Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/323830333a656538303a3a2f33322d3634203d3e203532353035.roa
File:                     323830333a656538303a3a2f33322d3634203d3e203532353035.roa (raw, json)
Hash identifier:          407Y4ep7n6iYLNukTLAI3Q4f2+1w+Go0KvA7tQQBdMM=
Subject key identifier:   90:F1:83:53:3A:8D:2E:20:AE:2C:FD:9E:1B:CF:69:84:A5:8B:3A:DF
Certificate issuer:       /CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
Certificate serial:       26702245F9C3479AF2434C1277E9AD461D8CAF1B
Authority key identifier: 48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/323830333a656538303a3a2f33322d3634203d3e203532353035.roa
Signing time:             Tue 05 Mar 2024 18:12:23 +0000
ROA not before:           Tue 05 Mar 2024 18:07:23 +0000
ROA not after:            Tue 04 Mar 2025 18:12:23 +0000
asID:                     52505
IP address blocks:        2803:ee80::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:70:22:45:f9:c3:47:9a:f2:43:4c:12:77:e9:ad:46:1d:8c:af:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7
        Validity
            Not Before: Mar  5 18:07:23 2024 GMT
            Not After : Mar  4 18:12:23 2025 GMT
        Subject: CN=90F183533A8D2E20AE2CFD9E1BCF6984A58B3ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:4d:83:dc:0a:6c:83:55:f9:0b:8b:f5:67:
                    3f:e8:d8:fe:8f:8f:cc:4c:f1:36:43:5c:54:24:79:
                    fb:66:4f:b5:50:d8:3b:68:fc:7f:4f:e4:ce:c3:2b:
                    bc:30:37:9d:24:1e:64:02:cb:ee:25:d2:0b:14:94:
                    31:bc:be:d3:a8:9b:81:33:09:f7:fe:f3:41:b2:a6:
                    dc:c2:7f:e9:a8:66:8d:1a:74:e6:85:46:f1:96:45:
                    0a:1d:63:2e:6e:25:73:dc:09:46:7e:91:a0:b2:26:
                    70:06:c1:ee:dc:19:8d:2f:d8:b1:26:d0:b7:16:b5:
                    7b:b1:0a:6b:69:90:b1:07:a6:81:e7:87:75:de:2f:
                    d1:35:e4:ba:37:17:93:1c:ee:6d:b3:2d:60:3b:d9:
                    56:52:06:2e:79:ea:d9:98:4f:75:4f:a4:49:b1:d0:
                    97:9c:9c:bd:b8:68:5c:1b:5a:d8:4c:21:71:c7:eb:
                    a9:37:d2:e9:c9:48:77:4a:f5:44:e1:43:b6:50:a2:
                    91:0f:91:f8:a2:3b:65:3c:de:c6:ae:75:e3:16:34:
                    df:25:44:2e:81:4f:64:16:23:0d:2d:ff:83:67:7a:
                    a8:9e:b7:30:a0:f7:77:c3:bb:0b:77:a6:bb:6a:d9:
                    e7:d7:46:59:b5:d8:82:d3:b5:5e:e8:29:87:f1:f5:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F1:83:53:3A:8D:2E:20:AE:2C:FD:9E:1B:CF:69:84:A5:8B:3A:DF
            X509v3 Authority Key Identifier:
                keyid:48:2C:DE:CD:AA:77:5F:6F:DA:4C:78:CA:DB:B7:0F:B3:AC:99:36:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/482CDECDAA775F6FDA4C78CADBB70FB3AC9936A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48044E016419A1717271FACDC7E8A502FF765D56CDD622F0B18F766E5F5B3C98/0/323830333a656538303a3a2f33322d3634203d3e203532353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:25:ca:32:65:11:db:26:c9:ce:e2:a4:ab:6a:9f:d0:6c:60:
         84:66:3a:53:87:2b:e2:ac:57:f8:39:c8:14:40:62:2f:b0:8d:
         98:bf:15:8b:f8:94:41:64:91:5a:50:c1:a8:bb:01:40:55:67:
         16:a3:22:3a:ec:9b:92:d9:ac:53:49:c9:53:8c:a4:77:f9:d9:
         a6:6e:d9:95:e5:da:17:39:11:51:0c:16:64:54:75:92:b5:f8:
         03:14:fb:98:f6:60:ae:90:48:14:82:73:cd:45:d4:83:49:cc:
         4d:61:bd:79:30:32:53:31:5c:13:28:0d:f2:99:d0:08:93:1c:
         df:8b:d9:f7:33:9a:76:de:b1:ea:8d:f6:f5:9c:55:b6:5a:6f:
         f9:45:df:94:15:d5:bd:bb:c8:3d:80:9f:a1:3c:c8:c3:7f:18:
         24:a3:7a:df:bc:0b:93:47:93:ab:69:61:15:da:0c:26:57:ee:
         c1:d2:fa:a5:76:0d:a7:20:5b:1f:57:a6:fa:23:64:81:db:03:
         82:7b:33:8a:29:56:2c:ea:22:96:c6:78:52:99:21:a0:3d:ad:
         b9:75:e8:04:2b:c8:a4:04:78:f7:c1:53:e2:8a:3a:3d:bd:62:
         80:f1:c0:f0:37:b3:8f:35:7e:52:af:42:97:ee:a3:6c:99:01:
         db:9f:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----