Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/323830333a326332303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a326332303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          hkWxBSYJf8LHZSp9JhFxTZDBLZH2Z1dYVubeVDeYTvo=
Subject key identifier:   83:57:82:ED:0A:DE:76:B1:EE:14:00:CC:00:FF:8E:5F:36:5D:9B:25
Certificate issuer:       /CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
Certificate serial:       4C8392E312B5D948FB08AE5C38D1A482651C52D0
Authority key identifier: F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/323830333a326332303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:48:31 +0000
ROA not before:           Tue 05 Mar 2024 17:43:31 +0000
ROA not after:            Tue 04 Mar 2025 17:48:31 +0000
asID:                     52468
IP address blocks:        2803:2c20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:83:92:e3:12:b5:d9:48:fb:08:ae:5c:38:d1:a4:82:65:1c:52:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
        Validity
            Not Before: Mar  5 17:43:31 2024 GMT
            Not After : Mar  4 17:48:31 2025 GMT
        Subject: CN=835782ED0ADE76B1EE1400CC00FF8E5F365D9B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:1b:68:fe:f7:b6:98:8b:dd:d8:ef:43:c9:
                    d4:d6:a1:f7:27:dc:88:08:0c:26:ff:6d:67:8f:e7:
                    ee:8a:1d:3c:f8:d9:5f:6d:55:29:a5:1e:fb:7e:9d:
                    6e:aa:e0:e3:c3:9e:43:a6:dc:dc:4b:5b:6f:d2:dc:
                    12:2f:f0:aa:50:41:1f:35:64:11:49:86:a3:99:c7:
                    01:7b:78:5e:f1:96:f8:d2:c9:d8:b7:ea:36:32:9e:
                    a2:f3:88:02:15:23:ad:19:c1:90:41:df:8e:99:c2:
                    91:55:a6:63:94:66:22:ed:2d:49:a3:c1:f4:81:ac:
                    9f:78:9b:41:fd:69:89:00:3e:11:5c:1f:7f:cb:fd:
                    65:33:9e:22:2d:da:20:37:4d:fd:91:b6:04:7d:d0:
                    2e:7b:49:97:48:9e:69:bc:a7:cc:a6:fd:93:e3:48:
                    c3:a4:86:d0:d1:e2:ac:8d:32:b3:c4:0a:44:33:f9:
                    8f:b7:ab:60:97:84:b5:7c:68:37:87:4f:00:ea:57:
                    87:f2:76:83:d7:01:e9:60:63:3d:49:b6:4b:32:bc:
                    f2:12:76:3e:ee:81:b3:06:a8:c9:f9:52:26:91:13:
                    8d:ec:53:20:c6:6e:81:6d:f8:a9:aa:18:7d:80:e5:
                    a1:73:d7:55:db:6e:e1:ec:5c:d5:b6:df:07:fa:a6:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:57:82:ED:0A:DE:76:B1:EE:14:00:CC:00:FF:8E:5F:36:5D:9B:25
            X509v3 Authority Key Identifier:
                keyid:F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/323830333a326332303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:97:f9:e0:d2:d8:10:2b:18:72:ab:a2:36:f2:90:dc:f2:35:
         ab:fb:9d:15:ec:be:7b:9b:02:d5:3d:67:01:d4:b9:e7:2a:78:
         74:fb:a3:29:33:cc:08:de:cb:bd:30:ca:6b:80:70:7c:08:69:
         42:0b:bb:54:b1:ba:3f:50:39:b4:5d:66:6e:9f:35:10:91:b8:
         87:da:ce:f1:ac:0d:de:42:ae:62:2f:49:57:b4:fb:61:e5:e2:
         53:d0:be:4e:91:b7:61:a0:fa:3e:1b:db:fa:e6:f9:31:f7:f6:
         f4:75:09:75:c1:10:3d:09:bd:7e:34:49:87:8e:4a:be:3c:22:
         0c:c0:e5:a5:af:9f:54:ac:30:f0:bd:8d:51:1b:69:01:6e:8c:
         6d:7d:b9:0c:1e:40:a4:f8:e2:fc:5e:6c:6a:b9:e6:f2:f8:03:
         eb:54:ba:7c:b4:9c:c8:b9:9c:58:b7:17:40:24:aa:5f:dc:fa:
         fd:23:17:d8:a0:8d:02:50:c8:c2:18:fb:a1:ac:c8:ef:41:ea:
         1f:ea:32:db:e7:82:d4:31:f6:32:8b:56:00:35:2d:b2:7f:3e:
         80:16:35:88:74:e2:43:bb:41:24:72:67:f9:c6:2e:5c:57:36:
         a3:ed:a5:18:52:73:e0:98:dd:ae:ae:d1:ff:e3:63:88:e3:f1:
         65:3b:cd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----