Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/323830313a31303a3a2f34352d3438203d3e203238303638.roa
File:                     323830313a31303a3a2f34352d3438203d3e203238303638.roa (raw, json)
Hash identifier:          QcDJdhf0I7bWquVFskAiTNUQOmK/lIj+0USGOmZP9B8=
Subject key identifier:   48:D0:57:BA:56:D2:D4:71:3F:A4:34:34:46:42:A6:37:A8:5E:F6:3B
Certificate issuer:       /CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
Certificate serial:       58F967F7DC6A850DA04BC01470E925B95D981ADF
Authority key identifier: F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/323830313a31303a3a2f34352d3438203d3e203238303638.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     28068
IP address blocks:        2801:10::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f9:67:f7:dc:6a:85:0d:a0:4b:c0:14:70:e9:25:b9:5d:98:1a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=48D057BA56D2D4713FA434344642A637A85EF63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:b5:15:10:fc:49:c7:c2:70:cc:ce:7f:c2:
                    36:d8:a2:77:e0:3d:ce:6d:f0:6b:88:81:0b:43:84:
                    61:75:c8:f3:a5:0f:6b:ce:23:9a:f4:97:e1:c0:63:
                    b9:c6:75:ee:5d:51:90:9a:44:e6:55:19:b7:eb:61:
                    cf:af:71:26:9e:8b:e5:80:8d:2f:32:1e:a7:bb:03:
                    e3:34:66:05:f6:7f:6a:a5:6f:65:c0:47:4c:b9:16:
                    26:de:e5:75:7d:6c:61:f3:e7:f4:a7:8c:37:3a:14:
                    c0:da:d1:0c:17:7f:13:e0:b5:cf:95:27:35:23:bb:
                    a9:46:78:57:98:7d:16:93:67:bc:3e:1c:bf:c3:71:
                    83:b3:56:b9:58:8c:64:96:55:f5:d3:c9:4e:83:62:
                    5b:f6:12:c2:59:44:23:c5:92:ca:53:79:7b:c2:e0:
                    f6:6c:36:ac:fa:06:96:e2:61:66:63:54:bd:ce:83:
                    c0:53:cb:38:c8:1d:0c:94:91:66:01:e3:2b:dd:b0:
                    5e:46:ca:32:21:d8:7e:28:95:6c:cb:4b:5c:25:51:
                    b1:03:77:20:40:5d:25:97:dc:d9:d7:85:6a:77:63:
                    bf:da:33:a9:db:1c:06:cc:b6:ff:6c:9a:34:97:7f:
                    1d:54:07:a4:1a:56:05:db:ce:97:1b:cb:41:26:c0:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D0:57:BA:56:D2:D4:71:3F:A4:34:34:46:42:A6:37:A8:5E:F6:3B
            X509v3 Authority Key Identifier:
                keyid:F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/323830313a31303a3a2f34352d3438203d3e203238303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10::/45

    Signature Algorithm: sha256WithRSAEncryption
         41:c1:f0:69:66:b8:a6:7e:20:cf:c2:84:d4:16:8d:dd:af:ed:
         8c:3d:45:3c:11:e3:21:62:8f:43:e2:6e:55:20:36:d1:4d:33:
         e2:d4:85:6f:c3:a1:0f:0e:cd:31:61:1e:b8:e9:53:2b:e3:2c:
         9b:4a:36:4e:60:20:c6:4e:50:4e:10:b2:b6:49:1a:b9:43:81:
         0f:f1:c0:5e:ae:3b:ff:31:3a:94:56:5b:4d:c3:d0:dd:b6:df:
         e2:30:85:20:72:4f:08:8d:da:5c:e2:aa:6c:67:51:d3:50:ce:
         e3:ce:9c:cc:63:36:97:08:41:68:38:45:90:5e:b8:92:ca:5b:
         94:e9:aa:81:3b:dc:be:19:8a:40:de:f6:43:69:eb:9d:15:ca:
         a0:a9:c8:18:e1:26:96:a1:e3:ff:14:91:41:b8:52:4a:85:e4:
         86:87:0b:39:96:ec:82:a8:62:71:91:86:17:b1:bd:b2:b7:ce:
         41:93:57:30:6f:b7:fa:ad:d7:26:f0:74:b8:19:98:39:91:16:
         b1:24:ba:89:9f:fa:e9:c9:f6:d6:02:86:6f:90:34:3c:06:9d:
         ae:8f:02:bd:a5:e4:e7:b4:bb:27:47:83:f6:32:c1:17:23:8f:
         ce:67:18:b7:1a:92:57:cd:49:bd:5f:34:a1:7a:97:7a:89:0a:
         ae:f0:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----