Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/323830333a323034303a3a2f33322d3332203d3e203238303530.roa
File:                     323830333a323034303a3a2f33322d3332203d3e203238303530.roa (raw, json)
Hash identifier:          kj39TwlGjyWspe3/nkff460Fj0wpAvdGXwG8usyNssY=
Subject key identifier:   46:5E:3E:87:2D:9E:63:F4:D9:AD:1C:0E:B7:7A:26:D0:AE:59:7A:D2
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       46EF02250F5FE5D7DFC740D19253CA97966F4EDD
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/323830333a323034303a3a2f33322d3332203d3e203238303530.roa
Signing time:             Tue 05 Mar 2024 18:17:40 +0000
ROA not before:           Tue 05 Mar 2024 18:12:40 +0000
ROA not after:            Tue 04 Mar 2025 18:17:40 +0000
asID:                     28050
IP address blocks:        2803:2040::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ef:02:25:0f:5f:e5:d7:df:c7:40:d1:92:53:ca:97:96:6f:4e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Mar  5 18:12:40 2024 GMT
            Not After : Mar  4 18:17:40 2025 GMT
        Subject: CN=465E3E872D9E63F4D9AD1C0EB77A26D0AE597AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:61:43:4a:ef:cd:31:7f:d1:fd:73:90:4d:
                    b7:7a:01:68:7e:91:cb:4f:5f:2b:68:47:aa:ed:49:
                    4f:97:8c:8c:fd:1e:0b:03:a4:79:5c:82:4e:14:c7:
                    11:29:c0:c1:7b:8e:92:8d:fc:a3:f6:5d:d9:9f:5f:
                    84:7d:08:5d:d3:48:a3:c0:a5:1b:fb:de:e6:6e:bd:
                    df:c8:c7:12:ea:c8:2c:46:24:fe:d3:ac:b4:3a:94:
                    cd:04:41:37:17:0a:78:9a:d2:89:fc:41:c4:e0:6b:
                    df:fa:4c:ed:22:af:26:de:1a:aa:5f:d8:83:e7:48:
                    fc:f4:17:d4:3a:98:fe:00:07:62:6c:4e:72:89:60:
                    b8:45:e5:a7:40:bc:01:ca:74:ed:bd:56:64:29:13:
                    aa:6c:1a:2f:57:4b:3d:ef:6c:30:44:3b:c7:64:b7:
                    58:dc:c4:f8:9a:52:2f:50:3a:d7:59:c5:dd:1c:c7:
                    15:ee:3b:a3:df:6a:b7:55:9f:9c:68:83:5f:8f:ab:
                    e0:f9:ee:57:d0:f1:ed:2d:84:7b:93:74:49:0b:6f:
                    0e:ed:21:9a:91:8c:b2:9a:ec:c7:b7:9e:7c:8a:41:
                    7e:50:6c:cf:53:1c:ee:de:16:58:2a:0f:da:28:9f:
                    41:6c:3a:e1:20:20:f5:93:18:af:59:70:ec:53:84:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5E:3E:87:2D:9E:63:F4:D9:AD:1C:0E:B7:7A:26:D0:AE:59:7A:D2
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/323830333a323034303a3a2f33322d3332203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2040::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:5f:cd:62:62:71:91:0d:9a:40:f8:c6:32:7c:50:15:b7:ea:
         c6:c4:ce:c1:34:7b:43:51:22:60:42:3d:c8:ed:30:82:86:7a:
         f0:e5:ac:ad:9a:9d:1e:55:56:f3:36:9b:36:fa:85:28:0d:d3:
         91:bd:bc:10:4d:a5:6f:aa:a1:32:c1:32:92:8a:47:16:05:19:
         99:7f:82:1c:74:0d:d1:7a:d4:28:53:c5:84:67:f6:66:c6:90:
         52:82:c5:33:aa:6d:30:75:c4:2f:e5:fe:4e:11:9a:ee:20:5b:
         3f:ea:f9:bb:aa:ad:79:20:b3:b9:7c:86:d5:69:e9:b9:3c:f8:
         39:ee:4c:36:a4:05:24:c9:45:17:25:d2:d7:2a:6d:c9:c1:e6:
         fb:72:06:ab:85:e5:6d:71:f1:f3:99:5a:9c:d1:d3:8d:28:38:
         a3:ad:3c:90:86:7a:d0:06:b7:0e:ff:f5:a0:46:95:1c:20:f8:
         2b:24:8d:55:e4:89:a2:64:a4:9d:d5:88:64:5b:a6:1e:fe:88:
         5f:c5:2e:07:8d:69:e9:df:c8:9c:27:05:90:e6:e2:16:c5:f0:
         8a:28:a0:9f:35:5c:30:da:52:51:96:f7:5d:ab:4a:bd:d8:81:
         46:36:23:cd:57:db:15:20:ff:9d:84:89:b6:91:c1:ed:87:a7:
         2b:34:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----