Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a31323a3a2f34382d3438203d3e20323731383734.roa
File:                     323830333a323534303a31323a3a2f34382d3438203d3e20323731383734.roa (raw, json)
Hash identifier:          Au7sybxbkKZ2DD9tu5BMbduGwOlEXHMqIxHSzt2tcYU=
Subject key identifier:   77:5A:BB:5A:2C:7E:C3:A8:EF:61:99:E1:59:E6:4E:7F:FE:9E:BA:95
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       17E0DEE04978939572737369254A028C39B443D9
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a31323a3a2f34382d3438203d3e20323731383734.roa
Signing time:             Tue 05 Mar 2024 18:21:07 +0000
ROA not before:           Tue 05 Mar 2024 18:16:07 +0000
ROA not after:            Tue 04 Mar 2025 18:21:07 +0000
asID:                     271874
IP address blocks:        2803:2540:12::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e0:de:e0:49:78:93:95:72:73:73:69:25:4a:02:8c:39:b4:43:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Mar  5 18:16:07 2024 GMT
            Not After : Mar  4 18:21:07 2025 GMT
        Subject: CN=775ABB5A2C7EC3A8EF6199E159E64E7FFE9EBA95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:2e:10:fd:cc:a0:4d:3e:be:44:fa:c6:d5:
                    04:15:1a:d4:c7:fe:07:ee:8a:36:28:9b:57:1d:03:
                    7a:f7:9e:d1:e6:14:b9:98:c9:b9:27:75:d9:71:bf:
                    03:07:17:39:23:1b:25:be:fe:35:07:7d:91:6d:ea:
                    76:6f:7e:34:af:da:87:b5:d8:fe:f4:64:49:1e:f6:
                    c4:00:cd:29:d0:ee:55:1f:de:05:2e:cc:cc:52:91:
                    c9:7b:e7:bc:cd:2d:37:48:fa:c5:ad:67:2f:07:62:
                    69:37:89:7e:a1:d5:c6:b3:37:f5:01:09:00:1a:46:
                    46:89:87:b0:d9:d2:ce:13:94:e3:99:8b:b3:b2:12:
                    f6:12:48:57:1d:2d:2c:97:b6:e4:34:3f:73:88:f3:
                    35:40:9a:67:25:54:0a:e2:7c:a5:d8:f4:6a:ef:27:
                    12:af:05:e6:77:5a:fe:d8:5a:b4:89:5d:ab:94:f3:
                    ef:d7:98:d5:7b:4a:2d:d3:09:99:f4:4f:14:06:98:
                    23:f5:db:57:5f:97:cf:b4:a2:1b:ca:65:ac:62:8a:
                    d3:0c:db:a9:d8:74:2d:90:4f:68:44:b9:bf:50:6b:
                    a5:d7:a9:e8:8e:2f:c5:d8:f7:27:ee:ec:0a:09:b4:
                    6e:36:c0:26:cb:eb:54:40:b9:95:f7:63:32:1f:91:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5A:BB:5A:2C:7E:C3:A8:EF:61:99:E1:59:E6:4E:7F:FE:9E:BA:95
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a31323a3a2f34382d3438203d3e20323731383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2540:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:a0:ad:44:54:78:ba:9d:59:66:07:18:a1:d2:28:b7:cd:18:
         62:5f:22:44:f1:5a:80:47:be:bf:ed:4d:61:5a:2a:3c:26:6c:
         c0:48:4e:6a:ba:26:a6:0d:a0:57:ab:4d:d3:8d:f4:85:b6:5c:
         bf:96:86:98:fe:50:db:10:e9:5b:52:af:dd:0a:41:c3:fd:e2:
         a2:66:7d:fc:7e:0e:b2:a3:6e:67:ac:47:68:a6:fb:bf:07:63:
         09:ba:21:a2:3d:f1:84:bd:9d:6f:45:1c:ed:a1:22:65:43:e6:
         f1:5b:ff:04:0f:05:d8:6b:25:1d:13:8a:9f:c5:de:e2:00:9b:
         5b:52:ff:ff:21:09:f1:60:51:53:a5:28:fb:88:73:26:18:a7:
         45:7e:c9:b2:8a:e9:76:fe:9a:c8:a6:ab:f1:21:f2:6e:7d:66:
         02:30:cd:a0:e8:6b:d3:ed:b3:79:d9:c7:16:f2:f4:cb:1c:34:
         a4:7f:0b:82:16:fa:ea:e8:1b:ce:7c:5b:0f:8c:6d:46:18:f3:
         3a:3b:69:c3:b4:15:1d:86:17:49:c6:76:25:fa:a3:eb:f0:e0:
         bc:1e:62:96:e7:29:a1:ba:45:ce:7f:10:6b:88:a0:3c:aa:9b:
         28:42:43:44:ec:d6:5f:b4:5e:11:df:73:13:d8:a6:0d:89:7f:
         d0:3b:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----