Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/323830333a326539303a3a2f33322d3438203d3e20323732393134.roa
File:                     323830333a326539303a3a2f33322d3438203d3e20323732393134.roa (raw, json)
Hash identifier:          PzTj6jdzfwvChGHnZjV0xh/bl5KiQz3pRGZAI9XfblQ=
Subject key identifier:   52:7C:19:DF:E9:46:8E:05:90:A8:6D:1A:62:86:BD:14:90:08:EE:F7
Certificate issuer:       /CN=1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D
Certificate serial:       04D0D44586DECA5B41295BC532600046399B5AEA
Authority key identifier: 1D:07:C2:B7:CB:C7:C5:75:F5:78:D3:D3:BA:24:F0:3E:A5:DC:05:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/323830333a326539303a3a2f33322d3438203d3e20323732393134.roa
Signing time:             Tue 05 Mar 2024 18:04:22 +0000
ROA not before:           Tue 05 Mar 2024 17:59:22 +0000
ROA not after:            Tue 04 Mar 2025 18:04:22 +0000
asID:                     272914
IP address blocks:        2803:2e90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d0:d4:45:86:de:ca:5b:41:29:5b:c5:32:60:00:46:39:9b:5a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D
        Validity
            Not Before: Mar  5 17:59:22 2024 GMT
            Not After : Mar  4 18:04:22 2025 GMT
        Subject: CN=527C19DFE9468E0590A86D1A6286BD149008EEF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:54:d9:fe:83:70:45:15:6a:4a:69:e5:77:
                    be:41:7c:bd:b7:c3:a4:f5:79:82:09:f3:bb:90:15:
                    88:29:fd:56:32:4f:f7:af:62:c4:f4:27:f8:b7:46:
                    47:7e:1e:d7:ac:52:a5:c3:1b:c9:b8:0e:e5:17:2f:
                    c2:19:68:e4:07:04:7d:6d:92:92:66:ba:78:15:e7:
                    c9:ea:44:b5:4f:4e:8d:40:2f:ca:ea:ad:48:30:27:
                    f0:5f:c7:52:d0:0c:4b:3d:4d:1b:85:24:11:93:6c:
                    f8:19:a4:56:02:56:26:8b:ff:ac:21:b1:d3:a2:65:
                    0a:2c:66:94:e7:09:7a:eb:8c:5a:9f:a6:c2:a5:93:
                    71:d8:91:13:a5:e2:e7:51:5e:e9:62:fd:cd:fd:84:
                    b1:fa:18:a8:1f:4f:31:f7:3a:c1:e0:d7:29:c9:06:
                    0b:a1:ae:b4:03:ab:cf:75:3e:e2:d9:04:0f:18:9f:
                    9b:a2:ba:31:5d:91:c6:eb:02:df:ab:ae:1f:d1:20:
                    81:f7:de:8b:65:c3:c7:a3:f0:4a:a3:f6:e4:c2:0a:
                    62:7a:e2:ca:e9:50:ba:84:16:9e:d4:0b:da:4f:af:
                    ae:e0:84:b7:ad:04:f3:bc:73:20:c5:a2:60:47:f1:
                    6a:24:6b:e5:10:5f:d2:82:58:9a:10:51:ea:07:cb:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:19:DF:E9:46:8E:05:90:A8:6D:1A:62:86:BD:14:90:08:EE:F7
            X509v3 Authority Key Identifier:
                keyid:1D:07:C2:B7:CB:C7:C5:75:F5:78:D3:D3:BA:24:F0:3E:A5:DC:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/323830333a326539303a3a2f33322d3438203d3e20323732393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:b8:00:39:3c:a2:a1:dc:87:e2:73:a2:a3:00:81:57:a3:db:
         bb:da:03:c9:6f:3f:be:47:61:7c:7b:f6:b7:a5:f5:e6:25:07:
         5a:0c:8b:68:c9:b1:c0:2a:ff:df:6f:7a:d6:50:c0:fc:a0:5a:
         32:05:62:04:2d:e0:96:5b:1e:ed:3d:da:32:d1:a5:21:37:7d:
         eb:ce:fe:41:d5:51:8e:52:51:17:c7:89:ca:f6:98:27:01:a1:
         c9:9d:dd:77:af:e1:1e:86:88:17:b5:5a:3a:22:8f:45:12:b0:
         5e:ae:a9:5a:13:c4:07:5b:0f:28:1b:93:b3:e4:55:00:12:11:
         c4:1a:ac:4d:7b:82:f9:39:16:7e:5c:9f:71:98:ff:d3:32:fe:
         e4:29:25:f1:48:fb:81:04:f4:b8:23:87:f9:e9:9f:7c:24:8f:
         e4:bd:69:44:a1:71:cc:c4:db:87:99:05:b7:62:c1:b5:6e:c4:
         b5:80:df:2c:1c:6c:e9:28:6e:6b:66:18:0a:47:39:8f:c9:5f:
         d5:45:98:50:a2:f6:74:84:1d:d2:3d:d7:ef:10:25:ae:40:0e:
         88:63:62:d7:42:4b:0e:46:2d:67:41:fe:d2:34:02:14:4d:b4:
         37:74:71:59:89:08:b4:cf:eb:ff:7e:a2:b2:c1:73:88:dd:4f:
         7a:ab:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----