Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/323830333a373138303a3a2f33322d3438203d3e203139393035.roa
File:                     323830333a373138303a3a2f33322d3438203d3e203139393035.roa (raw, json)
Hash identifier:          F2JTG9U7GEKIAQq81sAJRWeWui1vAaUXX8eot3jmNx0=
Subject key identifier:   B6:BC:DF:EF:8D:9D:B2:50:FE:77:5E:C3:6E:25:7E:96:3D:9F:67:05
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       1FC2180DAEE7F86804B5F20719F1C70DC2138DC0
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/323830333a373138303a3a2f33322d3438203d3e203139393035.roa
Signing time:             Tue 05 Mar 2024 17:56:51 +0000
ROA not before:           Tue 05 Mar 2024 17:51:51 +0000
ROA not after:            Tue 04 Mar 2025 17:56:51 +0000
asID:                     19905
IP address blocks:        2803:7180::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c2:18:0d:ae:e7:f8:68:04:b5:f2:07:19:f1:c7:0d:c2:13:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Mar  5 17:51:51 2024 GMT
            Not After : Mar  4 17:56:51 2025 GMT
        Subject: CN=B6BCDFEF8D9DB250FE775EC36E257E963D9F6705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:52:9d:ae:c1:6a:08:30:b8:6d:5c:d1:9b:d3:
                    cf:45:c7:dd:08:08:d1:6b:03:90:87:ba:01:dd:b0:
                    18:37:fe:c9:06:8d:aa:76:11:16:5f:b8:65:72:c8:
                    a0:f7:29:04:31:cf:a3:bf:ce:a3:8f:28:9b:65:9b:
                    4b:cb:1f:5b:cb:c0:a2:b2:1f:64:01:23:5c:f1:13:
                    54:5d:19:51:61:eb:17:11:4e:69:ee:e8:49:bb:e7:
                    74:e5:92:7b:4a:9f:2e:41:75:75:a3:4c:06:00:29:
                    61:9c:c9:23:34:09:ea:9c:21:8e:8c:dc:bb:ce:0c:
                    36:78:c6:65:92:e5:a6:53:55:6d:59:72:95:11:87:
                    6b:e6:8c:2e:2d:3a:9e:b4:da:4e:11:e6:51:36:69:
                    44:c0:3b:11:fc:98:7a:72:ac:98:a8:15:06:25:02:
                    75:c9:61:f0:7c:57:59:1a:c1:29:b6:97:2b:6c:57:
                    2d:c2:38:6c:94:fb:fa:d9:66:f5:04:80:a0:7a:33:
                    fc:58:40:2c:af:04:3e:1e:28:20:0c:f9:61:54:65:
                    8b:09:ea:3e:e4:84:e0:c4:24:11:2d:42:fc:1f:03:
                    0a:69:a4:7f:68:2d:6e:1c:4b:af:8a:97:bf:b0:c0:
                    2a:1c:ab:52:c9:5d:83:0f:cb:93:c0:4f:d2:8f:63:
                    0c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BC:DF:EF:8D:9D:B2:50:FE:77:5E:C3:6E:25:7E:96:3D:9F:67:05
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/323830333a373138303a3a2f33322d3438203d3e203139393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7180::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:98:72:b6:35:45:2b:56:c1:fb:39:d3:76:73:e4:f5:55:b2:
         1f:2a:29:c1:32:0b:15:34:0f:89:d9:a7:77:0f:21:74:ad:18:
         f7:36:17:38:f7:d5:05:6f:0e:b8:4d:59:3e:a8:d4:49:eb:2a:
         59:88:81:07:4f:df:d2:7b:fc:7b:7e:3a:01:99:8f:26:ac:7f:
         d4:4b:5b:37:a8:35:4b:d6:c9:79:4b:f9:fe:4e:59:d1:d8:4d:
         5e:34:ae:7f:80:ec:19:bb:97:1f:2f:8a:93:79:21:6d:0f:36:
         9c:df:4b:17:c9:ed:7b:f5:86:22:cd:ff:ec:f8:c3:37:e5:1b:
         d1:7a:4d:4a:56:ed:44:a1:c8:b5:03:06:42:16:c3:f9:67:33:
         38:40:2e:c1:f0:2f:6a:65:0c:65:e3:d9:dc:39:a6:40:ee:da:
         e6:a6:4e:66:bc:58:07:82:be:ca:7b:b3:a0:52:0f:57:0f:89:
         4f:f5:b1:25:62:da:36:55:f7:c7:47:cb:ee:0b:36:fa:5e:00:
         97:69:59:c8:74:65:81:ba:34:7a:a3:91:8f:68:99:fe:c2:f4:
         aa:80:9d:33:7f:dc:ec:c7:93:12:f0:a5:32:75:6d:49:94:61:
         82:36:5c:e1:99:14:db:5a:fa:68:3c:d4:03:3f:01:48:86:b0:
         ef:6b:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----