Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a613a3a2f34382d3438203d3e203532333932.roa
File:                     323830333a623130303a613a3a2f34382d3438203d3e203532333932.roa (raw, json)
Hash identifier:          tVNSObXvIF9vnDppsj6H26Ybk6gxPSJ1fqYJM7tlAs4=
Subject key identifier:   67:6D:A8:71:6D:F4:0A:3C:C4:68:FF:6C:5D:CC:8C:2E:B5:32:89:34
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       6586789F7832DAAB6DB0F0B4674BA1040C110B48
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a613a3a2f34382d3438203d3e203532333932.roa
Signing time:             Tue 20 Aug 2024 21:20:00 +0000
ROA not before:           Tue 20 Aug 2024 21:15:00 +0000
ROA not after:            Tue 19 Aug 2025 21:20:00 +0000
asID:                     52392
IP address blocks:        2803:b100:a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:86:78:9f:78:32:da:ab:6d:b0:f0:b4:67:4b:a1:04:0c:11:0b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Aug 20 21:15:00 2024 GMT
            Not After : Aug 19 21:20:00 2025 GMT
        Subject: CN=676DA8716DF40A3CC468FF6C5DCC8C2EB5328934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:58:8a:4c:b1:0d:51:0c:d8:66:b0:23:0a:73:
                    c0:4a:34:bc:8d:3f:77:8f:d9:66:8e:46:39:69:b2:
                    1b:cb:6c:e1:f3:45:58:48:a3:66:34:cf:4a:47:fe:
                    ba:28:0b:50:f4:a3:60:9f:3f:cb:cf:ac:5c:46:65:
                    ba:5a:37:7a:06:45:e8:a3:97:5b:ac:32:46:6b:6f:
                    93:b8:a8:46:b3:d5:49:65:89:e5:94:d7:ec:65:b9:
                    98:0a:64:c9:1f:46:74:19:a5:31:7b:92:82:dc:81:
                    b3:59:43:d6:d0:d2:88:10:d1:2e:59:af:83:8a:dd:
                    a0:5c:e3:6c:63:b1:d2:3a:9d:98:8e:12:cd:47:12:
                    0e:4c:1b:50:bb:fe:45:fb:88:e6:80:57:34:46:fc:
                    9b:c8:f4:8c:a5:53:c7:18:a2:11:39:02:8f:2a:f4:
                    40:de:cc:80:a4:69:d1:6d:29:08:4d:02:23:25:c2:
                    6f:19:d2:8d:64:23:3f:cc:30:a1:88:f7:04:e2:9d:
                    55:cd:d5:2e:e9:28:02:b6:66:5b:cf:84:3b:63:ff:
                    f3:a5:8a:fe:50:c4:00:b6:cb:a7:7d:e5:ee:58:78:
                    9a:81:43:f4:f7:c2:50:2c:2f:b5:5e:7b:ea:26:dc:
                    8b:96:ea:55:c0:d8:af:59:98:b9:7b:07:0c:12:2d:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:A8:71:6D:F4:0A:3C:C4:68:FF:6C:5D:CC:8C:2E:B5:32:89:34
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/323830333a623130303a613a3a2f34382d3438203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b100:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:54:cd:f7:40:26:06:a8:83:86:a1:58:d6:5c:0b:98:c3:87:
         2f:08:a5:bf:8f:80:bf:20:c5:ef:bf:18:e8:9f:19:a6:62:55:
         9f:e7:d2:b2:46:a0:dd:c6:72:f1:c5:9f:8e:77:c4:58:c5:da:
         f0:f1:51:46:c2:3f:53:7d:bf:c2:b7:95:ee:70:52:d9:58:d3:
         9a:92:79:21:c7:26:5a:24:d3:4b:ab:36:fd:3b:30:58:bb:a1:
         0b:2e:cb:db:33:d8:c2:d6:3c:3a:ec:b3:dc:22:a2:c0:b1:fd:
         a1:cf:20:ad:66:32:7b:f1:0d:69:48:10:f1:75:9b:58:39:07:
         30:f1:02:b1:ff:29:3d:f6:77:14:11:cd:4b:bb:67:6b:e2:17:
         d6:4f:3d:7c:e6:29:a1:15:83:6e:1f:c9:89:24:10:9e:4e:37:
         90:a1:e0:9a:7e:bf:a9:be:e1:69:2e:43:2e:ed:27:d9:f6:7e:
         99:e7:08:c1:8a:6c:b8:fb:be:34:27:52:3a:98:22:be:dd:53:
         e5:3a:27:0d:6c:d3:9f:b0:e5:04:aa:3f:2a:d9:96:21:ad:de:
         a0:50:db:2d:69:6a:66:2b:20:6a:b2:76:36:0f:50:4c:d2:d7:
         f9:fd:c3:44:f3:ea:0c:58:7d:1f:42:e1:99:fc:f1:fb:e3:f0:
         14:4b:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----