Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/323830333a346534303a3a2f33322d3438203d3e20323634363038.roa
File:                     323830333a346534303a3a2f33322d3438203d3e20323634363038.roa (raw, json)
Hash identifier:          EfsmPgoqYVmWjSxNoNmHx7rUYMb4pcehmkQP6P/6WDw=
Subject key identifier:   0B:72:2F:FB:B7:D4:A9:11:0E:91:6D:48:BC:7E:76:E0:78:C0:11:85
Certificate issuer:       /CN=D579CC6AF8308A8BC0A633B894777F89547B9F81
Certificate serial:       169336027A66098898C22C262F82AED86CD80971
Authority key identifier: D5:79:CC:6A:F8:30:8A:8B:C0:A6:33:B8:94:77:7F:89:54:7B:9F:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/323830333a346534303a3a2f33322d3438203d3e20323634363038.roa
Signing time:             Tue 05 Mar 2024 17:49:05 +0000
ROA not before:           Tue 05 Mar 2024 17:44:05 +0000
ROA not after:            Tue 04 Mar 2025 17:49:05 +0000
asID:                     264608
IP address blocks:        2803:4e40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:93:36:02:7a:66:09:88:98:c2:2c:26:2f:82:ae:d8:6c:d8:09:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D579CC6AF8308A8BC0A633B894777F89547B9F81
        Validity
            Not Before: Mar  5 17:44:05 2024 GMT
            Not After : Mar  4 17:49:05 2025 GMT
        Subject: CN=0B722FFBB7D4A9110E916D48BC7E76E078C01185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:58:a2:3a:7a:21:49:56:b9:bf:98:d9:6e:20:
                    2f:55:0c:23:f9:34:e2:5d:7c:10:1f:5a:c3:10:29:
                    3b:cf:62:76:10:6e:d8:fb:0a:f4:99:d0:d7:24:f6:
                    4d:29:61:26:3b:9b:82:f3:c5:b6:75:49:41:7c:69:
                    c0:41:4d:56:ad:6b:23:e0:53:15:24:6a:ed:d1:06:
                    5e:fc:8b:75:95:c0:27:08:d8:5f:f2:fc:13:83:56:
                    c4:56:c6:5a:47:b1:24:b2:a7:12:94:d7:a7:44:25:
                    9a:4b:12:d1:32:bc:29:3d:ea:21:1c:b5:2c:99:7c:
                    31:02:ff:41:c6:8f:fc:d5:a7:3e:e1:99:66:c2:eb:
                    46:ab:3f:3d:8a:a5:f0:08:fa:4b:ca:f0:4d:91:d4:
                    76:c5:b5:7f:38:11:84:bf:b0:ad:a4:37:9f:33:f6:
                    f8:ef:c9:3e:68:f8:91:69:df:69:65:fc:75:58:fd:
                    16:fc:bf:69:e9:68:d0:05:bc:b5:29:4c:81:d3:68:
                    63:88:83:a3:b6:93:9f:56:b4:c7:24:6e:b9:00:78:
                    a3:12:93:db:ee:77:2b:8f:89:0a:67:44:1a:70:d5:
                    0b:c5:8e:c2:15:d1:17:7b:ef:cd:28:3b:31:fd:00:
                    e5:a6:1f:26:74:9a:d0:8d:f4:2c:a9:12:6c:d6:12:
                    4a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:72:2F:FB:B7:D4:A9:11:0E:91:6D:48:BC:7E:76:E0:78:C0:11:85
            X509v3 Authority Key Identifier:
                keyid:D5:79:CC:6A:F8:30:8A:8B:C0:A6:33:B8:94:77:7F:89:54:7B:9F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/323830333a346534303a3a2f33322d3438203d3e20323634363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:09:be:f8:8c:dd:f6:ec:09:22:2d:5a:52:15:81:f1:07:
         49:9a:3b:0e:db:72:b4:27:74:ab:0b:99:f3:bf:3b:69:e2:29:
         4d:be:02:10:3e:4b:f1:a9:78:86:4f:3f:3b:55:bd:51:d2:89:
         ad:77:9e:ef:40:91:11:bf:79:cb:ed:64:af:3e:c0:a8:7c:67:
         3a:6f:8a:40:62:fa:da:20:0d:f9:35:c2:f7:b1:c0:54:61:32:
         0c:22:04:59:66:c9:d5:c9:05:e0:b9:95:af:20:dd:45:92:e6:
         12:9b:45:c4:72:58:17:06:78:29:3f:fe:09:99:5a:7a:7e:91:
         38:5f:f7:6f:9b:23:59:7b:32:28:d1:e6:ba:4c:a9:3d:f4:f5:
         2e:f7:2d:8e:9b:14:87:00:ed:03:45:aa:6a:10:a7:7d:e2:75:
         96:aa:9e:6b:12:d1:62:ff:dd:3b:5c:3b:c9:97:33:78:26:ba:
         88:85:a4:0b:82:f0:68:bb:dc:55:0c:f0:c7:ea:74:ca:f9:60:
         d9:3f:d7:4e:e0:7e:70:08:40:f1:f4:07:2a:84:bd:ce:19:a8:
         b2:c2:f6:0c:c8:d6:b4:c6:76:6c:93:d0:e5:b7:7c:da:06:3f:
         eb:dd:c9:ac:a1:c2:d9:bc:83:c1:26:da:17:58:13:e3:46:39:
         0b:72:74:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----