Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/323830333a3138303a3a2f33322d3332203d3e203238303336.roa
File:                     323830333a3138303a3a2f33322d3332203d3e203238303336.roa (raw, json)
Hash identifier:          Af2oILVqBa2+NP3wWyMrtL6+I63IuK2fzXW2g6koFlA=
Subject key identifier:   78:1C:E4:55:BA:61:56:E1:8C:04:4C:14:07:7D:12:57:15:2F:41:FC
Certificate issuer:       /CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
Certificate serial:       3DCEEB8CDBEF8FD4EE9589BD67D5ECCAF542F269
Authority key identifier: 9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/323830333a3138303a3a2f33322d3332203d3e203238303336.roa
Signing time:             Wed 18 Dec 2024 17:50:00 +0000
ROA not before:           Wed 18 Dec 2024 17:45:00 +0000
ROA not after:            Wed 17 Dec 2025 17:50:00 +0000
asID:                     28036
IP address blocks:        2803:180::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ce:eb:8c:db:ef:8f:d4:ee:95:89:bd:67:d5:ec:ca:f5:42:f2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2FC3FC04DC1462BC6896341B228F48B6AA06E2
        Validity
            Not Before: Dec 18 17:45:00 2024 GMT
            Not After : Dec 17 17:50:00 2025 GMT
        Subject: CN=781CE455BA6156E18C044C14077D1257152F41FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:ed:38:51:68:e6:1b:33:89:70:26:c7:f8:
                    6d:f6:d2:e5:97:a0:ee:a1:46:bc:82:8e:60:44:68:
                    9b:7c:e9:70:7e:67:07:96:8d:b0:25:04:40:38:ad:
                    25:67:d0:87:82:e9:8a:ca:30:ea:80:5a:32:b7:13:
                    3a:58:8d:ad:31:3f:f0:71:b2:76:2d:9c:9a:2f:e1:
                    63:4d:1a:02:b3:fb:80:42:48:32:04:23:28:91:3a:
                    a6:3b:27:45:eb:68:86:2d:29:a8:79:43:93:2b:b4:
                    67:84:e8:e8:47:6c:db:0b:64:bd:0f:9f:85:d4:18:
                    f4:c4:3b:6a:7d:8a:8f:6a:ca:6b:96:35:eb:06:6f:
                    7b:f8:5b:ba:af:24:28:15:26:23:64:b9:e8:ae:64:
                    ec:45:38:5d:18:f4:71:37:0b:bf:24:fb:f0:d6:66:
                    2c:d7:1c:53:cb:cb:fa:c2:b6:4f:9d:19:33:31:cb:
                    03:e5:15:ef:72:49:f9:7f:77:a4:b2:ed:d5:74:cf:
                    64:7c:05:e1:23:e9:8b:34:c3:ba:93:3c:d2:af:6d:
                    f0:2d:41:a9:7a:c0:23:d2:93:85:91:47:08:ab:4d:
                    08:5b:79:3d:cc:17:96:03:5b:54:e3:d7:da:fd:cc:
                    a7:3e:62:41:2c:80:dc:00:b9:b7:49:ad:f1:e2:70:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1C:E4:55:BA:61:56:E1:8C:04:4C:14:07:7D:12:57:15:2F:41:FC
            X509v3 Authority Key Identifier:
                keyid:9F:2F:C3:FC:04:DC:14:62:BC:68:96:34:1B:22:8F:48:B6:AA:06:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2FC3FC04DC1462BC6896341B228F48B6AA06E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/323830333a3138303a3a2f33322d3332203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:180::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:92:ee:b1:8f:c5:04:c1:38:92:b2:e8:74:a3:0e:a4:64:1e:
         ed:de:1d:fa:1d:31:04:e8:f5:ff:2f:15:a7:02:3c:20:76:33:
         ca:e6:a8:b1:68:2a:a0:f9:84:23:34:a8:2a:7f:63:01:53:24:
         2f:36:16:09:2b:01:ba:a3:e2:3f:98:11:54:d8:ae:44:dd:36:
         14:b4:48:74:e3:ac:66:2a:5c:21:12:29:2e:20:34:89:2d:a7:
         9f:27:6d:58:d6:5b:69:e3:76:02:4d:5c:76:4d:62:23:ef:b2:
         61:ba:56:fd:c1:f5:ba:d8:57:59:f5:cc:cb:db:a9:ba:65:bd:
         93:d9:ce:6c:c3:6a:3f:0a:2f:16:db:f8:54:c8:c7:21:66:cd:
         e0:b3:4b:4a:28:78:53:71:c6:6d:b9:f9:2d:e5:83:45:1e:12:
         57:52:67:21:53:5f:df:b7:fc:4b:5a:e2:dc:19:af:0e:ce:fd:
         f3:57:d7:0f:ed:84:b3:15:ae:8e:20:93:ba:80:d5:ea:c3:f6:
         b1:cb:5b:a1:1a:98:e6:29:b2:27:94:3d:83:f1:74:ce:b7:6e:
         fc:10:40:ee:56:df:9a:71:55:60:de:53:aa:a3:2b:f2:9d:b0:
         71:03:59:c0:e1:17:47:c0:ba:24:6a:77:f2:25:51:67:de:a2:
         59:99:58:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----