Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/323830333a393831303a3a2f33322d3438203d3e203134353933.roa
File:                     323830333a393831303a3a2f33322d3438203d3e203134353933.roa (raw, json)
Hash identifier:          B9592T1mlOEAIKjGOn3sna/reLMGsVgI4w206XKpyKs=
Subject key identifier:   2B:D1:D9:3E:CF:28:4D:37:F0:AA:00:8A:99:AC:AC:FA:A4:2C:F9:17
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       0CB06B211987FF72FC42664D3C25732139F914BA
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/323830333a393831303a3a2f33322d3438203d3e203134353933.roa
Signing time:             Tue 05 Mar 2024 17:59:04 +0000
ROA not before:           Tue 05 Mar 2024 17:54:04 +0000
ROA not after:            Tue 04 Mar 2025 17:59:04 +0000
asID:                     14593
IP address blocks:        2803:9810::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b0:6b:21:19:87:ff:72:fc:42:66:4d:3c:25:73:21:39:f9:14:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Mar  5 17:54:04 2024 GMT
            Not After : Mar  4 17:59:04 2025 GMT
        Subject: CN=2BD1D93ECF284D37F0AA008A99ACACFAA42CF917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:bf:88:48:86:49:09:98:39:6a:9a:7b:d0:
                    c2:49:05:4d:97:94:af:17:4f:77:05:c7:be:cb:3b:
                    71:a8:f3:12:12:bd:75:31:64:39:17:48:78:29:d7:
                    f2:ef:c7:a1:f7:40:8e:a3:c2:a4:03:de:f4:f3:4d:
                    d5:8b:30:59:07:c2:3d:f5:1d:b4:21:02:e7:e1:bb:
                    6e:9d:cd:0d:fc:bb:b2:08:85:5c:ac:3a:db:79:60:
                    f8:13:40:91:1d:b5:f0:61:25:44:3a:f4:53:e4:ed:
                    c8:7d:8f:4c:32:c9:0b:29:5d:bb:55:b3:9b:ec:3a:
                    d3:40:03:25:44:1f:b6:c5:4d:c5:61:fe:6e:1d:e4:
                    92:3a:01:0a:1e:10:93:50:94:f9:7f:6f:1b:b3:9c:
                    62:1e:56:38:4b:c3:a0:f7:81:f3:aa:ec:78:e6:de:
                    c9:0b:18:75:b9:bd:29:a5:a1:46:8d:3d:fd:61:28:
                    8f:41:53:b8:a2:69:cb:2a:c4:5b:d1:7e:d4:f7:4d:
                    e8:10:23:b6:d7:dd:44:4e:54:80:7e:24:85:97:c0:
                    1a:5a:ca:92:4d:52:59:c3:fb:12:2b:8c:94:d3:cf:
                    70:e0:cb:28:e8:21:b3:01:d1:d6:55:a2:00:78:f0:
                    f8:a5:d8:12:6b:fe:d7:28:1b:50:52:0d:47:ad:e6:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D1:D9:3E:CF:28:4D:37:F0:AA:00:8A:99:AC:AC:FA:A4:2C:F9:17
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/323830333a393831303a3a2f33322d3438203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9810::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:51:64:77:fe:dd:64:16:2f:fe:cb:b6:91:ea:6e:99:06:
         24:5f:26:1b:80:c9:65:5d:20:eb:62:9f:ee:67:01:1f:97:ea:
         3e:f5:0a:a8:2b:68:89:fd:5a:9c:cd:49:df:9a:91:47:cd:07:
         39:3d:3d:d7:a0:84:53:e4:f6:db:df:c0:0a:b7:b1:99:3d:ec:
         75:87:09:a0:66:8b:b5:b1:63:49:23:f8:37:bf:10:8c:9c:36:
         ec:1b:bb:25:4b:21:e8:71:0c:7c:85:3f:b6:9c:cb:48:e7:e0:
         13:c2:4a:4f:e4:d8:2d:4c:91:ef:41:83:bc:5b:17:17:70:3c:
         72:42:00:36:33:1f:a6:8a:8b:53:73:06:b0:1d:e7:ad:6d:6f:
         5f:6e:1d:47:4f:58:9d:c3:51:63:81:67:94:65:80:50:b3:65:
         cc:ce:04:08:49:5e:36:27:f2:f3:16:8e:83:b2:ae:56:5a:8c:
         f2:f7:e6:ce:72:2d:f3:f1:ce:e4:f6:d1:06:40:39:7c:6e:e5:
         48:db:4a:e0:51:2b:81:bd:ba:c5:b3:a7:9b:3c:83:4f:44:a3:
         8a:d6:dd:51:6f:d5:bf:96:1c:11:27:c2:33:ba:ec:ed:55:f3:
         7a:ff:47:d6:b0:4f:e0:64:f4:d1:78:8c:89:f1:38:30:08:3b:
         36:f2:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----