Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/323830333a386430303a3a2f33322d3438203d3e203237393838.roa
File:                     323830333a386430303a3a2f33322d3438203d3e203237393838.roa (raw, json)
Hash identifier:          M9DUa0uQijn2dD5KSdUH0JMURkswOsV+khmK8yDX4/o=
Subject key identifier:   AA:45:5D:BD:02:F5:52:1D:B8:95:28:90:89:A2:C9:78:D9:98:6F:ED
Certificate issuer:       /CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
Certificate serial:       40A1622C6302EDEB3D2D2AEAC82D78B6D595A51B
Authority key identifier: DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/323830333a386430303a3a2f33322d3438203d3e203237393838.roa
Signing time:             Tue 05 Mar 2024 18:09:07 +0000
ROA not before:           Tue 05 Mar 2024 18:04:07 +0000
ROA not after:            Tue 04 Mar 2025 18:09:07 +0000
asID:                     27988
IP address blocks:        2803:8d00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a1:62:2c:63:02:ed:eb:3d:2d:2a:ea:c8:2d:78:b6:d5:95:a5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7E31CF805B81CB499CF0807375C76F26BC2117
        Validity
            Not Before: Mar  5 18:04:07 2024 GMT
            Not After : Mar  4 18:09:07 2025 GMT
        Subject: CN=AA455DBD02F5521DB895289089A2C978D9986FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:74:64:a3:e0:68:33:82:7d:82:a1:96:17:
                    1f:24:f0:4e:63:ee:15:d4:8a:0a:a2:42:2d:60:92:
                    60:9e:fc:32:3b:3a:98:9f:cf:56:91:91:33:22:24:
                    e3:3e:a9:8d:69:83:75:a0:af:9c:82:93:2f:70:71:
                    04:02:86:1d:ed:94:3a:6b:9b:eb:46:82:bf:85:c7:
                    bd:04:63:73:e1:71:4e:e1:b6:9d:3d:c6:b8:5e:e2:
                    bc:f5:29:6c:27:71:47:80:29:b4:08:fe:2b:db:e4:
                    2f:8f:39:89:cc:65:a5:9a:13:9c:01:06:3c:43:1c:
                    f5:25:18:f6:b9:6e:35:e1:b5:fb:1e:89:db:45:a7:
                    06:fd:77:4c:fc:2c:69:03:16:c9:1a:23:27:67:ce:
                    e6:aa:4f:e4:d4:8e:85:ad:e9:7e:c4:e7:aa:31:4a:
                    b9:80:53:72:1e:be:c1:d4:d4:1b:dd:40:e9:bf:6c:
                    21:5e:38:c5:c8:ed:ed:d4:7e:03:13:ea:fe:70:c2:
                    c5:cb:52:21:16:c6:6c:ae:50:d1:29:ec:48:f8:b8:
                    a7:a7:7d:46:1b:d8:e1:fa:f6:f9:93:86:39:66:77:
                    91:9e:aa:94:04:01:07:5d:89:14:44:5c:94:36:20:
                    dc:c3:3d:26:63:73:10:cd:75:7b:0c:3b:f1:8d:c1:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:45:5D:BD:02:F5:52:1D:B8:95:28:90:89:A2:C9:78:D9:98:6F:ED
            X509v3 Authority Key Identifier:
                keyid:DC:7E:31:CF:80:5B:81:CB:49:9C:F0:80:73:75:C7:6F:26:BC:21:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC7E31CF805B81CB499CF0807375C76F26BC2117.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0248B8B40C06DB6031A12D4C78E102F32790EB2FD0CCA4B5F36CFA9FAB1559C/0/323830333a386430303a3a2f33322d3438203d3e203237393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:ea:68:08:c1:93:fc:03:af:55:43:4d:4f:aa:23:1f:37:7f:
         f1:20:88:07:63:84:83:06:33:7e:3d:1b:a4:2f:b9:ba:69:55:
         3e:a0:46:4c:d7:9b:c3:e7:09:20:a4:28:3d:8a:33:1b:50:c4:
         01:3f:6b:28:f4:4c:35:66:3a:e6:82:25:df:09:3f:13:91:a4:
         f2:14:c4:5e:d6:6d:ad:92:dd:a3:4d:04:8c:ab:13:1d:0d:33:
         b6:7b:ff:6f:6b:ff:c9:ea:b6:e3:64:4a:95:55:14:e4:91:f3:
         b2:31:fc:88:f5:f7:26:e8:50:50:65:7d:e1:80:b4:10:17:c5:
         9b:76:ba:46:8a:75:6f:91:6c:9a:c8:9b:00:d5:a4:18:df:d8:
         6b:25:f3:31:a7:af:f9:73:56:af:31:7b:16:20:1b:6f:da:84:
         c3:59:33:99:71:ad:55:b9:6b:b2:79:fa:25:bb:e8:a2:ec:de:
         8f:4b:bd:52:07:4e:65:e5:19:98:b6:a9:f2:a1:4b:fd:0a:f8:
         c4:45:af:54:e4:47:f0:df:81:23:4c:c4:70:f0:85:04:7a:03:
         d1:4b:12:98:33:a4:97:6b:6a:ef:6c:ab:de:96:32:21:ed:1d:
         b7:41:fd:6b:81:89:bd:ec:9c:2a:b1:7a:ff:42:10:56:66:cf:
         02:5b:30:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----