Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/323830333a353063303a3130363a3a2f34382d3438203d3e20323634373633.roa
File:                     323830333a353063303a3130363a3a2f34382d3438203d3e20323634373633.roa (raw, json)
Hash identifier:          jQ1C9ucISc3GVpoFd3A2mpaewmV1aLIf51VJfeybtOs=
Subject key identifier:   4C:5F:A2:FD:0B:1A:B0:79:2A:C6:B4:90:70:35:7A:23:38:04:A2:73
Certificate issuer:       /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial:       7F7BED6A2C0E3A8C35160CA3D8CFCE8631EB6FB0
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/323830333a353063303a3130363a3a2f34382d3438203d3e20323634373633.roa
Signing time:             Tue 05 Mar 2024 17:56:48 +0000
ROA not before:           Tue 05 Mar 2024 17:51:48 +0000
ROA not after:            Tue 04 Mar 2025 17:56:48 +0000
asID:                     264763
IP address blocks:        2803:50c0:106::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7b:ed:6a:2c:0e:3a:8c:35:16:0c:a3:d8:cf:ce:86:31:eb:6f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
        Validity
            Not Before: Mar  5 17:51:48 2024 GMT
            Not After : Mar  4 17:56:48 2025 GMT
        Subject: CN=4C5FA2FD0B1AB0792AC6B49070357A233804A273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:ea:4e:f6:4a:a2:62:08:6c:cb:77:0c:b0:
                    aa:97:5f:7d:cf:23:e8:9b:e9:4a:1f:b1:e7:ad:91:
                    d4:57:77:5c:e6:82:94:4b:65:24:5b:c6:5d:e8:e7:
                    54:59:40:09:98:25:db:e1:7a:c4:7f:31:03:aa:e7:
                    1a:15:79:0b:3d:1f:95:b6:7e:98:c8:c2:e9:48:5b:
                    29:cc:fc:40:54:d7:5f:c0:58:74:c4:83:f2:66:e7:
                    c5:32:6d:f8:e9:fe:a3:3f:46:ff:46:36:2e:3d:d8:
                    db:14:40:59:46:69:0e:ac:57:cd:5d:29:ab:fc:84:
                    11:7c:f3:94:e9:4e:38:b2:76:46:ef:e7:e5:fe:ec:
                    af:35:84:4b:3a:40:2a:b1:9f:99:6c:f7:38:d5:32:
                    5a:73:4a:52:44:cf:e1:70:90:01:21:b2:17:64:b5:
                    a1:2f:af:00:a1:11:5e:8a:51:f4:b8:85:33:0b:9c:
                    65:51:ce:39:e0:a2:31:38:e5:56:6e:17:7b:c7:cf:
                    db:bb:80:19:e2:5f:e8:6a:ac:20:b6:5b:6d:49:13:
                    46:df:a0:1b:48:96:e9:3c:b8:15:7e:dc:45:b9:c1:
                    1d:c2:6e:35:64:39:d4:86:35:bc:08:b4:48:04:1b:
                    cd:b4:c6:af:e8:cc:7b:62:95:08:33:7d:0f:43:3d:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5F:A2:FD:0B:1A:B0:79:2A:C6:B4:90:70:35:7A:23:38:04:A2:73
            X509v3 Authority Key Identifier:
                keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/323830333a353063303a3130363a3a2f34382d3438203d3e20323634373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:50c0:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:6b:e0:46:20:e8:95:f4:02:f9:c2:e3:60:dd:ac:34:2e:80:
         26:4a:57:79:ff:28:d7:67:84:e1:d8:14:93:ee:6d:d6:6e:dd:
         a2:41:a9:50:16:c6:f8:c5:6a:7d:4f:f8:20:1d:f4:bb:46:36:
         5e:db:f6:26:0f:1c:7e:84:39:a0:42:62:a3:38:68:92:1b:a6:
         0a:db:fb:9e:bd:b5:6f:57:ff:a7:92:3e:f8:81:24:7d:39:b8:
         53:f3:c2:f4:ae:3a:fa:bb:ac:e7:28:a5:31:95:bb:74:52:52:
         16:3d:5c:a1:17:61:c2:8e:0a:53:9c:6b:4a:8a:e7:18:05:7e:
         e8:b7:b8:b0:43:ec:0d:89:60:01:d5:36:f9:eb:02:92:37:c4:
         cd:53:c1:38:18:e6:18:47:1f:ab:ac:f4:48:fb:71:07:43:46:
         2d:95:3e:ec:7a:42:87:f3:4d:cf:bb:2a:f8:19:5b:ab:3c:65:
         a0:d6:11:24:24:64:ad:9f:01:e2:22:8c:34:a8:6e:da:75:2f:
         de:ed:fb:b1:7e:5f:43:33:1a:e1:23:33:ff:00:e5:dd:4f:27:
         00:65:64:d7:42:66:88:5a:62:25:95:4d:35:ea:d5:21:1b:56:
         a2:3b:df:c0:69:d3:fa:c7:cf:35:6b:86:b1:89:22:cc:95:a2:
         46:1e:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----