Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/323830333a343938303a3a2f33322d3438203d3e203532333238.roa
File:                     323830333a343938303a3a2f33322d3438203d3e203532333238.roa (raw, json)
Hash identifier:          nJYb0eVGIRplSuIrQJfhoJuGeeYlIN8VoAgYhdY83K4=
Subject key identifier:   A9:F6:64:FE:B3:2D:89:BC:C6:35:7F:E7:A5:A2:44:DD:9B:D1:84:35
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       7E3C7B2FC8BA14E4C1910D5486C214E564E71987
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/323830333a343938303a3a2f33322d3438203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:21 +0000
ROA not before:           Tue 05 Mar 2024 17:39:21 +0000
ROA not after:            Tue 04 Mar 2025 17:44:21 +0000
asID:                     52328
IP address blocks:        2803:4980::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3c:7b:2f:c8:ba:14:e4:c1:91:0d:54:86:c2:14:e5:64:e7:19:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:21 2024 GMT
            Not After : Mar  4 17:44:21 2025 GMT
        Subject: CN=A9F664FEB32D89BCC6357FE7A5A244DD9BD18435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:6c:25:83:4f:c5:4b:a8:41:5e:7e:50:84:
                    34:45:57:8d:eb:80:f3:33:b6:e5:58:2d:39:bf:44:
                    ed:c3:d0:75:c1:a6:29:15:dd:fa:88:c5:d0:3e:08:
                    62:33:7b:ad:60:5c:85:46:34:84:dc:31:0a:c2:c8:
                    6e:4a:55:93:28:c9:0b:89:00:e4:ed:5c:d8:b5:4f:
                    b6:f6:7a:c0:cc:5b:92:49:55:0d:20:82:a3:a1:bb:
                    52:5a:4a:9d:1d:7f:af:c7:8d:07:b7:14:d7:15:09:
                    2e:1d:fb:3f:1b:c7:ac:0d:e2:15:07:40:5e:d3:f9:
                    0f:bf:ac:e5:d5:8a:13:9d:bf:bc:ae:11:65:58:ac:
                    e2:96:b8:6b:3c:44:21:e8:29:3b:42:b4:8c:9d:3e:
                    dd:5d:38:79:45:5b:78:17:d6:1a:8c:c9:08:c9:b3:
                    8b:7f:67:35:59:aa:b7:2f:2b:8a:56:db:98:a3:1a:
                    f2:e9:76:37:42:be:61:1f:41:00:43:06:47:20:78:
                    6c:6c:93:c0:25:0e:a3:c8:95:1c:cc:06:72:4f:cd:
                    65:08:99:ad:24:51:90:5a:15:5f:5f:73:7e:77:3e:
                    5d:f1:0f:60:42:1a:43:73:db:6e:49:44:7f:b2:13:
                    ba:38:9a:52:0b:89:7a:03:83:a1:29:3a:7e:53:c4:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F6:64:FE:B3:2D:89:BC:C6:35:7F:E7:A5:A2:44:DD:9B:D1:84:35
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/323830333a343938303a3a2f33322d3438203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4980::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:9a:50:2d:44:f8:b4:28:82:a1:f6:16:fa:7d:e9:c4:63:
         ed:3d:b4:44:ae:b0:ef:d3:88:bc:9e:fc:59:a4:2d:6d:b6:02:
         ed:28:a7:d5:a6:71:a6:b9:23:d1:6e:a1:2c:f9:59:e9:0e:52:
         c0:2f:8a:3e:fc:ed:b9:e6:31:c4:4e:e4:07:bc:5d:19:44:d9:
         cf:5b:25:97:98:f3:92:ee:0b:9b:4d:e2:73:c1:63:64:ab:24:
         0b:ac:06:1e:09:35:fd:f5:34:3c:b4:2c:ec:5f:04:01:f9:06:
         bd:06:3e:a2:f4:cb:e3:bc:cf:0c:06:ba:e3:ef:a1:a1:d6:71:
         51:cb:a6:e9:fd:29:15:d7:dc:82:40:95:f2:a5:0a:a6:0a:70:
         af:ca:71:70:53:38:59:7a:63:dc:f8:da:ec:30:ec:87:6c:e6:
         84:d8:d5:d9:18:53:30:9a:2d:e5:53:d1:07:9c:ff:ae:4c:37:
         d7:ae:c2:63:18:16:29:74:da:63:b5:e4:3a:a3:2f:9e:90:03:
         2e:66:52:3a:13:ce:31:fe:8b:49:32:f6:be:d0:78:46:ad:f4:
         ff:42:41:6b:57:d3:47:9d:e5:9c:0a:26:78:d8:2e:b4:66:7a:
         32:de:f4:58:73:75:6a:b8:21:9b:16:85:7c:c6:1d:c7:b7:63:
         dd:a0:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----