Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/323830333a343034303a3a2f33322d3438203d3e20323633383030.roa
File:                     323830333a343034303a3a2f33322d3438203d3e20323633383030.roa (raw, json)
Hash identifier:          7SirRc8dxSGS7f8d/wS3jXtDCLq+LZq0zHjaurbcNXc=
Subject key identifier:   A7:5D:E4:12:41:4C:D3:13:70:F6:E5:70:BB:27:9E:9B:72:42:8B:63
Certificate issuer:       /CN=F27FE8F5D134BDBCB727C1FA5EA363B4B589267E
Certificate serial:       14DD319760631E5EA9962AC9DFABCF78B370DDA7
Authority key identifier: F2:7F:E8:F5:D1:34:BD:BC:B7:27:C1:FA:5E:A3:63:B4:B5:89:26:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/323830333a343034303a3a2f33322d3438203d3e20323633383030.roa
Signing time:             Tue 05 Mar 2024 18:17:23 +0000
ROA not before:           Tue 05 Mar 2024 18:12:23 +0000
ROA not after:            Tue 04 Mar 2025 18:17:23 +0000
asID:                     263800
IP address blocks:        2803:4040::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:dd:31:97:60:63:1e:5e:a9:96:2a:c9:df:ab:cf:78:b3:70:dd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27FE8F5D134BDBCB727C1FA5EA363B4B589267E
        Validity
            Not Before: Mar  5 18:12:23 2024 GMT
            Not After : Mar  4 18:17:23 2025 GMT
        Subject: CN=A75DE412414CD31370F6E570BB279E9B72428B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:95:4b:72:87:7b:b2:14:f4:4d:fd:3c:78:d4:
                    e5:97:97:f8:05:55:b0:9b:41:ce:82:3b:24:53:ca:
                    54:38:65:a3:02:ca:47:4a:61:24:05:31:8e:d6:e9:
                    d3:75:6b:2f:29:f5:24:7e:08:5e:18:14:8f:07:19:
                    bd:d6:fc:ea:31:d0:72:3f:06:90:ee:7d:f1:be:72:
                    20:de:55:da:ea:05:de:c0:3e:8e:98:a8:97:a5:a3:
                    a7:6f:07:17:58:15:be:8b:2e:e0:28:84:b4:7f:23:
                    c1:8d:0e:3b:98:73:a0:d7:61:b8:45:bc:0d:71:90:
                    7b:b8:9f:10:b9:f3:91:b7:a5:f1:8b:d6:30:3d:c2:
                    38:ef:78:26:68:68:89:d2:a3:60:77:8e:b1:0c:6d:
                    45:53:bb:14:ba:76:e9:08:41:95:7d:b6:0f:63:56:
                    9b:d9:6a:92:e6:a2:c5:31:69:b7:58:25:18:f3:9b:
                    15:44:8a:0f:23:a9:90:39:6a:ab:5c:4d:ff:a9:a2:
                    bf:a0:d6:e9:c4:ce:73:e3:bc:9a:2f:90:9d:c9:62:
                    9d:fc:24:a2:51:e5:ff:da:5a:e2:a5:d6:09:d9:7e:
                    50:87:6c:d7:19:af:85:93:da:82:16:ec:ce:43:ab:
                    4c:9d:fd:dc:d7:ff:e0:a8:47:6c:60:26:dc:bc:51:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5D:E4:12:41:4C:D3:13:70:F6:E5:70:BB:27:9E:9B:72:42:8B:63
            X509v3 Authority Key Identifier:
                keyid:F2:7F:E8:F5:D1:34:BD:BC:B7:27:C1:FA:5E:A3:63:B4:B5:89:26:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F27FE8F5D134BDBCB727C1FA5EA363B4B589267E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48CFB26AC27A17BFC28C29A05A939D7C38B550A25B9D6FAE345819CE34D49516/0/323830333a343034303a3a2f33322d3438203d3e20323633383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4040::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:0e:de:1a:25:ab:f2:74:74:8c:be:f6:5d:c5:6b:44:e2:
         e5:4e:88:9d:5f:57:3a:d1:5f:ff:17:7e:fc:7c:53:00:1c:5c:
         05:de:44:c8:d5:5f:6c:20:bb:15:f0:55:67:2b:6e:91:4c:86:
         73:a8:63:8e:b1:f6:27:04:a4:b7:ad:8b:d2:4a:7c:a3:31:24:
         b5:57:6f:da:aa:c1:fa:60:c4:2c:ec:e8:8e:cd:80:86:6a:e9:
         47:19:df:ea:f5:5a:30:0f:c9:70:32:be:24:50:9e:8f:4e:77:
         10:91:f1:68:61:dc:5b:67:3b:35:56:82:b6:cc:f3:de:c1:24:
         01:38:7a:72:b8:bc:01:a9:3a:53:f4:1b:c0:6d:3e:dd:41:5f:
         72:1c:51:62:0b:98:bb:9c:96:e8:ac:fc:2d:62:7c:a2:72:36:
         72:47:ba:80:f8:f1:fb:3c:d5:f1:93:fe:31:5c:89:08:03:8d:
         8e:98:aa:12:18:17:07:18:ec:1c:82:5b:7b:2f:53:da:59:73:
         28:8a:d4:65:ab:eb:e5:e3:3a:85:de:8f:b2:5a:45:39:0c:a1:
         40:54:b8:88:8c:ff:33:9c:a6:de:14:89:0a:b4:d6:39:63:31:
         cc:a3:72:35:1d:57:10:73:8e:16:47:43:da:10:0d:dc:56:78:
         24:37:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----