Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203139313639.roa
File:                     323830333a623263303a3a2f33322d3438203d3e203139313639.roa (raw, json)
Hash identifier:          H0KgH9j5v0EK3o00Jb7NFggfgy2HuflZpf2sQK4dJi0=
Subject key identifier:   C2:92:52:0C:0E:24:78:2E:D4:95:CA:25:C1:DB:05:F7:13:97:A6:4E
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       0985EEAD9E4C64A9B560EA2457E86EAD93304443
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203139313639.roa
Signing time:             Tue 05 Mar 2024 18:10:49 +0000
ROA not before:           Tue 05 Mar 2024 18:05:49 +0000
ROA not after:            Tue 04 Mar 2025 18:10:49 +0000
asID:                     19169
IP address blocks:        2803:b2c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:85:ee:ad:9e:4c:64:a9:b5:60:ea:24:57:e8:6e:ad:93:30:44:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Mar  5 18:05:49 2024 GMT
            Not After : Mar  4 18:10:49 2025 GMT
        Subject: CN=C292520C0E24782ED495CA25C1DB05F71397A64E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:77:4b:c3:7a:6b:35:82:74:7f:51:29:8b:67:
                    2d:53:d5:25:33:e6:4b:a7:51:f8:b0:23:28:20:46:
                    ed:a2:91:84:de:19:31:83:f9:6e:06:ba:17:97:32:
                    7d:ff:df:3b:ac:d0:f6:24:b2:9a:40:a9:f3:87:23:
                    8a:25:de:9b:ff:f1:af:4e:ae:84:63:82:6d:64:5c:
                    3c:4c:e4:28:93:a7:c3:0e:39:5e:ad:44:e2:76:bb:
                    a7:59:b5:77:c8:d6:c6:ef:d3:25:66:a3:27:e5:b3:
                    61:48:b2:d0:35:c5:75:e0:4e:4a:c5:a9:ea:7e:30:
                    8b:7d:d4:95:95:83:8f:b2:4a:4c:ae:0a:7b:5d:f9:
                    13:14:77:04:7c:3f:8a:67:43:8b:0c:bc:c1:26:a9:
                    04:3f:f2:96:0d:04:4d:75:7e:67:98:49:a3:5e:e4:
                    63:b1:02:ff:30:7c:57:88:2a:8a:8c:fa:b2:5a:6d:
                    0d:5a:0c:c2:14:4c:df:fe:4b:de:59:0b:46:0c:19:
                    c4:43:3a:be:32:f5:7f:d4:53:67:35:ce:64:03:4e:
                    bd:fd:8e:9b:dd:3f:ff:34:f5:7e:7c:29:fd:8b:1b:
                    5a:09:12:57:a5:7e:64:ff:fc:31:c5:4e:78:53:2e:
                    72:c7:30:f8:b9:2e:2d:96:b0:bc:5d:2a:62:11:ea:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:92:52:0C:0E:24:78:2E:D4:95:CA:25:C1:DB:05:F7:13:97:A6:4E
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/323830333a623263303a3a2f33322d3438203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:ec:4a:8d:ff:43:e1:f0:c1:0d:59:e7:54:e8:9c:63:06:34:
         9a:42:ac:b3:f5:69:cb:ff:ad:5d:d5:96:01:fe:3b:74:8a:b6:
         f4:02:a8:9a:e2:b3:5e:42:94:66:35:54:1d:7d:4b:55:59:20:
         85:a1:fa:bb:8d:c6:1e:14:49:cf:d1:af:e4:8c:20:25:f4:d6:
         e1:3c:8c:ee:78:2a:ae:0a:c3:63:52:d2:b0:bf:fe:62:83:2f:
         5f:9b:6d:62:4c:27:29:b8:5d:ac:b9:d7:e9:9e:3d:31:3e:c3:
         93:3c:ae:e4:0f:d2:b9:f8:5c:ad:88:77:f7:db:b5:13:a7:a6:
         58:1f:4f:a0:9c:3a:cc:98:fd:90:d9:5b:56:d3:46:34:14:9e:
         f1:bf:96:cf:69:8c:ee:84:6c:9f:e2:18:62:9d:dd:fe:e4:74:
         b0:19:61:63:aa:50:3e:78:d9:d7:87:ca:47:32:aa:3c:14:bb:
         89:0c:7d:a8:29:ca:8f:e5:76:ec:c8:39:e4:86:8d:d5:95:26:
         75:8a:18:a3:c6:d0:ba:c2:bc:90:02:35:68:ae:c4:d9:dd:30:
         36:e9:b8:d4:7e:1b:fd:63:5f:63:7e:4e:04:34:5b:c6:0a:41:
         3b:5c:ef:11:5c:ee:58:eb:83:3f:77:92:9c:03:db:4d:02:f2:
         c8:a1:41:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----