Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/323830303a3866303a3a2f33322d3332203d3e203232383630.roa
File:                     323830303a3866303a3a2f33322d3332203d3e203232383630.roa (raw, json)
Hash identifier:          2Abj1sqsrC57iW/ut7k+ZOe72qWdCjkgS3ALMpmSsMA=
Subject key identifier:   7E:B9:E6:D8:4D:09:66:99:F6:22:27:7D:7E:D6:83:E3:34:94:4A:51
Certificate issuer:       /CN=9F6EA2D324259DF27DF8730E7E750CA4CA449421
Certificate serial:       4F5221ABC9AE2B78C0BC5BE7C686B9FAAD3493F3
Authority key identifier: 9F:6E:A2:D3:24:25:9D:F2:7D:F8:73:0E:7E:75:0C:A4:CA:44:94:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/323830303a3866303a3a2f33322d3332203d3e203232383630.roa
Signing time:             Tue 05 Mar 2024 18:01:52 +0000
ROA not before:           Tue 05 Mar 2024 17:56:52 +0000
ROA not after:            Tue 04 Mar 2025 18:01:52 +0000
asID:                     22860
IP address blocks:        2800:8f0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:52:21:ab:c9:ae:2b:78:c0:bc:5b:e7:c6:86:b9:fa:ad:34:93:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6EA2D324259DF27DF8730E7E750CA4CA449421
        Validity
            Not Before: Mar  5 17:56:52 2024 GMT
            Not After : Mar  4 18:01:52 2025 GMT
        Subject: CN=7EB9E6D84D096699F622277D7ED683E334944A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:5e:2e:8b:c8:bc:e2:4a:61:56:39:32:cf:
                    0f:4f:62:90:3b:bb:0c:d1:58:c6:09:48:29:23:2e:
                    69:3f:f4:65:1e:a3:04:35:19:3d:95:c4:77:a6:b4:
                    e2:90:a8:01:a3:5b:f3:8d:c4:17:58:79:be:1e:6a:
                    cd:e7:2a:07:9e:2f:d1:0a:37:9b:7f:a5:2c:d3:0e:
                    62:28:75:f3:13:7d:f1:ca:25:e7:b6:87:c6:d3:27:
                    42:08:e4:21:1f:fb:d0:6e:ff:45:5a:69:91:dd:55:
                    f8:1c:1d:09:a2:83:09:3a:23:68:78:7a:aa:e7:32:
                    0b:e8:ce:e1:74:6b:ed:b0:a0:6e:98:ea:cf:62:ea:
                    7f:84:38:bb:8d:87:a6:7e:93:7d:f4:5d:51:25:a9:
                    07:a7:67:84:27:09:68:c1:bb:3c:bb:29:a9:f9:40:
                    2f:d0:11:f0:13:ae:e9:91:06:05:fb:6b:5f:96:84:
                    89:83:05:51:b0:59:87:99:ee:f8:ad:ef:50:84:fe:
                    ed:b9:6e:88:1c:5a:36:25:eb:5d:bb:eb:18:e2:66:
                    f3:cc:d9:fb:52:20:4c:2b:22:df:6c:c8:84:8f:d3:
                    f1:41:3a:d2:b1:88:c1:05:d8:89:b3:0b:01:44:32:
                    8c:8a:0e:b5:ef:df:23:a4:5d:f4:18:05:cc:06:db:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B9:E6:D8:4D:09:66:99:F6:22:27:7D:7E:D6:83:E3:34:94:4A:51
            X509v3 Authority Key Identifier:
                keyid:9F:6E:A2:D3:24:25:9D:F2:7D:F8:73:0E:7E:75:0C:A4:CA:44:94:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/323830303a3866303a3a2f33322d3332203d3e203232383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:8f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:07:81:78:3d:9d:f1:b1:6c:31:08:b3:80:a1:35:48:08:
         ee:c1:31:35:58:c4:54:9a:73:21:aa:e9:64:23:b3:3c:d9:83:
         27:43:64:65:a0:d8:0d:44:8b:d3:db:c7:d0:1f:ee:51:69:60:
         35:2d:0c:f7:a0:f5:b2:b8:ab:9e:7a:65:1c:c5:f3:81:72:03:
         7b:09:0b:56:59:d0:06:2c:d2:0b:0a:b2:20:58:b0:0a:70:cb:
         43:55:20:4b:08:97:18:ae:f4:7e:e8:64:35:b2:a6:57:be:e1:
         61:23:c4:86:7f:0c:a9:43:62:f0:b3:38:9e:17:15:ee:dc:61:
         b7:e1:44:94:c1:6c:12:ea:ba:fc:97:f0:07:6f:49:2d:38:2b:
         d9:02:42:88:74:72:24:46:b1:7e:23:a9:51:e7:29:ae:4c:f4:
         67:5f:4d:af:b0:68:07:99:1b:d0:ac:a6:0d:ae:b5:e5:28:59:
         7f:15:d8:bf:bb:dc:b8:d0:06:7b:f6:9f:b4:48:51:70:2b:b2:
         2c:1f:31:50:eb:7d:a6:ea:23:43:2f:e4:89:41:4c:2f:df:09:
         37:93:03:2d:5d:6f:84:ea:b3:2c:c8:dc:13:b9:b6:3a:57:9f:
         7e:8a:0a:1e:64:65:64:8c:74:63:2e:86:cb:c7:23:58:52:36:
         47:67:16:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----