Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/323830333a336438303a3a2f33322d3438203d3e203631343837.roa
File:                     323830333a336438303a3a2f33322d3438203d3e203631343837.roa (raw, json)
Hash identifier:          bGk7IxfC7tVRmqyut/prvsMH8LNYiBve6rnS0Sgi4uU=
Subject key identifier:   D1:E0:9D:52:3F:92:33:28:B2:E0:61:C3:21:98:D7:7A:E5:DE:29:05
Certificate issuer:       /CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
Certificate serial:       06FB32B991052FFD139C19883E917D2C99980619
Authority key identifier: 1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/323830333a336438303a3a2f33322d3438203d3e203631343837.roa
Signing time:             Tue 05 Mar 2024 17:47:06 +0000
ROA not before:           Tue 05 Mar 2024 17:42:06 +0000
ROA not after:            Tue 04 Mar 2025 17:47:06 +0000
asID:                     61487
IP address blocks:        2803:3d80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fb:32:b9:91:05:2f:fd:13:9c:19:88:3e:91:7d:2c:99:98:06:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
        Validity
            Not Before: Mar  5 17:42:06 2024 GMT
            Not After : Mar  4 17:47:06 2025 GMT
        Subject: CN=D1E09D523F923328B2E061C32198D77AE5DE2905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:88:26:6a:f9:10:dd:aa:3f:03:49:10:a5:
                    b3:84:7f:f4:a2:18:29:3c:99:d0:12:f9:ab:34:7f:
                    16:86:61:91:fb:c3:03:71:5f:e5:0e:96:84:2a:d7:
                    f8:c8:9f:6e:4d:6d:d5:b2:94:6b:9b:3a:29:0c:6b:
                    ff:11:40:65:52:93:15:4e:f6:f1:08:a8:e5:92:d0:
                    a4:8c:53:74:a5:26:35:2e:29:49:1c:49:a3:e8:2f:
                    6c:a2:6b:6f:e7:f5:c3:3b:40:70:e4:65:b2:93:4c:
                    95:95:55:6c:66:b0:1c:6f:62:f8:6d:b3:e0:e2:00:
                    c1:c8:1f:51:80:b6:b1:5f:79:f0:64:6e:34:dd:c4:
                    9b:07:59:b7:2a:79:61:cb:d6:b9:f3:af:61:8e:d3:
                    7c:7f:63:d4:c8:67:a2:50:f4:0a:f9:d3:c0:c4:15:
                    e2:70:4c:3e:14:6d:73:77:b5:f8:0e:9f:a6:8c:a5:
                    c3:d1:b8:56:1a:37:be:da:bd:fb:31:39:6d:8d:10:
                    16:52:71:75:50:c3:1d:13:a1:38:3e:55:df:9f:94:
                    63:9c:1e:70:5d:be:25:82:69:f7:c4:ba:0e:a2:a3:
                    fd:ce:10:a6:c8:9a:17:79:42:1e:ed:b7:cb:de:48:
                    d7:01:d3:db:6e:9f:be:20:95:78:8d:66:6c:ed:10:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E0:9D:52:3F:92:33:28:B2:E0:61:C3:21:98:D7:7A:E5:DE:29:05
            X509v3 Authority Key Identifier:
                keyid:1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/323830333a336438303a3a2f33322d3438203d3e203631343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:c5:5f:43:06:7e:88:7e:ac:85:3d:0d:83:54:d9:f7:4b:11:
         3c:00:a7:3c:3d:f4:04:92:ae:74:a7:d6:ac:f0:28:e6:2c:34:
         5d:49:c9:d5:42:21:3c:cf:2f:bb:2a:a2:02:02:f0:9e:a9:f5:
         11:89:00:a5:57:d3:45:ac:cf:d9:42:8f:d2:5a:83:cc:44:f9:
         2e:f2:d4:80:8a:63:69:1d:c9:45:d9:6a:5f:2e:33:2c:48:7d:
         95:59:42:08:d4:b2:eb:6d:28:74:bd:7c:f3:70:9e:b9:b9:a8:
         ae:c9:31:53:ed:ef:8f:fd:7c:f6:83:4b:87:b6:ef:23:91:64:
         33:76:5b:21:a4:93:db:ae:8f:4d:80:73:3d:a4:9a:f8:19:2d:
         37:e0:e3:0a:74:84:37:05:ce:5b:58:54:d0:b8:31:74:4c:c7:
         cc:49:f6:43:dd:aa:5c:53:33:f4:a3:f8:b8:c2:ff:07:61:f9:
         6e:3d:e3:b9:3a:8a:ec:3b:2e:d7:85:9f:64:43:f1:18:74:40:
         cb:49:30:81:20:4e:fa:60:ff:c2:62:3a:30:a5:ba:b8:c1:69:
         da:f5:02:58:c2:40:b9:1c:e9:08:22:25:a2:5c:9b:f7:c4:91:
         cb:f2:f0:9b:5d:b4:de:5b:c2:e4:68:cc:05:b9:86:77:ab:68:
         a3:7a:cf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----