Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/323830333a386432303a3a2f33322d3438203d3e203238303037.roa
File:                     323830333a386432303a3a2f33322d3438203d3e203238303037.roa (raw, json)
Hash identifier:          dbrH/kjlYbH5OQZFgHVpZNo/kMqrQ3raXlxHmLyG6ic=
Subject key identifier:   45:D7:5F:61:57:59:45:60:B1:B9:0C:85:D6:D2:50:2F:8C:50:27:74
Certificate issuer:       /CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
Certificate serial:       059AE45C31BF6864C9A41639E92851ECF328320A
Authority key identifier: F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/323830333a386432303a3a2f33322d3438203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 18:17:36 +0000
ROA not before:           Tue 05 Mar 2024 18:12:36 +0000
ROA not after:            Tue 04 Mar 2025 18:17:36 +0000
asID:                     28007
IP address blocks:        2803:8d20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9a:e4:5c:31:bf:68:64:c9:a4:16:39:e9:28:51:ec:f3:28:32:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
        Validity
            Not Before: Mar  5 18:12:36 2024 GMT
            Not After : Mar  4 18:17:36 2025 GMT
        Subject: CN=45D75F6157594560B1B90C85D6D2502F8C502774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:2c:8a:18:0b:b5:fd:62:23:96:2a:91:c9:
                    3c:d0:9b:61:ff:ab:c8:f3:72:b2:cb:b5:52:b6:d0:
                    49:cd:f2:d1:a9:2b:ae:7e:1e:77:fe:5c:ef:5b:eb:
                    99:88:6c:a4:2b:86:fb:e3:f0:8c:e5:75:e4:29:30:
                    b0:2e:72:0b:aa:29:4f:f9:e3:f3:f0:17:ad:ad:58:
                    1a:46:39:05:4b:fc:20:16:e5:1d:24:e8:bb:99:92:
                    c7:c6:1f:2b:e9:85:f6:ab:56:f8:8d:44:d2:a2:e4:
                    de:ac:bc:4c:df:a9:e6:37:2c:41:bc:4b:ca:44:b6:
                    db:d7:98:7e:06:0f:c7:fe:a0:cc:be:9b:30:19:4f:
                    ec:97:6e:5f:2e:bd:a2:0c:01:77:6a:80:ff:62:da:
                    93:1c:41:4c:03:60:b3:03:bb:bb:a6:0b:6e:cd:d6:
                    2b:dd:7b:0a:3b:5f:cf:93:9c:0b:13:f9:14:6c:2a:
                    d5:13:a0:40:82:70:58:5a:3d:3a:20:0b:c7:f3:b1:
                    09:f0:20:af:dc:eb:f8:fe:38:c9:39:17:8d:00:88:
                    7c:57:25:c9:db:69:8f:13:d6:18:94:d3:34:e2:d6:
                    fe:67:f0:67:9a:8a:f5:bc:1f:15:08:92:c5:85:3c:
                    81:b2:13:39:31:82:b3:05:a7:8b:5d:30:d0:17:7d:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D7:5F:61:57:59:45:60:B1:B9:0C:85:D6:D2:50:2F:8C:50:27:74
            X509v3 Authority Key Identifier:
                keyid:F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/323830333a386432303a3a2f33322d3438203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:50:c8:69:8b:0b:49:b0:60:e3:a7:ea:e5:8d:56:59:78:50:
         60:5c:99:fa:62:1a:df:a0:67:f8:45:2e:dc:94:11:e9:f7:f0:
         e2:39:53:ae:99:80:e3:38:04:26:bd:e7:9d:72:11:c2:95:85:
         34:3b:23:b6:81:93:77:cd:0d:c1:88:a8:9c:63:ed:3d:0d:cd:
         b6:40:59:36:88:71:f9:58:da:4c:28:18:a6:cf:7b:16:9f:7b:
         2d:8e:be:f2:68:dd:5b:99:00:77:a7:40:fd:18:bf:ea:2b:e8:
         4a:d4:7c:cc:31:f7:aa:ed:e9:04:89:76:5f:5d:72:7f:ce:f5:
         6d:76:e7:51:da:b7:8f:f9:a0:75:1d:0c:27:55:9f:8d:7b:de:
         d1:a8:e4:19:69:f2:20:74:62:63:22:5c:76:93:c5:77:ed:40:
         2b:e9:da:96:13:95:38:22:6e:cb:88:2c:6e:aa:d6:13:e4:a6:
         d7:ac:58:96:62:c5:72:4a:bf:af:f2:d5:b8:03:00:fa:50:e5:
         33:db:8e:de:3b:5c:ca:d3:d2:b6:2e:ed:08:3c:d6:62:b9:48:
         9d:22:a8:02:e9:2c:2d:79:59:cc:94:93:33:c7:6e:73:30:93:
         8d:16:86:a8:e1:ac:31:d5:89:d9:61:d2:25:b9:ad:84:d1:b2:
         89:86:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----