Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/323830333a6239303a3a2f33322d3332203d3e20383030.roa
File:                     323830333a6239303a3a2f33322d3332203d3e20383030.roa (raw, json)
Hash identifier:          I2apO4ADSbf9oUwv19GzVck6tWQ6NB4XJlup0HWHrxc=
Subject key identifier:   F1:25:78:E2:60:EA:38:C9:5D:98:38:29:5A:33:F8:0B:16:2A:C1:72
Certificate issuer:       /CN=A08DDD76E947B9C9F721B78022D9A4EAADAE46B1
Certificate serial:       790DB59C47B1BD310427FB0DBDD603A03D29159B
Authority key identifier: A0:8D:DD:76:E9:47:B9:C9:F7:21:B7:80:22:D9:A4:EA:AD:AE:46:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/323830333a6239303a3a2f33322d3332203d3e20383030.roa
Signing time:             Tue 05 Mar 2024 17:49:02 +0000
ROA not before:           Tue 05 Mar 2024 17:44:02 +0000
ROA not after:            Tue 04 Mar 2025 17:49:02 +0000
asID:                     800
IP address blocks:        2803:b90::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0d:b5:9c:47:b1:bd:31:04:27:fb:0d:bd:d6:03:a0:3d:29:15:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08DDD76E947B9C9F721B78022D9A4EAADAE46B1
        Validity
            Not Before: Mar  5 17:44:02 2024 GMT
            Not After : Mar  4 17:49:02 2025 GMT
        Subject: CN=F12578E260EA38C95D9838295A33F80B162AC172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:a1:aa:61:41:d8:ed:8a:5c:66:80:e4:48:
                    76:2e:44:bf:f3:ea:17:fc:ab:aa:33:4c:b6:02:3d:
                    ff:e4:33:dc:78:a3:72:02:8c:fa:55:34:78:0e:ca:
                    95:8b:5e:71:8a:b9:d7:a4:91:a3:3d:51:e2:ec:c0:
                    a8:64:1f:6e:d8:01:2b:a7:0e:9b:c1:2c:e3:e8:c2:
                    11:b9:39:5e:e1:8b:e6:05:0a:e0:d4:67:b5:64:c2:
                    0c:04:e2:f6:7c:21:cb:2d:87:4e:71:f9:5c:bc:e7:
                    96:13:08:3c:e1:68:9b:5f:9d:ab:da:d5:72:0b:a1:
                    e4:bb:f5:cc:32:3d:84:37:68:fa:4e:ca:bd:89:8c:
                    6d:74:9c:8a:2b:a8:ba:bb:8c:29:65:df:2d:4f:21:
                    bb:59:8f:19:fc:82:57:49:9b:0a:d0:d6:f4:ab:20:
                    ad:1a:33:13:77:97:5a:08:a6:20:ee:09:34:8d:61:
                    96:7d:9e:4c:7a:a7:71:65:b6:c1:eb:9d:44:b5:58:
                    74:4a:ce:2c:4b:8f:4b:cd:0b:aa:5b:4e:a9:6d:64:
                    f7:2c:a5:b2:4f:00:31:65:30:c3:50:28:2c:22:53:
                    a8:e2:cb:06:95:77:67:ab:cb:ce:d0:fd:3d:f0:b6:
                    4c:de:6c:40:2d:70:88:df:82:2a:65:7d:7e:dc:ff:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:25:78:E2:60:EA:38:C9:5D:98:38:29:5A:33:F8:0B:16:2A:C1:72
            X509v3 Authority Key Identifier:
                keyid:A0:8D:DD:76:E9:47:B9:C9:F7:21:B7:80:22:D9:A4:EA:AD:AE:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/323830333a6239303a3a2f33322d3332203d3e20383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:7c:bf:62:3c:cc:df:f1:9b:e7:5e:d8:69:66:63:22:08:
         b8:58:b4:ae:24:21:a8:bf:66:83:3b:af:5c:70:93:60:a6:69:
         4f:ab:51:9a:2e:6d:45:1e:0e:24:b2:4a:5d:f4:1d:23:57:95:
         f0:ec:28:91:86:d4:fe:fe:f9:45:7a:89:c5:54:5d:90:8c:e6:
         53:e4:0d:fe:b4:87:06:a6:22:e6:06:4e:64:37:75:b3:05:fc:
         fe:7a:90:8a:49:66:41:fc:5e:53:44:e0:5d:69:23:9b:52:6c:
         9e:4a:16:9d:94:61:68:a5:b3:d5:4f:7d:99:3e:cc:7b:65:5c:
         1c:0d:1d:4c:fe:7c:3c:4c:51:60:38:7b:40:e5:7e:53:79:18:
         7d:d3:e4:c5:3d:89:98:42:d4:a1:42:c3:7a:a5:93:c8:ea:c5:
         c8:f7:d8:9d:8f:84:de:46:ce:7a:09:bc:9e:5a:67:a1:8f:cb:
         b9:bc:1b:00:67:bd:65:bd:aa:19:32:6a:63:43:cd:9f:f2:89:
         2d:30:a3:a2:e9:47:77:4c:c6:80:00:63:be:8c:42:8b:d0:a8:
         b5:54:d7:c8:b2:e0:72:d6:0e:ae:85:1f:f3:2e:90:48:c0:71:
         b6:64:59:d6:2c:40:7e:66:28:e9:18:21:2d:21:51:0c:17:e7:
         c3:c3:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----