Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/323830333a666265303a3a2f33322d3438203d3e20323730303932.roa
File:                     323830333a666265303a3a2f33322d3438203d3e20323730303932.roa (raw, json)
Hash identifier:          KX+5xmgIISx9Dk5Ig0t/ws/LZYsmJGJ2fQbQah4TuqU=
Subject key identifier:   4B:A1:CB:F5:BD:39:D7:A5:B8:91:12:BB:FF:75:A1:E8:62:5C:92:FD
Certificate issuer:       /CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
Certificate serial:       4F28FFC1CB8E5B6CAD72D0766437425C9E18BFD5
Authority key identifier: 2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/323830333a666265303a3a2f33322d3438203d3e20323730303932.roa
Signing time:             Tue 05 Mar 2024 17:39:57 +0000
ROA not before:           Tue 05 Mar 2024 17:34:57 +0000
ROA not after:            Tue 04 Mar 2025 17:39:57 +0000
asID:                     270092
IP address blocks:        2803:fbe0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:28:ff:c1:cb:8e:5b:6c:ad:72:d0:76:64:37:42:5c:9e:18:bf:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589
        Validity
            Not Before: Mar  5 17:34:57 2024 GMT
            Not After : Mar  4 17:39:57 2025 GMT
        Subject: CN=4BA1CBF5BD39D7A5B89112BBFF75A1E8625C92FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:69:b6:a2:96:8f:5f:b6:2f:a5:30:f0:ff:a6:
                    30:ad:92:94:00:f3:00:7d:da:ac:be:8b:a7:b9:8e:
                    85:6a:21:59:86:49:9d:0a:c9:9a:f0:30:c3:a0:4e:
                    c8:f8:ed:54:b4:8a:87:45:0c:75:29:22:68:d4:ce:
                    cd:fe:b6:e0:24:4a:17:2e:d3:a0:10:7a:15:cf:a8:
                    fb:21:a2:53:79:97:0d:c4:20:93:ce:4a:b0:2c:24:
                    d2:2b:55:1f:03:f3:28:74:6e:ef:cc:92:df:70:a3:
                    50:64:17:26:c6:bd:b0:af:78:6c:5e:4f:0f:bb:77:
                    7a:69:cd:dc:d8:e4:36:d4:72:77:73:d3:8e:f0:08:
                    0b:4d:7f:b5:64:f6:a9:2d:93:29:cb:04:7c:d9:de:
                    99:53:9c:c7:46:1a:f6:df:e8:e1:88:50:ba:62:4d:
                    73:30:f4:5b:fa:47:ee:3e:18:a6:78:6d:94:0e:95:
                    d0:b6:0a:00:99:c7:69:53:71:6f:eb:c3:8e:7d:5e:
                    7b:25:ec:98:1a:a5:be:0b:74:bd:8f:cb:ad:b0:54:
                    07:ea:51:ba:29:23:97:5c:b8:4a:a7:88:fe:f0:d2:
                    dc:71:53:ff:e5:f2:42:d4:19:5b:38:9e:25:06:ac:
                    9f:c0:27:bb:f0:72:b4:55:a5:7a:0c:7c:ed:c1:24:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A1:CB:F5:BD:39:D7:A5:B8:91:12:BB:FF:75:A1:E8:62:5C:92:FD
            X509v3 Authority Key Identifier:
                keyid:2B:96:B9:59:C7:24:5B:9C:BE:8A:E0:F7:BD:6A:75:21:2C:CA:15:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B96B959C7245B9CBE8AE0F7BD6A75212CCA1589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08C3EA796DE2A8DC84B989CDFA46FEA0EE10CFB8AA714F20F43D1CB010D4A2AD/0/323830333a666265303a3a2f33322d3438203d3e20323730303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fbe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:9b:86:89:10:45:6e:5c:15:c4:81:ee:77:8e:77:c6:a4:
         aa:84:bf:e0:32:52:1c:cb:de:13:db:c5:1f:c7:d0:5c:c0:63:
         b0:a1:ae:29:99:12:a4:e8:10:2c:b2:eb:21:b3:1e:6f:80:43:
         15:cf:91:5a:20:01:eb:0e:a7:38:ec:c3:9e:ef:e6:72:3a:24:
         3c:82:e9:18:89:b0:09:45:35:59:ce:fb:8b:6d:15:2e:cf:16:
         63:78:3f:21:ea:0a:8a:69:3e:89:e0:d6:a3:91:d8:8c:95:f8:
         28:3c:1b:de:c3:9d:b7:e0:54:7e:0a:cf:1d:90:c8:79:62:8c:
         ec:53:5a:85:af:d8:85:3f:a4:18:66:88:82:eb:32:22:b6:3a:
         fe:56:7c:52:49:c6:a0:9f:00:35:19:01:84:f3:c8:2f:4e:61:
         fb:63:62:5e:ec:08:58:8b:ce:a0:cf:53:c9:cc:6d:98:8b:13:
         8d:22:68:5d:30:9d:d0:20:19:9b:87:d9:f2:ad:2c:d0:90:2f:
         cc:4a:18:c9:e3:eb:a6:39:04:09:87:19:3d:66:3e:a7:56:a8:
         0d:84:f9:8b:46:18:12:5b:5f:37:54:c2:36:1c:c3:cb:15:13:
         b4:60:09:00:85:4c:7e:59:99:0c:b7:4d:0d:1a:97:a9:8d:bd:
         44:7a:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----