Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3a2f33322d3332203d3e203532323836.roa
File:                     323830333a626130303a3a2f33322d3332203d3e203532323836.roa (raw, json)
Hash identifier:          dACBV2armpw1SaHq1miGYvlwkGj36Qs5gkeOWKExWjw=
Subject key identifier:   A2:27:8C:E9:EF:2F:E3:54:48:A4:68:0C:3B:3A:D4:2C:8D:DD:00:81
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       2BCECB6257C19F796B433B52015D6D6F7146A5CA
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3a2f33322d3332203d3e203532323836.roa
Signing time:             Tue 05 Mar 2024 17:54:33 +0000
ROA not before:           Tue 05 Mar 2024 17:49:33 +0000
ROA not after:            Tue 04 Mar 2025 17:54:33 +0000
asID:                     52286
IP address blocks:        2803:ba00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ce:cb:62:57:c1:9f:79:6b:43:3b:52:01:5d:6d:6f:71:46:a5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Mar  5 17:49:33 2024 GMT
            Not After : Mar  4 17:54:33 2025 GMT
        Subject: CN=A2278CE9EF2FE35448A4680C3B3AD42C8DDD0081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:b0:5c:82:7e:43:5a:4e:db:7c:a3:2e:4b:
                    83:25:bd:1a:a7:cf:7a:1f:ea:e5:61:52:d7:75:29:
                    01:1a:5e:dc:56:75:c4:72:7f:43:d7:ba:90:5d:25:
                    8c:dc:08:36:1c:cc:3e:45:90:46:6a:08:a5:ee:28:
                    2b:be:46:63:41:36:93:f8:fb:35:d1:3e:72:7d:fc:
                    10:28:e8:5f:73:64:a3:fa:4b:83:e1:f3:20:66:8f:
                    0e:fb:51:2e:05:14:79:45:10:dc:06:1c:93:72:80:
                    48:2b:2f:fb:68:dc:e5:d7:28:87:51:9f:dc:d5:8d:
                    9c:9c:8b:d4:d9:bf:67:4b:3a:a3:b4:f5:86:f1:da:
                    66:18:a5:98:b1:61:bd:c6:c4:30:f3:74:b6:6a:11:
                    34:b9:7d:1b:e5:67:49:86:80:6e:aa:95:21:9e:9a:
                    9d:80:c4:44:40:ec:7d:16:5e:f4:70:46:35:c0:fc:
                    91:59:f0:16:41:86:f1:56:4f:8e:0d:34:b8:af:66:
                    57:22:a9:17:09:83:6f:0d:39:ed:14:5a:21:fd:2d:
                    bd:79:15:21:37:ed:fd:20:36:c5:7b:a1:16:08:49:
                    4f:00:5b:f6:15:15:e0:b1:ab:b0:a7:f4:a3:e0:b3:
                    d9:f5:71:54:36:82:38:66:23:a8:c5:cf:f7:e4:b0:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:27:8C:E9:EF:2F:E3:54:48:A4:68:0C:3B:3A:D4:2C:8D:DD:00:81
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/323830333a626130303a3a2f33322d3332203d3e203532323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba00::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:ef:3f:6a:42:70:e1:9d:b6:78:86:8f:b8:42:bb:d3:62:
         f2:ab:5c:3b:e5:37:42:1c:df:a0:ee:bd:62:b4:0e:26:70:38:
         3a:92:15:22:0e:d7:a2:34:fe:ee:53:9b:7e:c8:fb:eb:04:f3:
         54:ac:d4:c5:e5:fc:1a:64:f3:c7:ea:4d:78:58:00:81:70:2f:
         4a:f3:01:e2:32:68:18:53:b9:ce:38:4a:fa:6b:76:59:bb:db:
         4d:9f:47:6a:42:93:02:5f:f6:d9:d4:95:11:cd:1b:46:1d:1f:
         6c:19:b0:43:b7:3b:63:67:38:01:e2:6e:f3:45:cc:b4:8d:da:
         71:3d:cf:38:43:77:63:d1:e1:75:66:5d:8d:44:08:d2:38:76:
         37:36:f0:aa:f9:fd:67:94:6f:af:f9:02:d3:f2:b0:b2:0f:d9:
         d5:0d:4c:aa:a9:c6:8e:34:f3:37:f9:6f:da:68:cb:ba:58:74:
         54:b7:92:f1:01:43:9b:26:cc:4f:8a:f3:f9:52:f5:92:8d:fe:
         54:06:11:62:b7:ba:63:39:1e:ef:a8:b4:0f:9d:58:f3:e9:21:
         65:17:57:17:0e:e1:03:dc:9d:1c:6b:d0:e7:71:dc:47:e9:2b:
         09:9e:3c:00:f4:25:fb:7a:d6:69:6f:94:4b:bd:59:a9:e4:4c:
         47:28:62:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----