Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E8959C48CF78DA1C5986CE19483B3999C87410392012D177A466C9BBEC0A9C9/0/323830333a393135303a3a2f33322d3438203d3e20323733383234.roa
File:                     323830333a393135303a3a2f33322d3438203d3e20323733383234.roa (raw, json)
Hash identifier:          4X/gS4je2lvBC/0S76f8mwPPPbBKdTTGaZETnc2ll48=
Subject key identifier:   AC:C3:1C:D1:53:68:D0:BA:ED:8B:E5:00:36:30:4F:0D:A6:0C:BF:4B
Certificate issuer:       /CN=B1F7FB813918FECA38E34D6D565B2C32AC83EE2A
Certificate serial:       3737AA2E9FA57783CB60752F56498F9539A959E9
Authority key identifier: B1:F7:FB:81:39:18:FE:CA:38:E3:4D:6D:56:5B:2C:32:AC:83:EE:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1F7FB813918FECA38E34D6D565B2C32AC83EE2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E8959C48CF78DA1C5986CE19483B3999C87410392012D177A466C9BBEC0A9C9/0/323830333a393135303a3a2f33322d3438203d3e20323733383234.roa
Signing time:             Wed 05 Jun 2024 00:10:00 +0000
ROA not before:           Wed 05 Jun 2024 00:05:00 +0000
ROA not after:            Wed 04 Jun 2025 00:10:00 +0000
asID:                     273824
IP address blocks:        2803:9150::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:37:aa:2e:9f:a5:77:83:cb:60:75:2f:56:49:8f:95:39:a9:59:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F7FB813918FECA38E34D6D565B2C32AC83EE2A
        Validity
            Not Before: Jun  5 00:05:00 2024 GMT
            Not After : Jun  4 00:10:00 2025 GMT
        Subject: CN=ACC31CD15368D0BAED8BE50036304F0DA60CBF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:b2:d4:e7:b1:f4:c7:31:f6:86:2d:43:ca:
                    04:9f:e0:6d:e0:84:80:1b:76:ec:d5:22:db:ed:91:
                    26:48:70:1c:9d:c5:96:2c:a2:e1:8f:be:74:8e:c6:
                    17:b5:e5:14:2b:63:1f:d7:16:79:7c:bd:6e:05:e3:
                    8f:97:21:85:ad:a2:11:af:b5:e0:18:23:db:a7:e5:
                    9d:0b:05:ce:d1:a7:36:0e:11:3e:ea:f5:31:bc:9b:
                    a1:df:4d:04:0e:3d:ae:15:ca:19:9a:d6:63:f7:a8:
                    0e:79:30:74:f8:53:e1:a8:67:c4:d6:a0:97:4e:ba:
                    08:f6:a7:81:05:e8:13:5d:17:9f:dc:e6:52:0b:36:
                    0a:db:68:b3:1c:53:7c:d3:74:c4:13:01:2b:6c:1f:
                    f9:fd:04:6a:27:9b:98:cd:5f:a9:5e:9c:7e:7b:ae:
                    c6:78:e3:e5:7c:de:a0:05:32:af:e4:c2:5e:45:23:
                    6e:bf:c3:64:58:d7:3a:ce:e3:c9:e6:e1:6f:c0:de:
                    07:dd:38:e0:1f:1d:ca:b3:1d:88:4e:48:e0:26:f7:
                    f2:ee:f1:21:a0:7c:41:df:51:a9:90:4b:d8:da:a1:
                    83:e4:54:b6:ae:66:31:57:bb:94:b8:71:67:5b:ff:
                    31:f6:5e:53:7d:95:dc:98:6a:b6:10:e2:1d:44:04:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C3:1C:D1:53:68:D0:BA:ED:8B:E5:00:36:30:4F:0D:A6:0C:BF:4B
            X509v3 Authority Key Identifier:
                keyid:B1:F7:FB:81:39:18:FE:CA:38:E3:4D:6D:56:5B:2C:32:AC:83:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E8959C48CF78DA1C5986CE19483B3999C87410392012D177A466C9BBEC0A9C9/0/B1F7FB813918FECA38E34D6D565B2C32AC83EE2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1F7FB813918FECA38E34D6D565B2C32AC83EE2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E8959C48CF78DA1C5986CE19483B3999C87410392012D177A466C9BBEC0A9C9/0/323830333a393135303a3a2f33322d3438203d3e20323733383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9150::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:47:dc:36:fc:52:88:40:9f:5a:5c:cc:a3:e2:9d:33:25:cb:
         ef:c2:03:67:e6:d5:a1:be:de:4e:56:7c:f2:bd:1d:a0:bc:5b:
         03:dc:91:9f:53:39:7c:d7:fc:b2:3e:0f:00:09:89:10:d2:ff:
         44:3c:27:a8:65:75:07:fc:bd:5b:65:5b:84:bd:58:0b:b2:eb:
         f3:00:04:b0:a9:c7:97:86:f2:d7:be:89:a7:00:f0:b0:e3:f3:
         07:b8:d8:ec:ea:8f:ec:56:68:95:b1:e9:4c:5d:df:d5:d8:8b:
         00:84:8e:f5:57:c0:79:3e:dc:4d:63:63:91:12:34:ab:45:3c:
         86:c7:77:0c:8e:25:7d:21:c0:c4:3a:2d:ad:73:79:dd:72:25:
         33:17:20:4f:e6:92:7e:48:7b:e7:63:04:e6:04:bc:95:97:73:
         19:93:cd:1d:68:5f:45:1c:1f:b6:b3:d6:4b:75:82:aa:0d:28:
         43:fa:6b:2a:6c:65:b7:e7:31:a4:e4:22:10:73:5e:07:67:9c:
         77:83:86:8b:0c:f7:5a:fe:b8:db:65:10:68:a7:cd:7b:a6:07:
         3a:6b:4b:09:b8:f1:1d:52:1a:d3:a3:51:a7:cf:aa:70:36:31:
         9c:c4:eb:6e:6e:e5:82:e1:fc:d0:ed:00:0d:d7:35:d3:8b:77:
         7a:92:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----