Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/323830333a613431303a3a2f33322d3438203d3e203634313134.roa
File:                     323830333a613431303a3a2f33322d3438203d3e203634313134.roa (raw, json)
Hash identifier:          BtWTBVXInxVJo0FpoATQj74ZP6pYWTm+TIitbOGsw3k=
Subject key identifier:   F7:52:0C:6F:00:69:03:2E:6E:39:54:00:32:78:CB:77:95:66:6E:F0
Certificate issuer:       /CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374
Certificate serial:       404E90D1201E0F09CC946603024986DBD543106D
Authority key identifier: 40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/323830333a613431303a3a2f33322d3438203d3e203634313134.roa
Signing time:             Tue 05 Mar 2024 18:10:38 +0000
ROA not before:           Tue 05 Mar 2024 18:05:38 +0000
ROA not after:            Tue 04 Mar 2025 18:10:38 +0000
asID:                     64114
IP address blocks:        2803:a410::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4e:90:d1:20:1e:0f:09:cc:94:66:03:02:49:86:db:d5:43:10:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402EE1D9B06FF99090AB25CAA286ABC0E56BB374
        Validity
            Not Before: Mar  5 18:05:38 2024 GMT
            Not After : Mar  4 18:10:38 2025 GMT
        Subject: CN=F7520C6F0069032E6E3954003278CB7795666EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:fe:b8:0e:30:f2:55:78:af:0e:b9:a9:47:
                    9c:25:c8:dd:43:c4:b0:e8:a5:35:2b:3e:cd:f2:f3:
                    07:82:de:ad:42:1b:28:a9:e5:d0:fc:ab:bf:11:e8:
                    9e:8f:fb:b3:75:e9:8b:33:82:74:be:9f:81:2d:51:
                    6f:82:19:3a:40:0f:38:01:2f:e5:e0:e9:38:a8:78:
                    ba:9e:f3:dc:65:77:57:ff:62:16:fa:1f:f6:e1:6e:
                    1c:4e:59:c0:33:5a:30:35:5f:f3:cd:af:98:17:88:
                    4f:77:52:8a:25:e2:23:3e:46:d4:bb:57:2f:5b:b9:
                    91:17:ea:a0:b0:56:6f:58:9c:0b:44:db:98:4f:06:
                    3f:90:78:5f:a6:e9:cd:f0:44:d7:1c:4d:a0:85:48:
                    30:7b:41:59:32:e2:c0:3a:18:66:6f:80:0e:16:50:
                    be:2b:14:64:a8:3e:2d:5e:ba:f7:db:05:93:64:e7:
                    43:d2:49:21:46:c2:a9:dd:e7:bd:9a:10:30:c6:cd:
                    99:65:1c:68:58:ae:3c:df:b2:5d:d1:22:89:d1:81:
                    c2:4b:7c:cc:ad:1a:dc:d5:04:84:e4:df:d1:3a:16:
                    db:13:93:ed:f9:2a:c6:a1:85:09:2f:66:2a:51:03:
                    35:f8:00:3a:86:dc:13:a5:cb:37:c3:c9:cd:fa:d5:
                    19:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:52:0C:6F:00:69:03:2E:6E:39:54:00:32:78:CB:77:95:66:6E:F0
            X509v3 Authority Key Identifier:
                keyid:40:2E:E1:D9:B0:6F:F9:90:90:AB:25:CA:A2:86:AB:C0:E5:6B:B3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402EE1D9B06FF99090AB25CAA286ABC0E56BB374.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DEC688CE1BC7E1EEAF3F82677078C9A253FC65372690F6E7B145EC9B84CC452/0/323830333a613431303a3a2f33322d3438203d3e203634313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a410::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:90:79:d6:b0:4d:12:a1:6f:b9:db:f4:ec:e1:b6:35:4b:3f:
         cd:b3:5e:ea:da:46:a1:5c:a3:0a:c5:de:54:f1:88:ea:a9:2c:
         a2:d6:2d:61:5b:27:73:ef:cc:4c:e1:0f:90:c6:14:9b:24:bb:
         f9:4f:c3:03:25:1b:95:81:e2:4b:53:09:7f:13:96:b2:84:6e:
         95:43:22:fa:45:e5:1b:18:2d:08:c4:76:f0:fc:78:f1:0a:a3:
         44:74:cb:6c:d8:b3:02:a8:40:32:e1:9d:ec:e0:8d:9f:40:be:
         42:68:78:cf:14:35:01:ed:b1:de:4f:91:70:1b:0b:88:79:f7:
         1b:5e:01:f6:0b:dd:74:ea:20:47:b3:5c:d4:6c:cc:88:c3:3b:
         6a:6c:e2:06:07:97:e8:27:66:a3:62:4a:da:d7:dc:fc:19:fc:
         22:3b:b0:fe:61:22:4c:dc:0a:2c:ed:31:d9:f5:ae:47:39:8c:
         1d:8e:f1:ab:8b:d0:dc:e7:ed:b1:c8:6d:f4:ca:cc:9b:7a:8b:
         1b:8d:22:de:d4:8d:19:a9:ec:f9:f8:91:f5:57:39:c0:5a:93:
         fe:8a:a9:bf:ca:37:a8:42:92:67:f2:40:36:2b:88:a8:56:d1:
         cd:48:02:62:2b:5b:12:1a:de:45:23:b1:c3:18:d0:2c:47:a3:
         88:03:dd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----