Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3a2f33322d3432203d3e20323639373330.roa
File:                     323830333a353136303a3a2f33322d3432203d3e20323639373330.roa (raw, json)
Hash identifier:          fKu9j5s9dpzGHX//8xaAZoRrHgbxkrpLDGWGkX+edRs=
Subject key identifier:   C7:B0:63:B9:9F:27:61:AA:4D:F4:51:03:1C:5A:18:22:DD:77:D7:D3
Certificate issuer:       /CN=71D885ED6F4642A4A627D17FCC92858FF0032B31
Certificate serial:       0E1FE6EB8170FB22CB4E2BF50FAAF5E9B9CEB539
Authority key identifier: 71:D8:85:ED:6F:46:42:A4:A6:27:D1:7F:CC:92:85:8F:F0:03:2B:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71D885ED6F4642A4A627D17FCC92858FF0032B31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3a2f33322d3432203d3e20323639373330.roa
Signing time:             Tue 05 Mar 2024 17:54:04 +0000
ROA not before:           Tue 05 Mar 2024 17:49:04 +0000
ROA not after:            Tue 04 Mar 2025 17:54:04 +0000
asID:                     269730
IP address blocks:        2803:5160::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1f:e6:eb:81:70:fb:22:cb:4e:2b:f5:0f:aa:f5:e9:b9:ce:b5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D885ED6F4642A4A627D17FCC92858FF0032B31
        Validity
            Not Before: Mar  5 17:49:04 2024 GMT
            Not After : Mar  4 17:54:04 2025 GMT
        Subject: CN=C7B063B99F2761AA4DF451031C5A1822DD77D7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:57:1d:df:06:b9:a4:ba:62:9b:ce:97:fa:
                    9b:8b:90:50:9c:08:7c:33:ea:c7:41:cf:19:b5:a0:
                    4b:e4:16:47:bb:5f:db:c1:b9:f5:ea:d2:f1:67:a7:
                    75:fa:19:c4:e7:ff:68:75:2c:49:f8:62:d1:b3:0c:
                    04:93:88:1f:66:13:2a:ba:6b:28:57:31:ad:e8:71:
                    6d:db:5c:ef:ef:2b:a7:b0:d6:86:ce:9b:f1:89:f1:
                    8d:98:44:0f:b7:ed:0f:8f:73:c8:c1:1b:44:32:1e:
                    ee:35:fb:bc:80:82:4f:83:3c:ef:21:6d:55:ed:30:
                    d1:c5:94:45:8e:09:24:49:0a:cb:df:10:9a:26:6f:
                    e6:b6:9a:4b:0f:9c:ac:b8:48:ff:87:48:5b:b3:f1:
                    1c:52:30:0a:06:9e:7f:ae:a9:83:77:07:e2:92:ef:
                    bb:50:f8:94:fa:f2:50:92:7a:5b:c3:90:5c:93:68:
                    c5:34:7f:3d:03:1b:d0:86:78:57:7b:e5:32:ac:1d:
                    b2:b2:f2:35:4c:f5:0f:67:82:0e:0c:8b:58:d4:04:
                    f7:a0:3a:4e:4d:fa:d8:b6:77:f8:54:72:16:2e:d5:
                    de:fb:ab:66:3b:35:bf:0a:51:74:de:a6:f2:35:a6:
                    12:5a:a8:b2:cd:f9:45:a7:fd:7e:31:5d:96:fb:d1:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:63:B9:9F:27:61:AA:4D:F4:51:03:1C:5A:18:22:DD:77:D7:D3
            X509v3 Authority Key Identifier:
                keyid:71:D8:85:ED:6F:46:42:A4:A6:27:D1:7F:CC:92:85:8F:F0:03:2B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/71D885ED6F4642A4A627D17FCC92858FF0032B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71D885ED6F4642A4A627D17FCC92858FF0032B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3a2f33322d3432203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:1e:a3:1e:83:d0:9c:2d:77:92:6f:43:dd:44:79:94:35:c0:
         51:70:2f:f5:2c:9f:17:bb:6a:72:91:e3:0f:db:bc:77:20:17:
         03:50:bb:0e:42:a5:54:78:ff:d4:73:95:25:87:c7:d2:70:75:
         f0:b1:d1:e4:bd:d9:1b:99:0f:25:54:c3:a6:c1:c5:34:64:da:
         be:3a:75:59:25:fc:35:c0:a4:e8:16:dd:b9:4a:fa:c1:7a:33:
         fa:7b:a7:f5:3e:b1:31:40:2a:a1:be:76:5b:bf:ab:84:ec:92:
         cf:3d:4d:7d:91:95:52:e6:ba:9b:24:f2:5c:2c:2a:5e:07:5c:
         bc:0d:2b:0c:92:38:aa:f5:b5:6e:27:c3:6d:5d:ee:bf:41:fa:
         6a:3b:83:e9:a1:36:3f:a3:b7:de:8a:38:96:91:36:cc:59:2d:
         3f:23:4c:db:43:02:00:8f:d3:a1:9c:52:4e:21:e5:64:4d:32:
         0f:07:a9:c1:e8:73:c9:ad:bf:86:b8:cb:81:09:64:32:bd:a0:
         45:8a:ee:92:b4:f9:68:9f:e0:22:1c:7b:19:ed:6a:b7:a0:4f:
         9d:80:7f:7b:ed:e0:7e:0c:12:b6:f9:72:84:1d:54:e3:10:74:
         0d:fb:02:3d:d3:6a:ff:e5:38:dd:bb:38:2d:a2:9e:31:65:22:
         81:32:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----