Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/323830333a323431303a3a2f33322d3332203d3e203532343638.roa
File:                     323830333a323431303a3a2f33322d3332203d3e203532343638.roa (raw, json)
Hash identifier:          g+9ftotlio2SOkMOC+tWzvuztg6eXf1vmE9qPHOScVE=
Subject key identifier:   B9:9F:3D:D3:63:7D:94:FB:2D:51:2A:09:35:CB:45:1F:56:82:DD:0D
Certificate issuer:       /CN=7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE
Certificate serial:       4F7A6A6416F895941B2A8122A03CA589DD582848
Authority key identifier: 7E:BE:7B:6F:DF:2C:92:F9:F4:A4:9E:B4:ED:8D:FA:C3:B5:A0:E4:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/323830333a323431303a3a2f33322d3332203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:10:25 +0000
ROA not before:           Tue 05 Mar 2024 18:05:25 +0000
ROA not after:            Tue 04 Mar 2025 18:10:25 +0000
asID:                     52468
IP address blocks:        2803:2410::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7a:6a:64:16:f8:95:94:1b:2a:81:22:a0:3c:a5:89:dd:58:28:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE
        Validity
            Not Before: Mar  5 18:05:25 2024 GMT
            Not After : Mar  4 18:10:25 2025 GMT
        Subject: CN=B99F3DD3637D94FB2D512A0935CB451F5682DD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:b6:5f:0b:60:7e:3d:1a:87:56:d2:de:cb:
                    ef:bf:c6:3a:44:ce:d5:e0:7e:ee:5e:5b:bc:5c:81:
                    eb:4b:bc:c8:09:95:e2:0c:8c:b4:b5:17:2a:c8:8a:
                    d4:c5:d8:54:27:b4:15:bb:56:70:d4:61:90:8f:5d:
                    92:d5:24:de:15:f7:ce:b2:b4:9a:a1:bf:1a:be:ea:
                    73:4b:48:23:be:59:87:a5:e1:ba:55:bb:b8:b1:59:
                    81:e8:47:5c:17:46:3a:3b:5e:c4:8f:4c:09:87:ba:
                    bb:54:22:51:fa:ee:dc:1e:cd:08:02:36:41:1c:6e:
                    0e:23:27:e9:2b:e9:80:34:e4:f5:2c:96:53:49:da:
                    c5:33:9b:6c:5e:dc:21:cf:37:3d:c1:13:c8:86:f9:
                    5d:d1:62:6a:15:ad:70:2a:fc:61:93:ca:cf:b7:ab:
                    68:c4:bf:2d:c6:df:52:bc:db:d9:21:3e:46:11:6c:
                    b3:11:e8:1a:76:13:65:c4:b8:12:ea:83:89:43:74:
                    41:b6:f5:2d:bf:b3:6c:15:56:3e:14:4c:5a:95:06:
                    84:95:59:02:71:21:3d:94:56:7a:6a:83:ec:c8:2c:
                    55:4b:cc:42:d9:90:88:b5:94:c1:37:b3:8c:6a:ac:
                    59:cc:01:21:ef:99:c1:fb:b0:1e:fc:da:b1:1e:20:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9F:3D:D3:63:7D:94:FB:2D:51:2A:09:35:CB:45:1F:56:82:DD:0D
            X509v3 Authority Key Identifier:
                keyid:7E:BE:7B:6F:DF:2C:92:F9:F4:A4:9E:B4:ED:8D:FA:C3:B5:A0:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EBE7B6FDF2C92F9F4A49EB4ED8DFAC3B5A0E4BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98F301C26DAF570EF3C7971D87C1B3A038EED748E1FF4688F1F124FD095E4D41/0/323830333a323431303a3a2f33322d3332203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2410::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:bc:a0:e4:07:e8:13:aa:f7:98:1d:10:2d:f2:d4:c7:62:7a:
         ca:b5:12:26:b8:1c:80:28:3e:fb:d4:ca:3d:4f:a0:56:9e:ca:
         0f:fa:39:a1:6b:b1:f4:12:2f:3f:55:55:69:1a:6b:65:a8:5d:
         e2:29:5e:0f:0f:65:72:a9:18:1a:b0:16:00:e3:fe:71:8f:61:
         2e:37:8f:4d:4b:75:b1:69:b4:12:9c:3e:8c:9f:ef:00:79:b7:
         f5:91:e0:50:e7:ba:cd:50:71:53:04:fd:14:1a:c5:08:5d:bb:
         57:3d:6f:99:8c:96:b6:7c:d1:59:63:95:a0:15:09:92:79:bc:
         42:6a:21:0d:7d:bc:9f:04:c0:d0:7d:7d:3b:53:22:02:c5:a9:
         69:fd:f4:62:d1:fa:2a:7f:da:e3:20:1f:10:f5:f9:65:89:de:
         e2:e3:ef:1d:51:d5:7e:f6:af:c7:93:7e:58:b6:c4:98:19:17:
         7b:02:69:c8:8d:cc:e1:35:db:f6:1f:8c:bf:f2:03:40:a5:11:
         c9:2a:29:03:d8:0d:9f:6b:ec:93:e8:10:36:9d:85:f0:45:cf:
         bb:67:95:39:d0:30:e5:57:9e:f6:e1:f2:b8:d5:5d:66:4a:81:
         74:d9:87:0a:bd:67:b2:7c:29:66:2f:3b:59:15:48:49:1a:6b:
         af:ac:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----