Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/323830333a313932303a3a2f33322d3332203d3e20323636363731.roa
File:                     323830333a313932303a3a2f33322d3332203d3e20323636363731.roa (raw, json)
Hash identifier:          6r357ja9WEunitWMyuI8A0ylayS7HC3usmMFbyiM+fc=
Subject key identifier:   83:34:FA:35:56:BE:4A:CE:71:9D:4B:71:51:68:41:7E:CA:5E:D9:B7
Certificate issuer:       /CN=49B1A7F3F084BD80E21A4EEBC75931ED9C458056
Certificate serial:       5B309B2762B82C23A329397F5D4770C68E014826
Authority key identifier: 49:B1:A7:F3:F0:84:BD:80:E2:1A:4E:EB:C7:59:31:ED:9C:45:80:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/323830333a313932303a3a2f33322d3332203d3e20323636363731.roa
Signing time:             Tue 05 Mar 2024 18:09:03 +0000
ROA not before:           Tue 05 Mar 2024 18:04:03 +0000
ROA not after:            Tue 04 Mar 2025 18:09:03 +0000
asID:                     266671
IP address blocks:        2803:1920::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:30:9b:27:62:b8:2c:23:a3:29:39:7f:5d:47:70:c6:8e:01:48:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49B1A7F3F084BD80E21A4EEBC75931ED9C458056
        Validity
            Not Before: Mar  5 18:04:03 2024 GMT
            Not After : Mar  4 18:09:03 2025 GMT
        Subject: CN=8334FA3556BE4ACE719D4B715168417ECA5ED9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:77:2b:4d:d8:dd:13:36:0a:e5:c6:db:15:9f:
                    88:19:26:8d:d3:f4:8e:09:1e:24:a5:32:7c:c0:ce:
                    e2:b3:32:bb:79:1f:c9:a3:57:64:a7:28:80:02:3f:
                    31:a9:79:be:b0:f5:3e:27:7c:8e:a5:21:2b:28:8d:
                    77:77:8e:9f:67:64:b5:b4:f1:8d:6c:4f:16:a4:bb:
                    06:eb:94:6e:07:c3:8a:7a:a7:94:53:f3:6c:65:7d:
                    b6:fe:f1:58:53:2e:06:20:b8:df:c3:cd:2b:a5:88:
                    36:0c:a2:6a:af:6c:55:e3:1d:5e:8c:59:d1:4e:19:
                    0f:27:0a:4e:07:f6:79:ff:56:49:d8:33:9a:ca:00:
                    a2:da:27:fc:66:de:b1:29:d2:43:30:c2:2d:08:09:
                    ec:1f:7e:dd:2c:67:81:3f:b6:7c:f0:e1:8c:0c:0b:
                    c2:77:66:18:00:11:42:ef:60:7f:6e:34:4d:b2:14:
                    ed:0d:51:b3:a4:04:3b:ff:a4:f4:ff:24:c5:67:f0:
                    d5:36:1c:44:a5:9f:80:1f:10:7b:cc:fc:77:f4:93:
                    81:8c:1e:29:d6:30:0e:2c:67:da:f7:b9:eb:ff:30:
                    4d:0b:8d:f1:43:78:c3:ee:1e:1f:ef:e7:ad:58:0b:
                    5d:7c:cf:85:eb:cf:33:3e:47:fc:37:a5:df:3c:ff:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:34:FA:35:56:BE:4A:CE:71:9D:4B:71:51:68:41:7E:CA:5E:D9:B7
            X509v3 Authority Key Identifier:
                keyid:49:B1:A7:F3:F0:84:BD:80:E2:1A:4E:EB:C7:59:31:ED:9C:45:80:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/323830333a313932303a3a2f33322d3332203d3e20323636363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:81:68:8d:d9:f8:58:b6:45:88:7a:70:f6:c3:79:b8:69:58:
         bd:f6:87:0c:8d:14:fd:5d:32:74:18:cb:c4:92:00:d7:cb:8e:
         cf:df:68:85:61:2e:47:ea:0d:f4:3f:57:89:c0:f6:e2:02:19:
         0d:84:b6:0e:6e:ea:27:11:db:45:65:1a:02:9c:65:0c:35:1a:
         ab:4b:ce:67:00:75:0b:0b:c5:1e:74:fe:b3:2a:21:16:2e:47:
         fa:82:2a:39:b7:ad:b1:b8:d8:47:41:37:1e:d9:eb:fe:19:dc:
         53:3e:e0:75:06:82:80:1e:fd:40:05:78:01:e8:08:ee:17:a2:
         b6:be:b4:86:ca:f3:83:17:63:12:7a:50:78:11:e7:fd:f6:8f:
         fd:84:e7:4d:1d:71:2f:cc:78:d1:77:07:b1:6a:56:01:34:7e:
         b9:59:ed:ac:ed:49:2c:3d:a4:17:8a:ba:ba:41:76:55:c4:e1:
         1b:95:21:94:e0:3b:74:95:69:c7:5c:2b:df:0d:26:cb:36:fa:
         82:f2:2f:bb:73:4d:0f:b5:37:dd:ce:26:24:12:4d:c2:0a:c1:
         19:66:f6:b6:a7:3f:55:9c:0c:39:21:5b:71:9d:04:ed:36:4f:
         b7:e4:09:73:64:df:36:ae:20:a3:32:e5:0d:8c:17:de:e4:fd:
         cb:11:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----