Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/323830333a386635303a3a2f33322d3332203d3e20323733393432.roa
File:                     323830333a386635303a3a2f33322d3332203d3e20323733393432.roa (raw, json)
Hash identifier:          F3viHjUGXi7Tl3oZKh9kByV4K+LXjm44ME8zIxKyVis=
Subject key identifier:   F7:EF:48:B5:0C:C3:75:75:E5:4D:E1:B4:06:65:80:3C:B9:7E:1A:89
Certificate issuer:       /CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
Certificate serial:       4E7E8EE4A2EE31230AD7A5D342A0F68BA7BAF940
Authority key identifier: 93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/323830333a386635303a3a2f33322d3332203d3e20323733393432.roa
Signing time:             Wed 20 Nov 2024 18:20:00 +0000
ROA not before:           Wed 20 Nov 2024 18:15:00 +0000
ROA not after:            Wed 19 Nov 2025 18:20:00 +0000
asID:                     273942
IP address blocks:        2803:8f50::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7e:8e:e4:a2:ee:31:23:0a:d7:a5:d3:42:a0:f6:8b:a7:ba:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93141B672C6D3AEB712692BBC6BFCF18A42C7549
        Validity
            Not Before: Nov 20 18:15:00 2024 GMT
            Not After : Nov 19 18:20:00 2025 GMT
        Subject: CN=F7EF48B50CC37575E54DE1B40665803CB97E1A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:ec:e7:da:e9:a9:4e:f1:00:99:f1:5a:e9:
                    1e:e0:52:c2:39:c0:96:5f:79:40:3e:40:6b:f0:49:
                    c2:91:d1:f5:44:2f:a5:eb:57:34:e4:76:8d:b2:cb:
                    eb:e8:a0:b3:70:ca:02:dc:02:29:03:36:1f:83:d9:
                    44:49:70:6c:08:b3:b8:cf:f7:7a:7f:9c:c0:44:9b:
                    7b:31:35:b5:a9:20:e2:20:25:ad:c5:d5:86:a3:1e:
                    bc:2d:e1:a9:32:36:2c:e2:ab:ab:45:42:f7:c2:92:
                    2f:b9:0b:db:1d:a6:cf:d6:3f:1d:9d:73:d7:fb:a4:
                    ef:3a:f7:2f:16:d3:0f:ea:fa:1b:b6:e5:f7:aa:0f:
                    33:d0:c0:57:9f:a5:48:f2:9d:13:ee:2e:5f:f9:6f:
                    26:aa:be:a7:3d:e4:26:6d:a1:96:bc:71:ea:c4:ff:
                    fd:4e:54:48:91:fd:ff:c9:3c:fb:0d:da:e6:2d:57:
                    7d:25:8e:45:72:8e:87:d2:79:95:5c:c3:7a:a0:f9:
                    59:1b:29:65:45:7a:2a:9b:81:c4:4f:d8:11:7e:5a:
                    f6:d3:54:23:47:44:cd:26:c3:83:e3:52:34:32:d3:
                    af:86:db:d8:46:22:6c:fe:85:97:d9:4a:a9:d1:1e:
                    be:3c:8c:cd:d9:99:7e:11:0c:fc:04:98:88:9b:44:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EF:48:B5:0C:C3:75:75:E5:4D:E1:B4:06:65:80:3C:B9:7E:1A:89
            X509v3 Authority Key Identifier:
                keyid:93:14:1B:67:2C:6D:3A:EB:71:26:92:BB:C6:BF:CF:18:A4:2C:75:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93141B672C6D3AEB712692BBC6BFCF18A42C7549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EF5E677C47AF2608E8DCC9B35CE13522CA1C7F54284F5821A9CCB98D81F8787/0/323830333a386635303a3a2f33322d3332203d3e20323733393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8f50::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:11:ee:ea:ff:a9:f7:fe:22:a6:82:8e:69:b9:42:31:46:24:
         6d:ec:3d:59:ec:5d:4d:90:e0:45:90:37:9b:ee:91:41:e9:5d:
         71:72:9b:ef:27:ec:d4:7e:ac:1d:f2:97:bc:24:36:0f:70:76:
         f2:27:7b:77:67:0a:b2:fc:5c:cb:df:a6:f4:45:e3:ab:da:88:
         69:b0:fe:4d:ce:6a:8c:d7:0e:a3:f2:66:39:c9:38:19:cd:66:
         95:61:64:36:0e:63:db:28:d0:a6:c4:68:ea:52:30:52:51:15:
         65:e4:19:8d:51:5f:bc:f6:da:11:d7:2c:a4:ab:75:b3:8b:f1:
         9e:34:d0:5e:2a:d7:ad:8d:92:f7:bd:7d:d5:fc:d7:1a:ea:83:
         de:4e:e5:41:f7:d5:ab:ce:00:0f:36:09:0e:df:39:4c:91:31:
         31:47:24:58:63:c5:1d:73:d2:05:c2:a0:55:5c:b1:f4:19:0f:
         a4:d6:1e:83:49:f7:e4:63:7d:a9:be:41:89:f8:0a:c3:77:78:
         57:6c:8c:bf:9f:d0:8b:77:5f:3a:84:56:4c:38:17:da:55:eb:
         be:05:46:e3:29:20:cd:11:40:28:7e:d2:cc:95:58:8d:64:2d:
         64:8e:a7:0a:8d:d7:22:06:ab:f1:14:f1:6c:b7:3f:fc:b7:45:
         2f:15:1e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----