Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830333a393331303a3a2f33322d3438203d3e203233303539.roa
File:                     323830333a393331303a3a2f33322d3438203d3e203233303539.roa (raw, json)
Hash identifier:          3fljlE/j6OEz5WIuUqjKbrMWjlaoKvae/UtaXVWuMpA=
Subject key identifier:   C9:93:E2:60:30:E9:37:E0:4A:03:EF:15:79:00:F3:1C:F7:C5:93:CC
Certificate issuer:       /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial:       0272DFCD0F9594684B731095D9B9380C9B556A1F
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830333a393331303a3a2f33322d3438203d3e203233303539.roa
Signing time:             Tue 05 Mar 2024 18:03:10 +0000
ROA not before:           Tue 05 Mar 2024 17:58:10 +0000
ROA not after:            Tue 04 Mar 2025 18:03:10 +0000
asID:                     23059
IP address blocks:        2803:9310::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:72:df:cd:0f:95:94:68:4b:73:10:95:d9:b9:38:0c:9b:55:6a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
        Validity
            Not Before: Mar  5 17:58:10 2024 GMT
            Not After : Mar  4 18:03:10 2025 GMT
        Subject: CN=C993E26030E937E04A03EF157900F31CF7C593CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:08:98:6e:11:41:67:43:44:f0:1d:c0:90:
                    0d:ab:cf:85:da:79:6b:3f:20:d5:dd:22:29:7a:6a:
                    d4:21:c7:c1:db:2b:d9:c2:e4:8d:5a:28:22:df:d6:
                    a9:d4:4c:a2:39:6f:e4:d0:26:6e:b2:8e:be:23:a2:
                    ef:40:41:73:b5:b3:68:49:41:64:9c:c0:9e:d1:b0:
                    00:6c:ba:be:5e:76:e4:24:e7:8e:cb:48:f2:3d:54:
                    25:0b:30:2b:4a:1b:5d:25:b9:99:10:e4:28:76:1d:
                    6f:53:f0:59:1e:6b:e6:be:95:eb:78:45:64:65:1c:
                    48:e8:33:f6:a1:f3:bb:40:38:80:86:54:db:fe:8f:
                    4b:4b:02:c3:ca:7e:86:03:e2:71:e3:1b:ad:d8:36:
                    b4:a7:a4:09:98:ee:fb:a5:25:1b:00:81:02:7c:70:
                    1f:2e:e0:f2:9a:9b:3e:08:45:ac:20:2c:0c:e8:ef:
                    ca:33:e9:4f:e2:c1:1f:a4:0a:8f:5a:85:2a:a6:db:
                    d8:44:77:96:f0:09:9a:48:18:d2:93:65:0a:d9:36:
                    48:7e:b2:ae:64:d2:82:21:b2:47:36:3e:1f:54:3b:
                    65:14:76:64:79:ae:7c:3c:6e:80:4d:3a:67:9b:aa:
                    52:f1:df:8d:ce:7e:c3:87:cb:c2:b1:a5:d4:36:94:
                    22:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:93:E2:60:30:E9:37:E0:4A:03:EF:15:79:00:F3:1C:F7:C5:93:CC
            X509v3 Authority Key Identifier:
                keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/323830333a393331303a3a2f33322d3438203d3e203233303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9310::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:cd:d0:96:b8:08:46:cf:ea:12:93:48:d8:2a:cc:87:b2:62:
         b6:c4:6d:02:8c:e6:76:1a:7b:8a:2f:01:ce:46:a4:9b:e6:30:
         01:3e:b2:c1:55:2a:62:5c:3a:a0:7b:4a:9d:65:fa:c1:c8:a6:
         62:10:f6:11:b7:25:7a:48:e7:87:13:18:82:7c:b7:af:eb:77:
         ab:57:cf:63:88:c7:99:f2:0b:bb:28:cc:ea:25:78:c6:fa:67:
         1c:eb:cb:67:78:e9:2e:8f:ce:f7:5e:44:83:3c:48:28:8d:6e:
         53:81:45:10:93:cb:6f:26:9b:45:4a:c3:2c:b2:6e:f7:68:b1:
         6c:f6:05:c4:1e:77:38:5a:9b:72:71:90:bc:76:6b:91:f4:a9:
         1a:6b:e9:03:19:3e:f4:fd:86:47:af:c6:70:87:73:fe:ea:e8:
         b0:5e:16:d5:89:a4:0c:12:99:f6:49:a4:81:e9:26:e6:f4:4b:
         c1:d2:b0:26:71:18:55:03:a7:bf:5a:88:d1:99:15:71:c5:33:
         d3:72:71:6c:34:04:12:73:8d:b0:35:6d:39:e0:1a:f5:be:f0:
         4b:6b:99:bc:36:bf:5d:40:b4:51:94:3a:ec:0e:e3:04:fb:6e:
         ec:36:19:37:22:ed:5a:ba:88:ac:eb:26:cf:d5:1b:93:6c:f6:
         2f:a3:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----