Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/323830303a613030383a3a2f33322d3332203d3e203233303037.roa
File:                     323830303a613030383a3a2f33322d3332203d3e203233303037.roa (raw, json)
Hash identifier:          08q7RHiUKgv+2Ax9GbFaompHEcIyiLpNAFIqE3s+u7E=
Subject key identifier:   32:92:6F:4E:9B:B3:36:2B:F5:02:A5:20:6E:2F:50:2E:65:BE:BA:6D
Certificate issuer:       /CN=FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5
Certificate serial:       1EAFC6AAE34788F5D8EFAB2C24A9FD7E70A42EE6
Authority key identifier: FB:F6:06:BE:5C:E9:E7:6D:39:4A:0A:FA:C9:A4:DC:3E:DE:56:75:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/323830303a613030383a3a2f33322d3332203d3e203233303037.roa
Signing time:             Tue 05 Mar 2024 17:49:37 +0000
ROA not before:           Tue 05 Mar 2024 17:44:37 +0000
ROA not after:            Tue 04 Mar 2025 17:49:37 +0000
asID:                     23007
IP address blocks:        2800:a008::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:af:c6:aa:e3:47:88:f5:d8:ef:ab:2c:24:a9:fd:7e:70:a4:2e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5
        Validity
            Not Before: Mar  5 17:44:37 2024 GMT
            Not After : Mar  4 17:49:37 2025 GMT
        Subject: CN=32926F4E9BB3362BF502A5206E2F502E65BEBA6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:40:96:7a:6e:39:d2:fb:b0:87:bd:e6:44:ab:
                    0a:e7:fc:37:e1:2d:08:3b:0a:ea:96:a2:f6:c5:da:
                    0d:2e:3f:d7:66:ad:72:a4:a8:0e:e8:dd:e5:20:d7:
                    57:27:e3:28:0c:1e:fb:1a:ba:1e:78:83:bc:76:a0:
                    19:b1:16:52:92:c2:f5:c6:4b:fa:1e:ef:8b:3c:c6:
                    bf:af:9c:a2:81:d8:8b:ce:78:9b:43:32:58:be:a1:
                    83:cd:6b:01:bb:c4:c0:d4:a2:36:5c:a8:33:67:18:
                    bd:01:31:73:ba:1b:e0:e6:21:7b:ce:9c:44:25:ea:
                    79:2c:50:36:17:ff:97:8d:21:ad:aa:4d:be:49:6f:
                    8e:6e:d5:c2:4b:62:a0:95:b1:37:d9:70:c2:24:c4:
                    df:74:53:be:e9:28:f6:85:a7:6d:23:98:05:6b:30:
                    c1:ef:9d:99:b0:f4:9b:ca:7c:9a:3d:89:f8:2b:b6:
                    ce:93:89:8f:e0:71:52:16:67:60:04:56:9b:e2:77:
                    f9:70:d8:55:43:5b:c7:dc:fa:77:95:e7:4d:27:77:
                    3d:e3:98:43:40:8c:3f:32:9b:23:91:c4:53:9b:8e:
                    34:b9:80:d3:92:15:23:b5:59:c8:c6:a9:33:c3:bf:
                    c4:c6:35:e6:91:1f:f8:a6:2a:4d:2d:d4:c2:ef:b4:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:92:6F:4E:9B:B3:36:2B:F5:02:A5:20:6E:2F:50:2E:65:BE:BA:6D
            X509v3 Authority Key Identifier:
                keyid:FB:F6:06:BE:5C:E9:E7:6D:39:4A:0A:FA:C9:A4:DC:3E:DE:56:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBF606BE5CE9E76D394A0AFAC9A4DC3EDE5675A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/116DB0F82AF8D867A78EC5C0DE029B971BBB247E27E547C2F37EF532827B2B51/0/323830303a613030383a3a2f33322d3332203d3e203233303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a008::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:b6:3b:a3:b6:9f:98:bf:93:f6:2b:3b:c9:0c:3a:14:bc:8e:
         77:82:76:62:7d:c5:4e:a4:2e:f6:9e:6c:1e:ab:71:56:fa:8b:
         a5:2b:3f:34:99:db:93:81:65:e7:ff:6b:7d:a9:12:7a:39:a4:
         6c:10:a1:83:04:53:b0:df:e2:f6:d4:e9:3e:30:fa:e1:88:24:
         8d:ad:c2:2d:f8:c2:8e:f9:36:aa:f3:10:cc:a1:e1:2b:ce:aa:
         12:f8:a4:3b:21:cc:1a:97:79:92:0c:c2:2c:80:f6:62:8d:0b:
         3a:ef:7c:d7:ba:e8:96:a3:4a:13:1f:76:1c:89:7a:db:69:ba:
         82:dd:33:1e:ac:a3:03:be:ae:b1:e4:86:52:8e:ab:af:ab:c0:
         ec:47:d3:f7:54:bb:92:a8:ea:5c:eb:64:34:97:9b:fa:80:42:
         5d:40:c2:41:9d:1e:32:1b:2f:a7:88:af:ed:11:29:8c:15:4d:
         00:36:30:a1:4e:03:af:2d:e6:28:4d:7c:b6:d0:8c:30:f1:7f:
         17:03:38:76:16:b4:ba:e1:6e:fa:83:52:fc:9f:8e:c6:05:41:
         65:13:b0:67:28:5d:70:d1:54:d3:25:a4:c0:a0:c4:ab:17:da:
         b6:54:0d:03:75:5d:2e:29:10:3a:36:62:0c:65:6f:95:d8:09:
         eb:bb:68:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----