Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203532323735.roa
File:                     323830313a303a3434303a3a2f34382d3438203d3e203532323735.roa (raw, json)
Hash identifier:          X4N96TtACZwuqfF6i69Jtw2JJCnTfape7VM6w12KcrQ=
Subject key identifier:   00:7E:B7:0B:83:8F:0E:C4:3E:B7:5B:69:68:E6:AA:47:2F:6A:52:F9
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       20ED0160689DC559D99E8AC8E92EE83198423FA5
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203532323735.roa
Signing time:             Tue 05 Mar 2024 17:41:39 +0000
ROA not before:           Tue 05 Mar 2024 17:36:39 +0000
ROA not after:            Tue 04 Mar 2025 17:41:39 +0000
asID:                     52275
IP address blocks:        2801:0:440::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ed:01:60:68:9d:c5:59:d9:9e:8a:c8:e9:2e:e8:31:98:42:3f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:39 2024 GMT
            Not After : Mar  4 17:41:39 2025 GMT
        Subject: CN=007EB70B838F0EC43EB75B6968E6AA472F6A52F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:8c:4c:ac:25:5e:ef:f2:99:5a:17:9a:cd:
                    44:c6:3e:ca:ba:64:25:cc:89:e2:2f:c4:30:dc:67:
                    2b:a5:e3:eb:f7:13:b9:03:1a:57:cb:51:74:4a:50:
                    6d:70:09:60:90:76:66:13:73:60:27:85:2b:4a:17:
                    d4:99:77:f5:96:63:c3:60:75:bb:60:dd:99:cb:c1:
                    9f:05:37:3d:dc:04:da:16:e0:45:65:2c:78:65:39:
                    be:a5:65:9b:8c:97:9f:28:d8:95:45:b6:e8:ce:a1:
                    d7:43:93:5d:b1:bc:55:2e:6b:4f:92:65:69:ba:cd:
                    6b:12:b4:4d:98:e2:10:25:d2:b4:ff:6e:d1:43:53:
                    6b:ce:32:25:85:4c:01:6f:4a:70:65:92:39:06:f3:
                    35:7c:ad:21:28:2b:f4:28:df:21:b4:ca:ab:06:38:
                    2d:ef:29:e8:89:23:0a:c8:d0:94:f1:d3:5c:dc:20:
                    e7:bc:86:3e:b7:a4:76:60:2e:f3:3a:5e:e7:fa:1c:
                    5e:66:8c:40:a1:d2:56:2a:76:11:d5:3b:f6:cb:c4:
                    1d:81:9e:e6:19:e7:07:d1:04:8e:0d:bb:21:31:9d:
                    db:2d:34:98:5b:02:cd:1d:38:b9:35:f5:0b:7a:a9:
                    94:a4:7e:a8:ab:7c:a7:45:1a:e0:89:32:c4:cb:6b:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7E:B7:0B:83:8F:0E:C4:3E:B7:5B:69:68:E6:AA:47:2F:6A:52:F9
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/323830313a303a3434303a3a2f34382d3438203d3e203532323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:b0:af:4b:8c:85:e9:9c:2e:26:02:80:3e:01:f4:9b:a0:50:
         da:8f:6f:f4:34:6c:da:c3:68:86:88:3c:4d:39:0d:74:08:9b:
         98:fa:69:d8:c2:d9:b3:ff:2b:b7:38:cb:12:13:b8:27:27:8f:
         fb:05:01:7e:33:4e:76:05:06:bd:de:6c:0b:eb:c5:6e:11:57:
         62:5d:ce:b2:9d:a0:d7:b6:74:9a:35:fd:a9:66:74:f6:12:5c:
         9d:4d:1c:29:1d:ab:95:f2:99:8f:e0:50:71:4b:5c:1a:68:e2:
         0e:3b:ee:9f:66:46:58:0d:d8:8a:19:66:c6:cc:3d:2f:14:64:
         fb:a6:01:75:6a:dc:83:b0:0f:67:c1:90:44:d8:ff:fb:b8:73:
         bb:d8:a0:fa:1b:2e:28:18:ba:ad:63:65:c3:98:67:e5:cb:20:
         67:fe:45:0c:51:74:13:53:3e:ca:e7:63:f9:61:b4:4f:ce:90:
         85:24:06:73:50:85:10:4d:63:e7:a3:0e:f1:ea:dd:97:ed:f9:
         98:a0:cb:55:9d:9f:8f:6e:6e:46:fd:1f:81:49:24:e6:e6:62:
         ec:e6:a8:a2:6d:ef:68:6a:28:02:36:52:48:91:fd:0e:9d:83:
         a7:bc:78:0d:63:60:89:d0:99:ec:e3:a4:cc:82:97:56:d9:dc:
         0c:f5:51:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----