Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/323830303a3637303a3a2f33322d3332203d3e203532323830.roa
File:                     323830303a3637303a3a2f33322d3332203d3e203532323830.roa (raw, json)
Hash identifier:          hxxaBoK884HlLK7EOLMjo+WeYJD7M2SPtQ+zC2f8v9k=
Subject key identifier:   98:D6:FD:11:A5:00:C4:B9:08:C8:CC:F3:D9:A0:64:3A:95:20:60:D3
Certificate issuer:       /CN=2152913C2D5333E6F48DA45B339F5C285841364B
Certificate serial:       4575BE9A5EF3AE7FEEC2A7A08E0EF7E8A85D6ADD
Authority key identifier: 21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/323830303a3637303a3a2f33322d3332203d3e203532323830.roa
Signing time:             Tue 05 Mar 2024 17:45:46 +0000
ROA not before:           Tue 05 Mar 2024 17:40:46 +0000
ROA not after:            Tue 04 Mar 2025 17:45:46 +0000
asID:                     52280
IP address blocks:        2800:670::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:75:be:9a:5e:f3:ae:7f:ee:c2:a7:a0:8e:0e:f7:e8:a8:5d:6a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2152913C2D5333E6F48DA45B339F5C285841364B
        Validity
            Not Before: Mar  5 17:40:46 2024 GMT
            Not After : Mar  4 17:45:46 2025 GMT
        Subject: CN=98D6FD11A500C4B908C8CCF3D9A0643A952060D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:25:bf:da:34:be:10:02:96:df:f8:81:2d:a0:
                    76:dd:02:36:c2:db:e6:08:48:7a:76:c0:c7:2e:01:
                    2d:2e:5d:78:19:34:5e:5f:ac:5e:2b:61:c9:53:71:
                    ef:46:71:46:2d:66:d3:24:04:85:b0:33:53:ac:96:
                    96:11:3d:df:f7:b4:9b:2f:ed:f0:e3:84:d4:98:27:
                    69:3f:2b:a7:30:66:f3:af:42:b9:42:72:ca:b1:9b:
                    91:db:bc:7d:60:49:80:5f:ab:60:55:da:ec:53:2e:
                    d0:12:b1:fe:4d:8c:a3:73:60:45:31:a5:8f:37:1d:
                    dd:d0:a1:ce:56:69:09:e1:52:c2:b9:c5:fd:27:c5:
                    4b:ca:60:36:99:2b:e7:a8:96:be:c0:76:51:d8:9e:
                    21:de:37:12:f5:e1:cd:06:29:f6:2e:b6:99:19:3d:
                    16:4d:3e:2c:fb:34:16:24:38:55:00:66:9d:11:09:
                    14:f5:3c:34:c5:6d:28:e0:a9:52:ea:c3:40:08:db:
                    2a:0f:d8:ca:2a:32:55:72:e1:dd:a1:8c:9e:a7:da:
                    fc:48:38:4f:13:97:cc:8f:c1:e1:69:40:4c:15:57:
                    97:d6:26:80:a2:eb:e9:a3:4f:00:6f:26:c7:92:0c:
                    c9:c9:09:f7:1a:bf:6f:a8:fe:cb:d5:91:48:ed:b9:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:FD:11:A5:00:C4:B9:08:C8:CC:F3:D9:A0:64:3A:95:20:60:D3
            X509v3 Authority Key Identifier:
                keyid:21:52:91:3C:2D:53:33:E6:F4:8D:A4:5B:33:9F:5C:28:58:41:36:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/2152913C2D5333E6F48DA45B339F5C285841364B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2152913C2D5333E6F48DA45B339F5C285841364B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/714AA9E6363D040BAE08801005DD8A8335AE50D46DFF53B3359E46BCAF42F0D6/0/323830303a3637303a3a2f33322d3332203d3e203532323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:670::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:62:3e:b5:b2:fc:44:a3:9d:b0:90:63:87:a6:4e:45:c4:c7:
         2b:6c:86:e7:3f:6c:13:cb:64:8f:dc:c6:e1:2c:7a:15:a1:96:
         ad:4f:fb:23:dc:67:e5:a1:b8:43:af:46:47:7e:15:68:0f:0c:
         6b:4b:e3:50:7a:a2:30:19:d2:eb:b8:aa:2c:40:a2:dd:89:4c:
         8c:b0:20:47:c3:dd:26:53:7e:84:8b:d0:08:aa:85:ef:81:a9:
         e5:2b:dd:32:ba:fd:ff:0f:5c:a1:93:a6:80:c2:9b:ec:b8:b7:
         9d:36:30:0d:c9:82:aa:83:3c:95:50:de:c8:b3:10:13:c4:79:
         1d:5a:ba:01:2b:e5:24:cf:74:f9:2e:c7:00:56:3e:4e:c3:68:
         7f:75:a8:13:e0:b2:ca:cf:87:cd:8a:34:93:30:ab:89:14:87:
         d9:6a:e3:cf:b5:44:73:97:46:f3:42:bb:69:18:9a:65:d4:e4:
         04:36:60:bc:af:3a:7a:a6:99:9e:65:3b:74:d9:9d:9f:0c:df:
         86:5e:6c:7e:01:34:df:7c:77:b9:f6:10:1a:a0:b8:15:89:67:
         f6:89:2a:8b:b9:c7:7e:52:64:d2:78:1c:72:a3:0c:0a:76:84:
         bd:8a:b4:5a:4c:0b:4e:25:25:10:0a:5c:d5:00:5c:d0:9b:b3:
         24:e5:a3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----