Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/323830303a3934303a3a2f33322d3634203d3e203237393533.roa
File:                     323830303a3934303a3a2f33322d3634203d3e203237393533.roa (raw, json)
Hash identifier:          jsVolmQzNV+0ay31ySD6+6nTH7lu6FVNSISDtkrTwyI=
Subject key identifier:   48:A9:FE:9A:C3:54:FE:66:F2:21:3B:A7:31:64:20:18:B1:A2:B1:43
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       4E87A2FBA54602CBB0F7D010607ECCEB9544BF2B
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/323830303a3934303a3a2f33322d3634203d3e203237393533.roa
Signing time:             Tue 05 Mar 2024 18:07:54 +0000
ROA not before:           Tue 05 Mar 2024 18:02:54 +0000
ROA not after:            Tue 04 Mar 2025 18:07:54 +0000
asID:                     27953
IP address blocks:        2800:940::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:87:a2:fb:a5:46:02:cb:b0:f7:d0:10:60:7e:cc:eb:95:44:bf:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Mar  5 18:02:54 2024 GMT
            Not After : Mar  4 18:07:54 2025 GMT
        Subject: CN=48A9FE9AC354FE66F2213BA731642018B1A2B143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:b2:15:10:80:49:24:ce:8f:8f:58:57:9d:
                    d6:73:0d:03:b2:01:95:4a:26:a4:37:47:0e:86:20:
                    0d:d6:65:aa:8a:0e:b6:a9:91:24:d8:40:41:ba:a0:
                    bc:7d:a2:a1:74:57:7e:2d:ec:b1:08:50:9b:26:0a:
                    30:63:f3:54:03:67:d0:c4:89:bb:40:50:5a:1e:d6:
                    2f:20:15:61:4e:93:74:80:38:3d:53:3b:84:aa:7a:
                    5b:cb:8c:10:f7:67:71:44:c7:79:4e:0c:00:36:c5:
                    f5:ff:b5:78:e1:16:ce:bd:e9:ee:e9:66:6b:13:b5:
                    d4:25:60:85:c4:84:21:ce:85:8f:44:33:a9:cb:58:
                    11:82:7e:4e:5e:9e:cc:96:cb:08:c1:b9:61:f6:98:
                    a7:8f:ac:f4:97:e2:17:23:f9:55:ab:41:55:d2:15:
                    8e:94:a7:86:07:07:0c:81:cd:34:29:30:79:df:e6:
                    94:06:7c:09:4f:2c:70:28:22:31:12:a2:de:e9:16:
                    fb:c6:1c:b2:02:d2:b3:16:36:4c:1e:0c:6a:23:20:
                    11:76:4c:6a:32:0c:fa:37:8b:f9:8a:e1:bf:6a:16:
                    7d:23:04:e3:6f:43:bc:2e:a1:32:87:6f:e8:0d:c9:
                    4f:f3:ae:2d:f1:6a:f2:22:0a:b9:a9:0c:a0:d7:fe:
                    b9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A9:FE:9A:C3:54:FE:66:F2:21:3B:A7:31:64:20:18:B1:A2:B1:43
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/323830303a3934303a3a2f33322d3634203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:940::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:ec:bf:1b:79:9e:74:e1:ed:d1:09:50:b8:86:d3:e6:28:e7:
         65:61:c0:80:30:c3:b8:da:be:73:c8:a8:c1:e8:d1:b2:a1:29:
         a2:ee:52:3f:2e:79:93:34:32:31:82:a0:da:f7:f3:f2:54:6a:
         89:54:c1:a7:57:61:91:79:d1:63:54:e1:f3:64:a2:82:ab:8f:
         fc:ca:89:79:06:a0:b7:4a:7f:ef:d9:0a:16:96:c3:a9:5f:1d:
         b2:52:9d:7a:7b:4b:53:5d:61:38:55:88:5e:fd:9c:13:ca:f9:
         b4:58:4a:3e:4d:9c:b8:aa:1b:6d:e5:40:42:92:43:3e:6e:fa:
         61:8f:3e:39:d9:d2:6c:c1:a0:48:2c:80:f7:0f:6e:35:a5:74:
         e1:ba:e7:bd:ee:9d:3a:aa:02:88:ab:e5:28:9b:d9:4a:78:ba:
         e2:af:8c:89:8b:80:74:1f:54:da:e4:d9:3c:e8:70:0b:af:bc:
         0e:08:93:20:72:2d:d1:46:dc:77:b0:b2:dd:d3:29:fb:45:bb:
         ba:13:42:91:a6:51:02:a0:da:fa:23:4c:67:f6:12:6e:96:54:
         63:ac:93:88:99:5e:4e:b8:05:e3:47:fd:bd:57:1c:a0:29:59:
         04:85:54:cc:fa:b6:95:02:3a:70:0a:14:15:c8:64:5a:57:73:
         1b:4a:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----