Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/323830333a373738303a3a2f33322d3438203d3e20323633373235.roa
File:                     323830333a373738303a3a2f33322d3438203d3e20323633373235.roa (raw, json)
Hash identifier:          ZLYNtfIyE8J0Hvci47jieX6Mv82pYsQAu4CN7Sw9ya8=
Subject key identifier:   7D:F2:9B:01:EC:16:9E:F7:CE:B2:E0:DB:F1:E8:AF:D8:7B:93:BE:8F
Certificate issuer:       /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial:       4BB64D944F240B440EA2388B647FBBBA2985A9CF
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/323830333a373738303a3a2f33322d3438203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 18:09:42 +0000
ROA not before:           Tue 05 Mar 2024 18:04:42 +0000
ROA not after:            Tue 04 Mar 2025 18:09:42 +0000
asID:                     263725
IP address blocks:        2803:7780::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b6:4d:94:4f:24:0b:44:0e:a2:38:8b:64:7f:bb:ba:29:85:a9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
        Validity
            Not Before: Mar  5 18:04:42 2024 GMT
            Not After : Mar  4 18:09:42 2025 GMT
        Subject: CN=7DF29B01EC169EF7CEB2E0DBF1E8AFD87B93BE8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5f:15:25:fe:b2:a1:57:92:11:9b:07:6e:dc:
                    d3:a8:fb:ff:c8:67:7c:b1:ad:2b:d6:df:d0:12:03:
                    28:0c:d6:f3:4b:79:09:7c:6b:35:51:69:61:ce:7a:
                    78:81:71:a5:c4:2d:fc:50:62:42:c2:6a:61:d5:16:
                    07:5a:56:9a:91:9b:36:ce:ed:26:3a:8a:0c:aa:b1:
                    b6:53:c0:4f:c1:ef:aa:ea:9f:13:1f:66:14:5a:6d:
                    85:a7:27:86:45:41:76:9e:46:a0:55:80:c9:d3:27:
                    ef:21:25:ff:11:d7:c2:68:fc:32:ef:bb:6c:db:fc:
                    98:2a:94:9c:31:14:e9:28:19:2c:8c:3d:69:5f:8a:
                    d5:d4:3f:6a:67:54:a8:45:36:57:87:29:82:e9:7e:
                    ee:a1:ac:46:89:36:c6:70:76:2f:17:0b:09:a0:99:
                    a4:01:3b:b9:45:fa:1c:ed:af:3a:95:76:3c:6b:2b:
                    91:94:85:e7:04:24:f2:23:b1:c2:e6:8f:f7:ad:f1:
                    93:e3:81:29:9d:4b:a0:b9:70:ad:6f:d2:14:65:a5:
                    e5:ad:2f:55:42:78:cb:f7:81:8e:64:17:e2:73:ec:
                    3c:73:2c:e0:51:ae:c0:e1:77:43:c9:9a:6c:23:f1:
                    8b:2d:3e:61:a7:b8:43:d0:e6:1a:5c:19:cc:ea:1b:
                    69:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F2:9B:01:EC:16:9E:F7:CE:B2:E0:DB:F1:E8:AF:D8:7B:93:BE:8F
            X509v3 Authority Key Identifier:
                keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/323830333a373738303a3a2f33322d3438203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7780::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:ec:a8:4c:0a:cb:35:18:88:26:7f:bc:44:47:67:d7:13:af:
         24:18:58:bf:28:06:cf:f5:54:4d:7a:5a:c2:e2:f5:dd:59:fc:
         6d:6f:c8:12:30:3d:3b:46:68:36:6b:16:f1:c4:5b:4e:b1:00:
         3b:d7:54:e2:b5:24:84:f5:76:7a:62:a4:61:6a:ce:e8:aa:0a:
         32:62:bf:7f:b2:bc:88:51:54:dc:51:da:27:69:e4:eb:1d:df:
         4e:8e:46:9b:7d:9d:1b:a3:8c:4f:bc:bc:ee:7e:85:9a:47:ec:
         ff:1c:9e:0c:3d:58:a2:d5:28:46:71:17:7b:be:bc:5f:e7:08:
         3e:7f:9b:b4:32:87:13:a2:49:64:e5:36:92:40:36:63:0d:af:
         e9:dd:82:0c:d9:6f:01:d8:52:ff:5d:5a:05:1e:f1:83:18:1a:
         95:f4:32:ae:e7:61:9c:61:97:90:3b:1d:e3:31:6a:65:41:49:
         0a:8e:10:09:d2:97:2a:c9:df:2c:32:26:eb:1c:83:f4:88:93:
         a6:d4:02:d8:9d:73:7e:f6:62:b2:a6:2a:54:f9:61:2f:5b:96:
         81:cb:4a:a0:d5:92:83:52:0c:64:af:b5:78:93:94:96:67:6c:
         93:8c:6f:fc:8e:4e:df:7d:8a:24:1a:f9:fa:75:90:fc:94:cb:
         49:f0:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----