Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/323830333a663963303a3a2f33322d3332203d3e20323635373038.roa
File:                     323830333a663963303a3a2f33322d3332203d3e20323635373038.roa (raw, json)
Hash identifier:          L1YGFsyLRZnIq1af0lYemedndJ+tOkl6XlgsHDk02c8=
Subject key identifier:   9A:0F:AB:98:FA:17:E0:E9:B5:13:9E:45:79:8E:E0:8B:84:CF:5B:E0
Certificate issuer:       /CN=749800288DD85BE233671D21F84E85060EC5FBAD
Certificate serial:       7527BF8F56767A4DA0B05BFBCAFC2A3B0C89B836
Authority key identifier: 74:98:00:28:8D:D8:5B:E2:33:67:1D:21:F8:4E:85:06:0E:C5:FB:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/323830333a663963303a3a2f33322d3332203d3e20323635373038.roa
Signing time:             Tue 05 Mar 2024 17:43:20 +0000
ROA not before:           Tue 05 Mar 2024 17:38:20 +0000
ROA not after:            Tue 04 Mar 2025 17:43:20 +0000
asID:                     265708
IP address blocks:        2803:f9c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:27:bf:8f:56:76:7a:4d:a0:b0:5b:fb:ca:fc:2a:3b:0c:89:b8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749800288DD85BE233671D21F84E85060EC5FBAD
        Validity
            Not Before: Mar  5 17:38:20 2024 GMT
            Not After : Mar  4 17:43:20 2025 GMT
        Subject: CN=9A0FAB98FA17E0E9B5139E45798EE08B84CF5BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:d3:ab:33:96:74:f3:fe:d0:95:eb:91:01:
                    92:97:47:9b:49:5c:f8:bc:cc:e3:ab:65:5f:55:bf:
                    78:cb:dd:59:31:ab:54:f0:c1:ae:af:00:b1:6b:4d:
                    3c:29:42:62:35:0c:1c:cf:ae:0a:f7:ae:d3:23:24:
                    82:7c:1e:ed:bc:04:ef:d1:5f:ff:a5:c4:45:45:68:
                    49:7a:68:17:55:c8:2c:e2:15:5d:e2:00:ca:28:39:
                    75:0e:d3:1c:db:5c:61:05:f9:d2:e5:7c:c0:eb:2b:
                    c5:ec:c1:dc:93:30:9b:ed:b1:02:51:29:f4:1d:73:
                    f2:a4:c2:87:d6:46:68:39:68:15:9d:1f:5a:9f:47:
                    cc:1b:37:3f:05:e4:9d:0f:fe:eb:4d:7b:c7:fb:82:
                    37:a3:8f:cb:97:e6:2f:fd:1a:d7:78:b1:26:32:cb:
                    44:48:3e:25:ed:54:04:10:96:78:9c:d0:87:3d:1b:
                    b6:3f:ff:5c:72:08:5b:f5:76:d1:9b:e7:cd:9b:a5:
                    a1:b4:f7:e4:03:94:69:c3:6a:01:c6:ea:99:bc:55:
                    26:b5:e1:59:73:28:e3:af:46:e0:da:b0:d6:0f:7a:
                    15:e4:c3:b7:37:29:bb:5f:84:fc:63:6a:07:0d:8e:
                    c2:2a:0e:9b:13:ed:40:7b:cb:5a:ad:6f:08:ab:ee:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0F:AB:98:FA:17:E0:E9:B5:13:9E:45:79:8E:E0:8B:84:CF:5B:E0
            X509v3 Authority Key Identifier:
                keyid:74:98:00:28:8D:D8:5B:E2:33:67:1D:21:F8:4E:85:06:0E:C5:FB:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/749800288DD85BE233671D21F84E85060EC5FBAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/749800288DD85BE233671D21F84E85060EC5FBAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9A324A5A93450CA01BE80C9CE83E8D8F298F57AADE43D57EF55AEF5C3AE89FD8/0/323830333a663963303a3a2f33322d3332203d3e20323635373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:ce:a9:fc:27:72:d7:a0:d9:c5:a9:9d:c0:58:85:d5:e4:66:
         a2:cb:23:5e:4f:6e:0d:79:71:0c:ce:6c:cf:b3:4d:3b:18:fc:
         ae:84:bd:a8:8b:dc:70:02:10:53:33:41:35:45:59:dc:8e:cb:
         50:be:d1:33:b2:37:34:31:e1:c8:61:57:a3:25:9b:ee:b6:17:
         d5:41:43:9b:07:52:09:41:63:07:d7:af:4c:b0:e8:4c:3e:16:
         79:6a:a1:72:66:88:4d:51:40:83:34:ae:12:87:70:27:56:e3:
         8f:20:a2:d6:30:c3:fb:ba:e9:08:17:b5:60:a3:f1:34:40:c8:
         2f:03:23:f2:b0:7a:d3:a4:c2:29:fa:db:f7:95:87:77:9b:0b:
         04:6e:47:33:86:ed:61:13:ec:94:e5:38:3b:c5:87:04:f2:90:
         5a:d9:cd:f9:cd:01:6f:42:a2:95:2d:d3:91:76:81:b4:5a:45:
         05:23:a5:ff:43:52:86:aa:82:51:20:bc:20:5f:c4:8c:7c:a1:
         d9:d5:ce:8d:73:00:ae:9d:e4:b0:8d:05:b5:da:cf:65:4e:09:
         1a:3a:9f:39:c2:5b:c7:0a:83:f4:cc:13:67:a4:6b:bd:02:04:
         2b:e7:c5:a2:53:0b:fe:d9:b6:05:38:04:c3:ba:9d:64:b8:9a:
         81:33:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----