Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3430203d3e2033353439.roa
File:                     323830333a623263303a3a2f33322d3430203d3e2033353439.roa (raw, json)
Hash identifier:          DZD7UDAPp6LfQFwbYcj21UsSGZR6YRzsQaB/Hk3VZVk=
Subject key identifier:   AC:CC:EC:7D:C5:B8:17:BF:44:0E:22:E4:DE:93:5E:01:91:CB:B4:CB
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       2D4BD489FEEA4ACEAA444675C9AAF20B55BD8733
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3430203d3e2033353439.roa
Signing time:             Tue 05 Mar 2024 18:10:48 +0000
ROA not before:           Tue 05 Mar 2024 18:05:48 +0000
ROA not after:            Tue 04 Mar 2025 18:10:48 +0000
asID:                     3549
IP address blocks:        2803:b2c0::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4b:d4:89:fe:ea:4a:ce:aa:44:46:75:c9:aa:f2:0b:55:bd:87:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Mar  5 18:05:48 2024 GMT
            Not After : Mar  4 18:10:48 2025 GMT
        Subject: CN=ACCCEC7DC5B817BF440E22E4DE935E0191CBB4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:50:e7:64:de:dd:35:86:44:18:24:17:08:
                    3a:82:c1:0d:7d:8b:49:39:5c:58:10:42:30:4d:9d:
                    58:da:a8:b5:33:e8:6a:d1:84:81:38:6f:81:da:b0:
                    d5:b5:b4:b8:23:9b:1d:fb:74:f7:82:8b:3b:3f:3a:
                    91:4e:a3:ab:12:4d:3d:31:85:07:5c:de:a5:93:90:
                    6b:bc:09:82:c1:14:6d:9f:f8:69:1f:e7:bc:c3:76:
                    4f:dd:1c:df:9c:27:80:03:28:47:98:d9:88:d1:a7:
                    38:61:52:14:1f:a2:c4:05:57:71:2e:3c:89:79:7e:
                    27:b2:8e:fd:43:d0:ac:eb:ff:f2:05:d0:43:fa:3a:
                    df:8f:af:a2:e7:cf:67:6e:de:85:5e:2d:d0:d1:30:
                    66:5d:93:00:be:2b:5d:4c:ef:af:d3:1d:27:53:77:
                    7a:de:81:bf:4f:1b:1b:25:19:94:48:5c:f2:75:93:
                    68:bd:86:c7:d4:ef:b7:0b:40:a3:c5:f4:b8:d0:c8:
                    ad:33:f8:3c:13:56:69:4e:6d:df:cc:8f:64:4e:4c:
                    28:e6:37:a5:d3:f3:5c:72:87:c0:98:03:ff:ca:84:
                    4b:41:26:ef:65:db:af:22:80:37:a0:2f:66:de:27:
                    e6:8f:c8:f7:8f:a5:3b:1a:bb:ca:37:04:00:b2:ff:
                    65:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CC:EC:7D:C5:B8:17:BF:44:0E:22:E4:DE:93:5E:01:91:CB:B4:CB
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3430203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:12:14:a1:8c:94:93:16:13:34:d3:e2:95:d9:ac:1b:8a:a1:
         5f:cd:e3:29:8f:d1:fa:8b:4d:d0:00:eb:8e:a4:44:17:80:28:
         67:ee:de:40:1e:0f:be:38:6f:f4:3b:3f:ba:24:f8:e7:1c:1e:
         ae:74:0d:f6:b3:51:09:f3:ee:8f:7d:c2:9f:0d:d7:fc:0b:d2:
         79:e5:e9:7d:9d:8c:30:2e:d4:6f:21:e9:29:e3:07:c7:e9:8e:
         cc:ec:ae:f3:ce:b7:2d:f4:73:d1:a9:36:6b:57:38:62:ee:d4:
         74:6e:2c:9b:d8:03:ef:24:8d:7d:fb:f2:b6:5d:d3:eb:60:8a:
         32:83:0e:5d:8c:17:7d:24:62:f0:2a:55:e1:ec:df:98:ad:84:
         da:f2:cb:aa:51:a9:c9:39:62:a2:be:e8:20:5c:62:2c:79:7e:
         19:21:35:79:bd:b5:27:b7:16:76:44:c2:40:79:c4:c6:a2:02:
         43:9b:fe:58:17:8a:77:f6:70:37:d4:05:99:4c:0b:09:ca:40:
         e3:a2:a5:58:98:e4:d4:c7:54:92:8e:3e:1f:9d:07:2c:4e:41:
         96:ca:3d:b9:8e:e8:ae:91:7b:c7:e1:fe:02:0f:db:70:da:60:
         90:b6:a5:cc:bd:e2:8f:a3:7a:34:2b:91:50:d0:3a:9c:ce:d8:
         87:ad:29:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----