Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/323830303a3264303a3a2f33322d3332203d3e2033363033.roa
File:                     323830303a3264303a3a2f33322d3332203d3e2033363033.roa (raw, json)
Hash identifier:          LIb4w/PUXCM2HI0QHukJlg1VlIe9EAyWUmAFdkVv2vQ=
Subject key identifier:   89:D5:DF:29:3D:17:BC:D1:78:21:05:93:7F:07:11:F2:80:6C:F3:17
Certificate issuer:       /CN=B0292ED2ED57841F24F3EF9EECC9946356474634
Certificate serial:       2DEA5D711035D98CEC8BFC6E710258EBFF8C3D87
Authority key identifier: B0:29:2E:D2:ED:57:84:1F:24:F3:EF:9E:EC:C9:94:63:56:47:46:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0292ED2ED57841F24F3EF9EECC9946356474634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/323830303a3264303a3a2f33322d3332203d3e2033363033.roa
Signing time:             Tue 05 Mar 2024 18:05:46 +0000
ROA not before:           Tue 05 Mar 2024 18:00:46 +0000
ROA not after:            Tue 04 Mar 2025 18:05:46 +0000
asID:                     3603
IP address blocks:        2800:2d0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ea:5d:71:10:35:d9:8c:ec:8b:fc:6e:71:02:58:eb:ff:8c:3d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0292ED2ED57841F24F3EF9EECC9946356474634
        Validity
            Not Before: Mar  5 18:00:46 2024 GMT
            Not After : Mar  4 18:05:46 2025 GMT
        Subject: CN=89D5DF293D17BCD1782105937F0711F2806CF317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:6a:54:f6:87:ab:ed:64:01:a4:eb:ec:9a:
                    8c:10:4b:11:62:d7:19:6e:2b:09:cd:e9:9c:93:b1:
                    9c:65:88:9c:ee:98:bd:72:b0:5c:ad:b7:46:eb:0f:
                    52:18:99:9d:4b:4d:36:79:97:4e:50:45:d2:36:a7:
                    8d:92:f2:08:11:01:f0:cc:b7:5c:1e:d9:f6:e1:4d:
                    1c:bb:e4:3d:bf:01:24:38:5b:91:93:7e:7c:e0:00:
                    18:d0:d3:f3:39:53:2e:d9:33:81:df:19:ff:3b:ce:
                    60:7b:72:04:b1:88:12:af:9b:f4:e7:91:58:c0:91:
                    5e:e1:10:d7:32:fc:db:e4:63:c1:f1:96:a9:12:dd:
                    76:db:c3:5a:e2:f5:47:11:1b:09:0e:61:18:15:b7:
                    95:24:f5:3b:73:c9:3a:51:1f:2f:fb:30:cd:52:b6:
                    8b:8f:bd:15:30:ca:a4:c5:9b:24:94:00:ce:1c:f4:
                    15:44:2d:b2:83:3c:9c:44:93:f5:44:88:b0:93:ce:
                    da:0b:82:a0:de:e3:bd:b5:c6:b3:c2:cf:9c:09:5d:
                    b1:8b:3d:d5:58:f1:9d:a0:7a:17:4d:8c:39:5f:98:
                    f5:eb:4d:0e:58:f8:c1:18:eb:c4:88:90:17:1c:58:
                    cc:1c:be:cf:82:70:c3:0d:8a:dc:d1:df:af:1b:8d:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D5:DF:29:3D:17:BC:D1:78:21:05:93:7F:07:11:F2:80:6C:F3:17
            X509v3 Authority Key Identifier:
                keyid:B0:29:2E:D2:ED:57:84:1F:24:F3:EF:9E:EC:C9:94:63:56:47:46:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/B0292ED2ED57841F24F3EF9EECC9946356474634.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0292ED2ED57841F24F3EF9EECC9946356474634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D1B642EAC13C07A538E8D1A098CDD099E37F907EE58E5183158B1F249E642EC/0/323830303a3264303a3a2f33322d3332203d3e2033363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:9e:0d:ff:77:87:3a:cb:6f:15:c4:4c:95:7a:45:f5:30:f3:
         ac:93:99:33:fd:67:e7:b7:0f:4b:d5:59:3d:c4:b4:a0:e3:52:
         ef:dc:e8:d3:1d:0d:ee:6f:24:99:a7:4c:3c:67:1d:6d:7f:4b:
         48:e6:ab:fe:97:1d:1a:f0:a9:56:0b:45:16:cb:06:da:3c:5f:
         75:90:81:75:3b:03:02:7c:01:33:c6:43:ee:12:e5:c6:17:32:
         50:81:8f:8d:75:d0:b1:46:00:c4:09:58:a9:85:3e:f1:2c:37:
         f6:4d:56:7d:13:d4:5e:5c:e8:bd:0d:da:d7:11:b4:dc:7e:3c:
         b4:a7:c5:70:2a:49:f2:0a:b2:73:f0:b7:4d:e1:34:8c:0c:23:
         a3:29:cc:de:24:4e:ec:ba:aa:bc:cb:bc:10:6c:37:21:79:57:
         3c:6c:78:b0:dd:6f:d9:3e:8a:44:0c:e1:71:67:99:ff:5d:2a:
         ed:f8:1b:68:1b:9d:2c:90:67:39:bf:04:79:dc:d6:f7:b1:6a:
         b8:7a:b4:f4:62:64:c2:f1:22:fc:4d:1b:22:fe:0a:f8:65:82:
         e4:f2:83:df:36:af:7b:d7:2e:d2:1c:e5:34:9c:ca:80:55:12:
         fa:f3:1f:9b:ee:40:64:23:55:71:52:f4:84:9e:3c:35:b6:d4:
         a0:fb:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----