b:e8:fc:f3:9c:df:2e:17:de:74:4d:98:
                    06:bc:43:e4:62:40:4d:bb:a3:ed:93:81:9f:ad:fd:
                    a2:3e:2d:80:46:ba:bd:55:6e:de:00:58:55:c2:5a:
                    f6:89:b9:83:b5:3b:ba:b5:91:0b:bd:a3:9a:df:39:
                    fb:6d:b4:09:54:97:74:46:ba:fd:cd:17:bd:4a:79:
                    ed:c5:4b:f4:20:d8:b4:5e:2b:f0:c4:c1:ac:4d:32:
                    60:bf:a2:d9:63:a6:62:df:7c:c3:49:1e:2b:35:f4:
                    f4:64:f0:48:67:e7:56:e6:2a:4d:56:8d:e3:b3:f3:
                    b8:c7:9a:79:8c:7e:f0:c1:a4:c4:c5:cb:c2:76:47:
                    0c:d1:d3:6b:96:4d:7b:9d:bd:f3:9b:6f:9c:5a:a6:
                    59:0d:5f:21:ef:a9:66:c2:55:ec:6c:78:7f:f0:bd:
                    e8:59:db:4f:ed:25:7c:2e:f3:8b:ab:19:16:e2:f5:
                    b1:2c:29:00:a6:fb:5f:03:4d:30:65:c7:9a:ba:e9:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C1:9B:A0:1A:DD:5E:72:46:4F:AC:99:2D:84:FD:F8:4D:33:93:0A
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/323830333a6231303a3430303a3a2f33382d3338203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b10:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:6a:b6:4a:33:18:f4:36:03:c1:ed:d3:0c:87:7e:a9:57:
         ff:9f:04:f5:db:a6:2c:5f:97:b0:a4:0a:21:97:6f:91:06:36:
         cf:11:d7:9a:d0:27:7c:80:85:c2:ee:70:cc:d9:0a:72:6e:93:
         32:f2:21:81:a4:dc:74:fa:3f:16:e5:0d:3d:98:b7:be:c1:cc:
         4d:94:10:79:26:8e:2c:27:be:8f:c7:29:90:61:2e:b7:3d:2e:
         fc:d2:34:9d:cc:c5:f2:f2:41:44:2c:08:12:4f:69:43:fa:13:
         fe:2e:9a:e0:e2:46:b8:88:71:e2:fd:97:7b:2f:ea:77:ea:9c:
         12:72:fe:c9:0d:ec:35:3b:3e:b8:a2:81:74:42:f7:0d:98:25:
         0f:2e:be:98:dc:7e:56:78:6a:9e:2b:dc:f1:47:25:af:79:21:
         87:77:e5:ce:2b:6b:10:8d:15:a5:f3:bc:09:3a:75:6f:08:eb:
         7a:22:a1:6d:c6:56:3f:70:a4:60:5c:c0:4a:76:25:b9:a2:0d:
         d6:db:0d:98:8e:66:eb:cb:86:b7:28:8a:39:48:5d:93:c6:17:
         7e:e8:3d:07:72:6e:d9:62:e8:3b:0a:e7:4d:b0:60:2c:80:b5:
         28:79:d8:c9:ca:d5:6b:69:d1:7e:9b:52:7e:35:65:e7:92:19:
         ae:a3:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----