Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a3a2f33322d3438203d3e2034323730.roa
File:                     323830303a3131303a3a2f33322d3438203d3e2034323730.roa (raw, json)
Hash identifier:          YmDFtcx6d8LKsBfQJJiD/y520duDe+sN1yqtZtqubX4=
Subject key identifier:   F6:F8:FC:4E:DA:8D:FA:72:01:B0:82:36:EE:C7:F4:20:95:E3:F4:EB
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       296F88264FD997BBEF51AC24D515CD4A33353F4D
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a3a2f33322d3438203d3e2034323730.roa
Signing time:             Tue 05 Mar 2024 18:22:57 +0000
ROA not before:           Tue 05 Mar 2024 18:17:57 +0000
ROA not after:            Tue 04 Mar 2025 18:22:57 +0000
asID:                     4270
IP address blocks:        2800:110::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6f:88:26:4f:d9:97:bb:ef:51:ac:24:d5:15:cd:4a:33:35:3f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:57 2024 GMT
            Not After : Mar  4 18:22:57 2025 GMT
        Subject: CN=F6F8FC4EDA8DFA7201B08236EEC7F42095E3F4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:3e:0b:e4:61:85:b3:a9:16:31:4a:64:c0:
                    5d:15:e3:58:34:04:34:4f:ba:db:0a:6b:59:7b:38:
                    68:9c:d6:d5:df:91:bd:f8:ce:6d:20:41:69:11:7a:
                    b2:4b:18:f8:eb:7d:86:b6:60:56:ca:d0:43:e6:77:
                    fe:b2:88:2e:13:20:c6:3a:a1:b8:70:47:9f:07:6f:
                    be:b7:f4:b6:63:72:36:9e:61:d5:65:4a:e7:82:d4:
                    ac:a7:b8:da:44:40:5b:56:0e:15:3b:e0:5b:7c:b4:
                    98:4e:13:f3:64:e7:df:9e:a6:5a:70:b7:0d:cc:4d:
                    29:98:c1:65:15:c5:85:1b:17:a2:e3:74:5c:81:ec:
                    50:af:bf:0d:33:28:88:57:33:b0:20:61:df:35:80:
                    20:1f:0b:1e:ec:d5:3c:3c:5f:e6:48:c4:d5:5c:06:
                    a4:09:c6:4e:d2:46:a9:d5:3e:2c:c6:db:20:14:13:
                    15:c8:13:48:61:ef:40:de:64:17:fc:97:b0:18:05:
                    9e:1e:77:43:2f:40:52:8b:80:08:c6:21:f4:36:f7:
                    0f:16:9d:63:4b:cd:dc:2d:b6:c0:e4:8f:4c:d0:6c:
                    d8:e4:ce:a1:c9:c3:a9:ca:41:25:b2:7f:0b:fc:fe:
                    de:79:13:18:46:27:9a:e7:a4:8c:cd:26:44:d5:d9:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F8:FC:4E:DA:8D:FA:72:01:B0:82:36:EE:C7:F4:20:95:E3:F4:EB
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/323830303a3131303a3a2f33322d3438203d3e2034323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:110::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:43:f8:27:3a:77:b1:7a:0e:8a:38:5c:92:07:74:c3:e1:29:
         b3:70:b8:bf:3a:86:ce:77:b1:cf:3c:f4:0a:2d:56:d1:6e:e4:
         58:d4:37:6a:3e:a8:26:8c:4c:69:92:ce:4d:4e:d8:5a:ca:2e:
         76:fc:d0:10:0c:cd:85:c6:dd:ca:63:e2:d6:2c:bd:84:50:56:
         51:7e:da:8b:2a:0e:53:ca:b7:60:49:bb:ac:53:49:89:87:b0:
         e0:f2:19:ff:b6:50:d9:b8:fb:cf:a0:70:4f:a3:fe:83:ca:a4:
         3e:96:a6:12:36:bc:0d:69:70:ff:d7:dd:c4:68:ad:28:b8:fd:
         4b:8b:58:88:bc:dd:14:e0:21:0a:09:7c:bf:75:ec:ac:a7:10:
         4e:6c:99:07:33:7d:4e:b0:04:56:a4:33:35:cd:73:f4:ac:4b:
         26:6c:fc:48:86:6f:50:89:aa:d0:1a:e8:8d:38:73:29:fc:4e:
         4c:39:55:6a:c4:60:40:95:5b:9c:34:07:57:f3:30:bb:e2:5f:
         a1:d8:46:5e:c2:69:37:e6:4c:1f:7e:a4:10:23:88:90:70:e9:
         8e:90:fe:53:bb:d3:d3:c3:d3:ec:af:97:b3:13:68:6d:8b:a9:
         82:75:54:fd:22:5c:7d:1d:84:12:bb:e0:b7:a9:12:49:c6:22:
         33:30:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----