Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e20323032.roa
File:                     323830333a396232303a3a2f33322d3634203d3e20323032.roa (raw, json)
Hash identifier:          f/D1nx7W2idELPIxQR28pUoHAZS7snIqN6BBh2fCJeQ=
Subject key identifier:   DD:3E:6D:47:0B:12:DA:5E:20:0C:2F:C1:CB:2B:6C:18:AC:22:80:45
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       6507F2AD95A6311DF87840D555C39A06E954FE4C
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 18:02:38 +0000
ROA not before:           Tue 05 Mar 2024 17:57:38 +0000
ROA not after:            Tue 04 Mar 2025 18:02:38 +0000
asID:                     202
IP address blocks:        2803:9b20::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:07:f2:ad:95:a6:31:1d:f8:78:40:d5:55:c3:9a:06:e9:54:fe:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:38 2024 GMT
            Not After : Mar  4 18:02:38 2025 GMT
        Subject: CN=DD3E6D470B12DA5E200C2FC1CB2B6C18AC228045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:3e:b1:4c:8a:13:10:fd:05:4f:2c:59:58:
                    27:63:d8:2d:56:b4:67:ca:4d:26:e2:b2:01:ef:19:
                    b8:2a:e4:48:7e:b3:5f:75:13:3f:c8:b3:6d:dc:23:
                    fa:a4:a2:1e:ef:54:aa:f6:f2:4c:07:b7:b1:36:e7:
                    8f:19:ba:48:4a:f2:64:7f:44:24:58:03:e4:8a:be:
                    75:28:5d:97:7a:b3:d7:b9:90:65:b3:be:39:4b:51:
                    e8:3a:5c:09:ca:65:b4:25:ea:e1:4e:9a:1e:df:0e:
                    bb:7e:e9:18:37:f2:a8:c2:61:9c:76:21:d1:e6:88:
                    04:44:a5:e8:9d:fb:08:a2:33:6e:a2:2c:f1:51:d6:
                    4d:3b:82:f7:25:5c:51:04:f7:c1:cc:8c:8c:fa:ef:
                    c1:a3:0f:eb:46:f4:69:f9:aa:83:3a:3e:e0:b3:5d:
                    cd:ab:db:f4:5f:bf:44:85:60:e9:5c:18:70:d6:6f:
                    31:04:7d:1e:18:75:a1:ed:54:94:72:41:9d:b8:1f:
                    97:f5:a6:35:26:57:a9:3f:12:2f:a6:38:3f:c2:dd:
                    8a:76:0b:30:83:7d:07:94:29:a2:d0:5c:a9:66:46:
                    f3:ad:59:f7:d8:38:6d:a5:c1:a2:c0:c8:7a:a8:10:
                    c0:0e:89:08:0b:58:20:15:5b:ea:f7:bf:99:9f:ab:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3E:6D:47:0B:12:DA:5E:20:0C:2F:C1:CB:2B:6C:18:AC:22:80:45
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:0d:5b:03:4b:62:4e:92:26:d9:e9:e9:fe:f4:a4:e5:76:60:
         4b:2a:85:6c:11:7e:a8:9e:58:2d:e4:9f:81:58:5b:06:c2:e3:
         7e:a7:50:0d:a9:f9:c4:80:0f:e6:e8:e1:64:36:e0:d4:84:14:
         5c:be:4a:97:e5:e7:07:2f:04:76:15:31:3e:98:19:67:f3:d5:
         e5:41:fc:b0:e9:ac:82:b5:a4:a0:67:a3:50:38:b6:3d:90:01:
         e4:f5:d2:4a:31:39:f2:5a:1a:30:b2:ee:79:62:81:17:57:ba:
         9f:d7:13:b0:43:1a:f5:c7:e3:ad:f2:1b:ed:59:6b:04:50:2e:
         f4:ea:ca:ce:c1:1d:bb:8e:a1:84:ce:c7:e7:b5:1c:31:69:16:
         fd:17:0c:16:24:5b:37:11:5a:77:9e:7f:35:0d:20:36:57:82:
         4b:55:4e:97:e0:83:6c:29:c6:af:14:5c:24:3b:e1:b9:ee:0d:
         37:25:ea:47:ab:48:a4:42:0a:98:ac:99:78:55:78:95:9c:38:
         da:30:56:f1:36:cb:b9:53:92:fd:31:e9:12:46:88:50:87:65:
         6a:ff:2a:cb:03:dc:cc:43:a0:b1:e8:dc:75:e2:db:f7:50:4a:
         b9:13:25:e1:ea:b4:51:92:60:65:3c:c9:60:ed:77:3a:58:72:
         dd:15:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----