Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/323830333a3930303a3a2f33322d3332203d3e203532323739.roa
File:                     323830333a3930303a3a2f33322d3332203d3e203532323739.roa (raw, json)
Hash identifier:          dNtLrY/OCG2LYtIOMavrsilbdL1zhZQmv+SFp3IV11A=
Subject key identifier:   8B:8F:66:C5:77:42:71:69:CD:67:9B:72:17:FC:46:E7:E4:DD:A3:A6
Certificate issuer:       /CN=121BB05553FD8170C35FA9B8265458699CAC81AD
Certificate serial:       41094023CDDEFDDDA076021CB99DAC1CE9272189
Authority key identifier: 12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/323830333a3930303a3a2f33322d3332203d3e203532323739.roa
Signing time:             Tue 05 Mar 2024 18:03:05 +0000
ROA not before:           Tue 05 Mar 2024 17:58:05 +0000
ROA not after:            Tue 04 Mar 2025 18:03:05 +0000
asID:                     52279
IP address blocks:        2803:900::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:09:40:23:cd:de:fd:dd:a0:76:02:1c:b9:9d:ac:1c:e9:27:21:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121BB05553FD8170C35FA9B8265458699CAC81AD
        Validity
            Not Before: Mar  5 17:58:05 2024 GMT
            Not After : Mar  4 18:03:05 2025 GMT
        Subject: CN=8B8F66C577427169CD679B7217FC46E7E4DDA3A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:dc:25:d4:b4:ae:ed:88:e1:f8:e6:d5:ad:
                    84:cf:15:be:e4:54:eb:b9:93:9e:26:e8:05:99:f9:
                    88:bb:6d:33:ac:38:eb:e4:a5:21:da:ff:3b:d1:b2:
                    84:20:09:d7:81:71:36:64:33:db:81:79:e9:21:28:
                    46:ce:9d:a2:58:48:79:d4:ec:b2:b6:b8:74:8e:db:
                    30:19:dd:6e:d2:a4:f8:c7:0c:e2:b7:95:e0:c2:7a:
                    4c:84:2d:0b:a8:34:7c:b8:43:78:4c:3d:b1:f2:e6:
                    cb:91:9f:2e:95:1e:da:30:14:e7:8e:40:ea:b0:9e:
                    31:5d:3f:45:56:7d:ae:0f:26:ac:68:c9:32:16:19:
                    4a:1d:52:f2:96:fc:1d:d2:6b:42:a4:04:ac:2a:2a:
                    88:23:33:b9:da:8a:8d:c5:a4:a2:80:30:31:29:d8:
                    a9:72:48:fa:b6:5d:da:e9:d0:8d:d0:4b:d0:91:8e:
                    c0:8b:99:b2:8c:98:7d:c1:49:4c:24:c1:de:53:48:
                    6e:d1:05:6e:ce:97:be:b7:9d:04:b9:8c:e8:59:91:
                    79:3c:df:fe:33:27:f1:cf:95:9e:b3:bb:87:96:d9:
                    13:31:ad:78:2d:77:9d:e3:cb:d4:68:33:f6:9a:78:
                    e8:40:70:30:c8:60:41:2b:fc:be:fa:1a:f6:42:c4:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8F:66:C5:77:42:71:69:CD:67:9B:72:17:FC:46:E7:E4:DD:A3:A6
            X509v3 Authority Key Identifier:
                keyid:12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/323830333a3930303a3a2f33322d3332203d3e203532323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:900::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:cd:e8:8b:92:45:0c:60:c6:54:b4:da:cb:5a:6e:fb:cd:c6:
         d9:08:a4:9e:d3:a6:bd:12:8b:53:3d:14:39:84:c3:a6:ae:35:
         61:0a:33:19:08:e1:f2:39:d6:32:8a:6d:6b:8b:94:bc:15:6c:
         2a:a8:88:0a:73:7d:d0:a6:6f:07:5b:f6:19:7a:4e:21:98:7e:
         c8:77:02:5c:08:51:20:b8:ab:34:7a:7e:43:51:ce:6f:ff:ba:
         58:bb:b0:cb:6b:51:cd:6d:55:c9:60:a4:b8:66:86:d0:0e:06:
         f2:f2:43:56:31:76:68:b2:d6:03:02:be:7f:65:03:a6:71:95:
         ef:bc:2b:cf:df:38:87:68:c6:1f:ab:a0:71:99:d7:76:c1:5b:
         cf:e2:28:ca:6d:09:4b:f6:63:2a:3f:2f:27:08:37:ad:56:f7:
         b5:eb:88:89:08:d5:36:5c:17:1a:c2:b4:7b:57:01:f9:92:30:
         79:b1:97:d6:41:0e:a3:4f:6c:56:4c:53:ff:c9:a8:8e:0a:a5:
         49:51:c4:81:3c:57:a9:12:26:49:c1:40:d1:c0:99:25:28:18:
         79:3e:a6:dc:80:da:67:41:78:88:1c:c8:bb:84:b7:86:22:1d:
         74:0b:37:1b:2d:b3:ba:7b:43:18:ea:5c:72:d5:03:d6:55:ef:
         29:f4:27:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----