Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a3a2f33382d3430203d3e203134353232.roa
File:                     323830303a3961333a3a2f33382d3430203d3e203134353232.roa (raw, json)
Hash identifier:          /jITEIn6s118lwWu1VIaqXWBXmjwJCxKNcuqxkrqDUU=
Subject key identifier:   E4:2C:DE:F4:6D:C8:97:62:9C:B3:F0:EB:4A:68:0B:DD:7E:A2:C6:CB
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       6AFBFE2BECC3CC4951F176E113215F4A6A9C5BD1
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a3a2f33382d3430203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:55 +0000
ROA not before:           Tue 05 Mar 2024 18:15:55 +0000
ROA not after:            Tue 04 Mar 2025 18:20:55 +0000
asID:                     14522
IP address blocks:        2800:9a3::/38 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fb:fe:2b:ec:c3:cc:49:51:f1:76:e1:13:21:5f:4a:6a:9c:5b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:55 2024 GMT
            Not After : Mar  4 18:20:55 2025 GMT
        Subject: CN=E42CDEF46DC897629CB3F0EB4A680BDD7EA2C6CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0d:8a:ca:fa:46:88:7e:6d:9b:c2:65:58:82:
                    01:90:c0:a0:e6:8c:68:5e:69:b1:37:b3:b9:18:32:
                    c2:94:be:22:76:cd:f8:b1:59:d4:41:68:45:26:bb:
                    cb:69:49:b0:49:ee:39:3a:da:a0:29:99:27:b8:49:
                    b2:d6:90:ff:78:24:56:9f:f6:82:a7:76:f8:ec:61:
                    f8:a3:0c:e7:a2:d0:7a:9d:c7:2d:66:c7:3c:72:a3:
                    05:d8:27:d8:8d:b8:9b:75:63:07:76:f8:96:7e:98:
                    4a:fc:c8:b3:1b:88:f3:49:86:8f:46:dd:57:dc:5c:
                    9c:3f:de:b0:e6:c7:f2:64:f4:82:2a:b9:e4:0e:23:
                    01:d2:ac:e0:3e:1d:3a:23:8e:a3:af:dd:91:e0:77:
                    de:4c:72:d0:3a:ae:bb:6a:0e:e6:70:9c:fb:5d:9b:
                    70:ad:62:54:f7:bf:b9:f5:16:76:a9:d8:24:70:34:
                    5f:05:1a:d6:5d:03:4c:d9:28:09:30:e4:b2:7d:4f:
                    f4:86:8f:c8:38:1a:18:fb:f6:4a:92:ff:ef:6c:22:
                    7d:50:75:40:a4:fc:63:4d:39:09:ee:3f:57:7f:8c:
                    0a:e8:31:40:fb:61:d6:ce:99:18:c8:37:43:34:6c:
                    b6:9a:76:a3:3a:e8:4f:c2:eb:45:78:08:c2:de:43:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2C:DE:F4:6D:C8:97:62:9C:B3:F0:EB:4A:68:0B:DD:7E:A2:C6:CB
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/323830303a3961333a3a2f33382d3430203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:9a3::/38

    Signature Algorithm: sha256WithRSAEncryption
         22:fa:8e:dd:e9:ce:79:00:89:bd:90:ce:11:6f:ba:82:1b:a8:
         d9:68:9d:bc:9f:a8:ae:c0:d1:9e:35:57:f0:93:e1:80:6a:d5:
         e4:33:b7:d2:5f:82:2b:9b:6b:d3:08:7c:38:c3:e6:e6:73:0c:
         9c:cd:54:f7:72:32:a0:70:2a:58:c2:fc:a8:a5:fe:b6:b8:34:
         f7:b9:1a:ad:0e:d1:9d:33:8a:ac:11:49:a3:29:12:b2:a1:99:
         37:f2:16:c1:54:9d:5b:0b:c4:f3:2f:a4:4c:15:7e:71:54:5c:
         25:e8:3d:07:63:59:65:87:85:50:49:3a:90:8c:60:49:48:c0:
         fa:f7:de:14:3a:67:42:2f:72:07:cf:b7:54:57:29:6d:bb:8c:
         9b:97:cc:02:70:3d:bf:5d:ee:9a:81:27:13:13:4a:a3:fd:72:
         2b:9c:8b:88:2b:06:02:bd:5d:5c:91:49:13:82:54:96:c5:d1:
         31:4a:63:0c:3e:e1:d9:1d:47:ad:79:32:c1:ab:d9:0f:56:b4:
         5f:95:76:cf:8f:6f:e3:64:c3:29:40:0f:13:78:5c:f9:c3:ec:
         45:3d:78:1b:8d:91:9f:16:0d:e7:d1:de:35:f5:9a:78:cf:2d:
         94:c5:1f:36:49:90:20:9e:86:5e:0e:84:d3:bd:ff:2a:99:0c:
         2c:ba:ee:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----