Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa
File:                     323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa (raw, json)
Hash identifier:          3iKinf3efMvvqBaxzmuveie/KyKNeVjo4Oqa5tDKjyU=
Subject key identifier:   AA:E7:4D:23:28:A4:78:57:52:8D:87:36:19:11:2C:2F:47:C9:47:AC
Certificate issuer:       /CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
Certificate serial:       3E226CE01696E9921CE8F1D3C740142C5348F997
Authority key identifier: 2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa
Signing time:             Fri 29 Nov 2024 16:10:00 +0000
ROA not before:           Fri 29 Nov 2024 16:05:00 +0000
ROA not after:            Fri 28 Nov 2025 16:10:00 +0000
asID:                     263750
IP address blocks:        2803:a040:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:22:6c:e0:16:96:e9:92:1c:e8:f1:d3:c7:40:14:2c:53:48:f9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509
        Validity
            Not Before: Nov 29 16:05:00 2024 GMT
            Not After : Nov 28 16:10:00 2025 GMT
        Subject: CN=AAE74D2328A47857528D873619112C2F47C947AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:ff:e3:6d:e9:f1:96:48:9f:ee:45:18:de:
                    e3:b6:bf:3c:66:89:27:10:4d:7a:25:b7:9c:83:60:
                    17:51:fa:72:fb:d6:7b:ee:51:00:23:c6:56:ec:65:
                    8f:e2:f1:23:a9:a9:a3:24:a1:a5:90:3d:6e:d9:ce:
                    02:ef:e4:46:87:31:99:87:bc:23:02:09:72:0e:45:
                    54:32:85:ae:a1:b9:df:32:d1:e9:80:8d:24:b8:34:
                    bb:88:73:36:39:51:ba:15:51:cb:76:c5:bd:b3:07:
                    fb:27:95:fb:b5:f3:f3:c2:ea:80:00:a9:9c:e7:f7:
                    63:da:6c:49:84:2c:a2:7e:c9:66:c4:c0:5f:a8:71:
                    7c:95:f5:9a:c3:1c:49:da:0b:a3:bf:80:fd:d5:74:
                    85:9c:f2:18:ab:45:74:2e:db:e0:bb:9c:4c:fa:99:
                    67:1a:39:d7:2a:55:89:d4:5c:8b:a3:6e:46:ab:c7:
                    c1:24:ac:b4:09:63:61:df:36:d2:5d:0b:32:87:5d:
                    d2:53:7c:8b:15:ff:65:87:61:8f:75:f3:ad:ee:6d:
                    6c:f6:8c:82:9c:88:9f:6c:8d:5b:fd:59:4f:ca:bf:
                    b5:64:15:66:4b:33:86:ff:c3:29:b6:ab:80:7a:30:
                    23:d0:01:ae:9e:0d:d0:60:5a:f3:ab:be:2c:2b:36:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E7:4D:23:28:A4:78:57:52:8D:87:36:19:11:2C:2F:47:C9:47:AC
            X509v3 Authority Key Identifier:
                keyid:2F:B4:7B:A0:2A:DB:C1:61:3D:B2:0F:1B:5E:C3:A1:AC:74:C5:25:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FB47BA02ADBC1613DB20F1B5EC3A1AC74C52509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A772A5EA252624044843818AB8DAB9DFFCB7346C9D2E1E5CA93FDE9BAAA92B4/0/323830333a613034303a383030303a3a2f33342d3334203d3e20323633373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a040:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9e:aa:cc:ee:88:af:d4:66:e3:e5:da:4c:78:54:c7:08:97:3c:
         c4:c9:09:95:d6:03:9d:1e:11:db:79:16:42:f1:03:9e:68:dc:
         f6:c4:09:3d:29:2b:de:f8:7b:20:57:11:49:3d:b0:bc:5d:cb:
         39:f7:b6:a5:1a:37:3b:44:bb:4f:2e:e6:2a:3e:02:01:25:fb:
         50:ae:6d:55:46:6d:c4:4c:22:25:64:db:b3:ed:95:bb:c2:ae:
         ff:b0:fd:6f:0d:dc:7f:48:d1:2f:fe:f0:e0:6a:86:01:13:72:
         f1:97:d2:03:d3:77:28:8a:d1:8f:b7:8f:25:65:16:5a:f9:19:
         b5:9f:1f:fd:c3:ba:ab:97:b8:a6:9f:80:02:09:76:08:75:80:
         b5:af:73:f1:05:53:77:93:1a:17:12:55:95:d7:bf:bb:a7:11:
         c3:e9:64:4f:13:6d:17:c5:e1:39:60:16:f8:46:00:5e:4a:dc:
         ec:76:9b:28:fd:3e:3a:68:38:d1:9f:67:1b:56:35:36:10:46:
         1b:4e:38:e8:86:c3:bf:7e:9d:68:28:15:da:9c:c2:cc:c2:e8:
         22:8d:9e:56:59:bd:17:07:d1:1d:a5:84:cc:cb:4d:b4:81:b0:
         0e:30:94:5a:f5:d0:c4:b6:39:3d:b3:89:d7:e0:76:76:b5:32:
         54:1b:3e:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----