Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a6130303a3a2f34302d3430203d3e20323733323138.roa
File:                     323830333a386535303a6130303a3a2f34302d3430203d3e20323733323138.roa (raw, json)
Hash identifier:          TseyuamA292l6L592ZBfrnwaW9jgJzlca6vbh7s52D4=
Subject key identifier:   2C:83:16:BD:1A:A4:D6:6E:29:3E:C6:25:7F:B4:33:1A:09:61:81:CE
Certificate issuer:       /CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
Certificate serial:       485347B667267751555274B248B61E62A004ECD0
Authority key identifier: A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a6130303a3a2f34302d3430203d3e20323733323138.roa
Signing time:             Wed 17 Apr 2024 23:35:02 +0000
ROA not before:           Wed 17 Apr 2024 23:30:02 +0000
ROA not after:            Wed 16 Apr 2025 23:35:02 +0000
asID:                     273218
IP address blocks:        2803:8e50:a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:53:47:b6:67:26:77:51:55:52:74:b2:48:b6:1e:62:a0:04:ec:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1F33E406A036FC3AAB87B71ED888DD58A177037
        Validity
            Not Before: Apr 17 23:30:02 2024 GMT
            Not After : Apr 16 23:35:02 2025 GMT
        Subject: CN=2C8316BD1AA4D66E293EC6257FB4331A096181CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:31:81:be:89:ef:d9:dc:69:21:7c:b1:46:
                    c3:42:09:f3:be:f2:fc:57:8d:c8:76:86:17:27:01:
                    89:e4:30:42:2d:7c:9f:19:be:a5:1f:e8:43:fe:82:
                    eb:68:30:48:5b:f8:79:a8:1b:13:22:f9:80:b8:53:
                    bc:cf:b0:29:e3:a3:1b:c2:b8:f4:9d:41:d6:c9:35:
                    77:4b:ce:4b:f3:37:b0:d0:d4:e7:a1:d5:0e:bb:3f:
                    47:7f:50:d1:c6:2a:bc:8c:04:c9:c1:85:fa:9d:bb:
                    c6:79:45:9d:23:3b:1d:b3:3e:ee:b1:4c:69:4a:e1:
                    c4:c9:1c:9c:c6:26:bf:51:c8:e9:7f:1b:39:d7:92:
                    16:12:9b:74:29:5a:a6:93:71:a5:62:fb:1a:71:56:
                    4a:3c:c6:93:b3:2f:a7:a3:fc:e7:35:63:09:46:45:
                    d6:83:e8:29:e5:3d:f6:a7:cf:04:46:2d:34:49:f8:
                    80:48:69:af:81:79:23:7c:c8:52:dd:4a:9c:4a:be:
                    d3:bd:33:c0:63:05:90:5f:e8:52:38:a0:f5:3d:f9:
                    8e:f8:3e:ac:46:e3:3c:70:2a:83:32:07:46:b2:54:
                    fe:bd:14:79:73:83:7b:fb:de:26:89:5f:93:b4:c2:
                    d6:29:19:a9:56:ec:3f:ed:97:3a:9b:2e:2c:ea:fb:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:83:16:BD:1A:A4:D6:6E:29:3E:C6:25:7F:B4:33:1A:09:61:81:CE
            X509v3 Authority Key Identifier:
                keyid:A1:F3:3E:40:6A:03:6F:C3:AA:B8:7B:71:ED:88:8D:D5:8A:17:70:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1F33E406A036FC3AAB87B71ED888DD58A177037.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D5F97215E690A70055E35A2B394C4A99F305A2C67D18B8044560421C491C2FB/0/323830333a386535303a6130303a3a2f34302d3430203d3e20323733323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8e50:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:b5:10:0c:93:a0:d2:f3:de:87:51:e7:c2:0d:9d:47:ac:
         84:dd:a6:d2:ca:ae:48:3e:42:89:bf:09:41:03:fb:9a:00:84:
         21:d2:d7:03:9f:58:91:f4:a5:97:1a:0f:64:cf:b1:2f:0e:f7:
         5c:88:4a:d0:91:ac:5b:44:35:0c:16:9a:c1:be:7f:39:38:05:
         8a:15:90:8c:09:43:ca:e2:8d:7d:bc:b0:1b:61:de:ff:eb:bd:
         09:3a:1a:70:36:5a:43:d2:70:48:d5:3d:72:7d:e4:49:37:f5:
         3c:48:35:be:6a:75:42:85:51:fb:c5:03:7c:e4:b7:33:c2:56:
         78:e8:9b:79:a3:35:20:36:ed:13:f4:35:d6:0d:cf:28:cd:89:
         db:0c:82:29:5f:3e:fd:56:0b:59:8f:fa:21:97:24:69:53:78:
         b9:bc:5e:f9:62:25:7d:c0:3f:e6:5f:dd:77:f4:e4:a2:26:67:
         5f:03:a7:31:e4:3b:79:4b:b0:b7:25:87:65:ea:4e:d5:31:e3:
         ea:3c:e6:e6:49:11:c6:8a:34:21:9e:8b:15:70:ec:e5:11:03:
         8d:f1:f4:9e:72:a2:8e:1c:4f:8f:28:6d:22:6a:85:1d:78:0b:
         f6:1e:7f:15:35:65:14:ae:35:0a:31:ea:02:9f:76:03:56:60:
         b9:da:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----