Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a3a2f34352d3438203d3e20323634363436.roa
File:                     323830333a313738303a3a2f34352d3438203d3e20323634363436.roa (raw, json)
Hash identifier:          +KDg8Z0GFbmRWxylcwRUnPNsjpVV1LVylKHSOVDDJ/w=
Subject key identifier:   73:B7:D3:B1:58:AB:55:55:23:D7:3B:F6:0D:43:FD:54:35:3F:D7:A4
Certificate issuer:       /CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539
Certificate serial:       48199C371D4D6C6DDF86534F375B26C1663C03D4
Authority key identifier: 33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a3a2f34352d3438203d3e20323634363436.roa
Signing time:             Tue 05 Mar 2024 17:54:34 +0000
ROA not before:           Tue 05 Mar 2024 17:49:34 +0000
ROA not after:            Tue 04 Mar 2025 17:54:34 +0000
asID:                     264646
IP address blocks:        2803:1780::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:19:9c:37:1d:4d:6c:6d:df:86:53:4f:37:5b:26:c1:66:3c:03:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331C39F8DA2D3717859BF2ABF1E2187143BAB539
        Validity
            Not Before: Mar  5 17:49:34 2024 GMT
            Not After : Mar  4 17:54:34 2025 GMT
        Subject: CN=73B7D3B158AB555523D73BF60D43FD54353FD7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:aa:fb:9e:57:22:97:38:df:16:cd:b8:c9:
                    eb:93:b8:6c:5b:51:b7:06:7b:c5:b1:63:66:63:fb:
                    7b:4e:c1:e5:a7:70:60:ce:f9:50:30:f0:65:4c:30:
                    dc:a2:a0:b9:63:97:71:0b:36:b7:41:4a:49:c5:cd:
                    43:93:8e:cf:a7:04:c4:5f:54:28:82:c3:96:4a:6a:
                    aa:61:be:ba:e8:91:24:b9:14:6a:cf:30:1e:a6:64:
                    18:95:29:5c:7b:ae:30:eb:aa:8d:05:0c:b9:dd:6f:
                    5c:7e:ff:16:c2:cb:ac:01:fa:6e:cd:c0:34:98:ac:
                    d6:2e:74:7c:cc:b6:b0:58:fe:9c:0b:9a:28:ea:f9:
                    33:56:7f:d1:a1:ea:e6:bf:96:65:6f:46:c4:e6:b2:
                    33:94:d7:48:93:6c:b8:0b:48:d3:7f:5c:25:4e:13:
                    aa:1a:cd:36:dd:92:7a:e4:89:b9:e4:e4:f6:86:16:
                    af:db:cb:09:01:78:c1:60:14:68:a9:22:1d:bb:75:
                    11:33:b7:fc:14:83:18:a0:d8:b8:8f:49:64:9d:1b:
                    e4:c0:00:64:0e:df:b1:29:53:b8:e8:9c:61:97:4f:
                    cf:b2:7f:39:2c:26:71:34:49:0f:cd:08:de:1a:57:
                    2a:a5:b2:d0:f2:0c:6d:b9:3a:70:f5:5e:94:38:f8:
                    b8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B7:D3:B1:58:AB:55:55:23:D7:3B:F6:0D:43:FD:54:35:3F:D7:A4
            X509v3 Authority Key Identifier:
                keyid:33:1C:39:F8:DA:2D:37:17:85:9B:F2:AB:F1:E2:18:71:43:BA:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331C39F8DA2D3717859BF2ABF1E2187143BAB539.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C98D75A90FD82DD0B5305EC2D5037CFE3292FBB062B106AF1C3133C6608FEA4/0/323830333a313738303a3a2f34352d3438203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1780::/45

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:3c:04:fa:dc:d2:09:74:b2:62:8a:4c:e2:2e:2e:05:51:
         59:f7:25:eb:e5:84:2d:cf:a9:91:03:0d:3f:16:f6:90:a6:40:
         e2:2a:59:e8:86:fa:0c:9a:f7:d2:57:a7:13:50:6f:1c:68:e6:
         a2:d6:ad:89:9a:a5:5a:c1:0b:88:4e:46:f7:96:72:d9:73:4b:
         33:c2:80:45:5b:dc:4c:20:45:2e:37:0e:dc:c7:5a:ab:28:48:
         a7:80:de:49:6b:7c:de:1f:3b:35:4f:70:1b:17:c2:d4:f2:73:
         39:9d:cd:cd:d8:a7:c4:43:e2:46:ad:22:c3:32:17:96:51:36:
         c0:58:35:c1:6f:55:92:de:df:52:73:42:07:62:5d:f1:e1:6e:
         02:ee:a0:ef:da:29:7d:e0:b5:2f:e0:ed:04:5d:6d:b9:9b:ea:
         12:58:cb:f9:38:c7:18:23:09:d4:c7:97:a4:38:e6:6b:c7:16:
         be:24:19:9b:e8:16:d1:96:d1:49:5c:34:50:d2:90:fa:18:5a:
         09:87:c5:2b:a4:dc:6b:41:7c:2e:ba:f4:8d:55:0d:ce:08:b6:
         f6:98:0d:c0:f5:f6:b9:42:1a:d9:15:98:fb:69:30:30:6a:52:
         87:f6:f9:98:30:bb:1b:32:4b:f2:e1:86:e8:a6:78:0b:51:fd:
         6a:41:3c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----