Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/323830333a393132303a3a2f33322d3438203d3e20323637373131.roa
File:                     323830333a393132303a3a2f33322d3438203d3e20323637373131.roa (raw, json)
Hash identifier:          wOeuywoqhkJ1kpqed/Ak/pn6zpLPeKg5X/8ivTHgnPU=
Subject key identifier:   C1:1D:70:DD:C7:85:96:F2:97:23:06:94:E4:6D:24:1E:E4:C2:BD:0C
Certificate issuer:       /CN=389CCF923837EEAFA4DA96AE20241419C941F58A
Certificate serial:       4C5C67D55BF013E5CC27F2FAEF56B6A1EA1C830E
Authority key identifier: 38:9C:CF:92:38:37:EE:AF:A4:DA:96:AE:20:24:14:19:C9:41:F5:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/323830333a393132303a3a2f33322d3438203d3e20323637373131.roa
Signing time:             Tue 05 Mar 2024 18:02:45 +0000
ROA not before:           Tue 05 Mar 2024 17:57:45 +0000
ROA not after:            Tue 04 Mar 2025 18:02:45 +0000
asID:                     267711
IP address blocks:        2803:9120::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5c:67:d5:5b:f0:13:e5:cc:27:f2:fa:ef:56:b6:a1:ea:1c:83:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389CCF923837EEAFA4DA96AE20241419C941F58A
        Validity
            Not Before: Mar  5 17:57:45 2024 GMT
            Not After : Mar  4 18:02:45 2025 GMT
        Subject: CN=C11D70DDC78596F297230694E46D241EE4C2BD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:01:30:4a:c4:ef:82:07:ce:e6:a8:6b:7a:
                    1d:fe:4c:90:c8:0d:61:14:ce:f1:d4:12:27:68:2f:
                    d2:77:d9:4d:be:10:5c:d1:5b:b3:f2:22:74:37:f9:
                    0e:a1:ab:22:ee:2e:6d:fa:f4:33:0d:4d:17:f6:4a:
                    b7:31:37:bd:a8:21:aa:fc:7c:09:54:ca:a3:0b:e3:
                    2a:49:3c:15:f9:7a:3e:40:15:07:bb:5f:17:45:65:
                    d1:58:f5:d5:e2:5a:99:79:f0:18:9f:f4:8f:ff:94:
                    10:94:c4:79:3e:7e:41:04:57:20:1e:1b:80:ac:4b:
                    41:cc:16:2d:fe:74:a1:1d:ac:6b:90:e9:7a:ce:5a:
                    06:65:b9:8e:88:c4:69:99:99:12:00:36:76:18:cf:
                    b8:7c:50:1f:de:a4:22:6f:b0:6c:fd:fa:84:3d:0f:
                    ce:30:6d:97:6a:f6:58:04:73:7f:10:42:39:e5:6b:
                    55:84:24:21:f7:60:bb:72:97:6d:d9:f4:a2:63:78:
                    31:4c:9b:55:f1:d6:3e:ef:10:5a:0f:7b:99:4d:97:
                    86:d9:ef:66:5d:1e:20:4e:85:89:73:2e:76:5f:93:
                    38:64:e0:a5:81:fe:3e:b5:e3:12:61:ae:9a:37:7a:
                    6c:69:06:1e:70:d5:b4:24:a8:5b:75:92:61:49:b2:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1D:70:DD:C7:85:96:F2:97:23:06:94:E4:6D:24:1E:E4:C2:BD:0C
            X509v3 Authority Key Identifier:
                keyid:38:9C:CF:92:38:37:EE:AF:A4:DA:96:AE:20:24:14:19:C9:41:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/389CCF923837EEAFA4DA96AE20241419C941F58A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/323830333a393132303a3a2f33322d3438203d3e20323637373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9120::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:eb:47:54:8d:c9:7f:47:15:4c:b1:5a:a9:b5:5c:39:e0:ed:
         19:8f:30:b1:5a:4b:6f:ef:cf:42:a3:8c:b2:8f:8e:03:02:00:
         87:54:7a:11:b5:a3:6b:3f:27:fd:8b:fb:d1:6c:c6:ed:b0:dc:
         29:3f:ec:88:23:96:ad:04:5c:03:86:36:cb:73:14:b6:1f:83:
         f5:2d:f0:24:f2:bf:ec:41:d9:05:f9:80:db:eb:18:1e:83:8f:
         a6:89:e8:40:cf:01:f0:a8:51:2a:54:8c:8f:79:1a:0d:2e:8a:
         f7:f1:f3:3a:18:b7:f9:52:92:ac:05:2d:0a:48:64:32:4c:be:
         82:2d:d0:ff:dd:63:6a:37:4e:1f:26:71:ed:dc:40:ea:3b:cf:
         09:91:cb:80:c2:17:81:77:bd:10:3a:a2:ff:42:0b:4f:d3:f8:
         14:7a:d5:d4:2c:53:3e:ea:44:8d:65:c7:5f:b7:d1:4a:b5:ba:
         85:52:df:0e:43:30:81:6c:a2:96:23:2e:86:59:e6:ff:88:a7:
         0f:e7:64:0b:44:ca:b7:ca:1c:40:67:f0:6e:f2:33:57:a5:ed:
         51:5a:64:3f:99:8e:1b:ad:46:45:83:04:a1:c4:6a:95:34:c3:
         37:69:58:4b:40:c0:31:15:0c:c1:e4:91:ad:0b:0b:69:fb:37:
         17:c6:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----