Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/323830333a383834303a3a2f33322d3438203d3e203237373239.roa
File:                     323830333a383834303a3a2f33322d3438203d3e203237373239.roa (raw, json)
Hash identifier:          RJxUMnr/yFkbgT5V5MeCxahYsAdTj8BRpN7XabqPyCM=
Subject key identifier:   3B:13:B9:04:7D:96:5E:CE:4A:21:BD:04:8D:D3:00:44:30:BB:ED:B2
Certificate issuer:       /CN=CB8CD2550789B77DC4B972AE0BBC01A92255500D
Certificate serial:       5A6B0AD9CA5AA92F81F21A4D137AC704EB931550
Authority key identifier: CB:8C:D2:55:07:89:B7:7D:C4:B9:72:AE:0B:BC:01:A9:22:55:50:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/323830333a383834303a3a2f33322d3438203d3e203237373239.roa
Signing time:             Tue 05 Mar 2024 17:40:16 +0000
ROA not before:           Tue 05 Mar 2024 17:35:16 +0000
ROA not after:            Tue 04 Mar 2025 17:40:16 +0000
asID:                     27729
IP address blocks:        2803:8840::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6b:0a:d9:ca:5a:a9:2f:81:f2:1a:4d:13:7a:c7:04:eb:93:15:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8CD2550789B77DC4B972AE0BBC01A92255500D
        Validity
            Not Before: Mar  5 17:35:16 2024 GMT
            Not After : Mar  4 17:40:16 2025 GMT
        Subject: CN=3B13B9047D965ECE4A21BD048DD3004430BBEDB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:51:34:9e:c7:7b:10:7d:08:31:49:92:e8:
                    8a:1e:8e:ca:e3:ac:23:55:e5:69:b6:a2:d4:9e:27:
                    2d:9c:ad:de:85:df:d0:7d:db:b2:54:0a:68:a9:ff:
                    89:d8:58:8d:ec:75:37:b5:aa:e9:21:06:e0:49:dd:
                    72:74:52:26:9b:4c:36:f4:7c:24:fd:a5:26:db:5c:
                    25:ce:fe:4a:93:b3:b4:a8:dd:12:54:65:49:84:b6:
                    73:07:40:15:34:d5:f3:79:90:c7:7f:5b:f4:de:fd:
                    76:38:e3:d2:4b:02:f3:27:92:01:e8:74:71:c5:9f:
                    9b:b5:ac:7c:70:32:3f:ed:9a:67:90:62:af:e5:7a:
                    67:39:9b:5c:2d:9e:d8:b5:82:a6:45:14:1d:93:ba:
                    6a:77:0c:28:f2:a6:a8:bf:7c:f1:bf:a7:78:84:d6:
                    e7:c6:03:89:9d:9f:92:7e:8b:1c:3d:0f:c3:a9:15:
                    bb:f7:e1:d1:30:d8:1e:e1:fb:25:83:7b:d1:13:a2:
                    ec:f3:7e:42:43:7c:7b:d6:28:ae:d3:9a:13:aa:f1:
                    62:45:b1:6c:69:64:db:9f:4f:96:83:5a:ce:36:8b:
                    b0:be:10:70:b1:dd:cf:b4:32:1f:70:72:be:56:52:
                    7e:94:90:ac:58:f9:f9:02:60:f7:f8:7c:a3:e9:b1:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:13:B9:04:7D:96:5E:CE:4A:21:BD:04:8D:D3:00:44:30:BB:ED:B2
            X509v3 Authority Key Identifier:
                keyid:CB:8C:D2:55:07:89:B7:7D:C4:B9:72:AE:0B:BC:01:A9:22:55:50:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB8CD2550789B77DC4B972AE0BBC01A92255500D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36ABC30B8FD1E9D8BAC66BD46B3DC6EE57857C4F3FF8C1B38618FACBAC799C95/0/323830333a383834303a3a2f33322d3438203d3e203237373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8840::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:a4:b0:fe:7e:b6:1c:10:a7:f3:89:6a:77:4e:b5:94:3d:28:
         d5:59:b1:ea:3d:a0:11:c7:b8:b4:38:e7:3b:a0:35:97:1f:5a:
         5d:3f:62:91:db:0e:36:c9:68:7e:e0:85:43:c6:ec:e6:86:f4:
         1c:30:a2:49:ff:a5:6d:a2:11:c5:40:45:62:94:b0:39:55:8d:
         1e:0c:36:09:fc:b2:dc:4b:02:f3:3a:dc:a2:2f:bc:82:ce:b6:
         8e:2b:ea:3d:b1:00:38:bc:81:c3:a4:e0:b5:89:14:5e:7f:31:
         9c:1d:0e:96:af:01:9f:d7:7d:9e:4b:c3:f1:7f:da:2f:76:87:
         ac:d0:13:a7:54:5c:27:1a:35:b8:60:34:08:90:a9:31:3d:35:
         64:a5:d6:b3:3d:63:01:d4:fc:5a:b7:2f:f0:57:0d:50:0a:fe:
         4a:58:a0:0a:3a:f8:62:ae:ba:e5:10:87:91:10:b9:ad:c0:63:
         6a:1a:dd:c4:6c:98:c8:d6:54:dc:7c:ba:4f:e1:03:10:3f:0a:
         ef:80:b9:9e:a0:a2:88:11:9f:9f:45:5d:af:c4:dd:80:27:4e:
         88:fc:21:a2:cb:4b:e0:05:c0:8c:6b:bc:10:dd:8b:80:9a:67:
         9e:15:94:a7:25:1b:1a:3c:71:28:ab:0b:12:fc:48:85:a8:43:
         7c:3d:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----