Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
File:                     323830333a646434303a3a2f33322d3438203d3e20323634363738.roa (raw, json)
Hash identifier:          VljKI9Ote2bpl7VcmSwLGVono1m/l8k88Z0bMeejLeo=
Subject key identifier:   3B:82:19:3B:AA:8F:A9:FA:1A:A5:DC:53:CD:D1:19:77:67:C5:4B:84
Certificate issuer:       /CN=BFA364CC05C34700B6C32AC37512D94D292D301C
Certificate serial:       5FDAA562B9E97A5D5801143BB8EE36800FB62EF9
Authority key identifier: BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa
Signing time:             Tue 05 Mar 2024 18:19:37 +0000
ROA not before:           Tue 05 Mar 2024 18:14:37 +0000
ROA not after:            Tue 04 Mar 2025 18:19:37 +0000
asID:                     264678
IP address blocks:        2803:dd40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:da:a5:62:b9:e9:7a:5d:58:01:14:3b:b8:ee:36:80:0f:b6:2e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFA364CC05C34700B6C32AC37512D94D292D301C
        Validity
            Not Before: Mar  5 18:14:37 2024 GMT
            Not After : Mar  4 18:19:37 2025 GMT
        Subject: CN=3B82193BAA8FA9FA1AA5DC53CDD1197767C54B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:29:1b:31:c7:0a:37:34:f2:65:7d:7d:60:
                    87:b8:55:1c:ef:7f:9a:f9:ef:32:f8:ea:8d:03:93:
                    c0:ba:fa:63:a3:f8:5e:1e:97:ed:d8:7a:f0:d5:5d:
                    82:2e:09:2f:76:65:8c:df:6e:29:cf:5f:c4:e6:04:
                    20:cb:01:02:d7:f5:6d:15:3a:7a:1d:ce:ef:9d:21:
                    c2:d4:4d:7e:e3:24:90:90:70:f5:a4:71:b5:09:9b:
                    38:df:cc:32:55:e0:b6:40:c3:5b:5d:bd:e8:66:b1:
                    f9:de:e5:88:e7:0f:dd:c5:fe:b3:74:c1:ac:37:54:
                    60:e6:ae:ab:1e:0c:ad:fe:19:91:b9:d2:39:a1:66:
                    ab:5e:5a:b4:99:1a:af:6a:be:52:15:e1:38:4b:02:
                    c1:6a:21:81:ee:d5:3f:c3:29:ad:a1:92:be:02:1e:
                    b6:9d:8c:5e:32:11:23:39:ba:17:88:0a:9b:fc:15:
                    5d:a6:de:a2:53:b1:b5:b1:13:96:c9:97:60:92:ad:
                    89:d5:63:63:79:0d:4f:7d:6b:ef:6d:24:7c:0f:12:
                    3f:85:bd:d5:3e:a4:0c:25:ce:96:70:08:de:d6:84:
                    ff:b3:c8:a7:da:a2:58:6b:3e:79:8b:04:b6:48:35:
                    ab:ed:fe:ea:be:f6:2e:b2:ab:47:66:d1:ef:d4:4a:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:19:3B:AA:8F:A9:FA:1A:A5:DC:53:CD:D1:19:77:67:C5:4B:84
            X509v3 Authority Key Identifier:
                keyid:BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/323830333a646434303a3a2f33322d3438203d3e20323634363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:f0:59:ab:df:f3:b4:e9:88:d9:af:7b:43:48:81:82:8f:3e:
         18:7d:bb:f3:16:7d:52:0f:2e:d3:1e:35:f5:2d:02:12:2e:15:
         98:8b:c9:b9:62:49:7d:60:53:f1:ae:7d:95:1f:04:8a:27:5e:
         59:e3:3f:cd:34:04:38:17:bd:1e:41:12:69:34:ca:64:b8:ec:
         94:a4:6d:fd:42:08:d4:1e:df:46:56:cc:4f:f4:9c:7f:80:3f:
         d6:3c:46:26:b5:0a:4c:42:a1:fb:67:23:09:91:74:77:be:31:
         a2:57:3a:82:aa:5a:43:c7:41:bf:15:2f:f0:30:a5:65:3b:de:
         b7:50:7c:4a:5f:83:eb:e7:a6:55:b5:78:f6:e2:5b:b8:bf:03:
         e8:4e:17:f5:e9:5f:19:c6:7c:65:a2:5f:1f:1a:e6:5e:5f:3b:
         48:28:48:41:a1:76:34:c0:75:0f:89:45:4e:fb:ce:c0:56:05:
         2e:95:fe:5d:01:fb:87:69:52:95:dd:25:3b:48:7a:c8:e3:36:
         8d:9d:d1:87:e5:f3:31:58:60:ce:b8:dd:6e:24:bb:67:72:51:
         17:7c:20:d2:0a:b0:d1:35:36:70:23:e2:ba:70:be:e1:aa:17:
         41:1a:b7:b4:ec:3c:40:e3:eb:25:5f:19:91:a5:0e:f0:98:fc:
         6e:94:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----