Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/323830333a313330303a3a2f33322d3634203d3e203532323633.roa
File:                     323830333a313330303a3a2f33322d3634203d3e203532323633.roa (raw, json)
Hash identifier:          XNP8UMhW2Pg3ERevpCY0xsKdlvJECu2vqf73akXj2JQ=
Subject key identifier:   CF:71:66:05:DD:DC:EE:5B:9C:A7:2F:D6:02:1B:AF:69:F9:D7:D0:24
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       6FF12AE75B2B97598C55769FE87F312FEABCB899
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/323830333a313330303a3a2f33322d3634203d3e203532323633.roa
Signing time:             Tue 05 Mar 2024 18:19:47 +0000
ROA not before:           Tue 05 Mar 2024 18:14:47 +0000
ROA not after:            Tue 04 Mar 2025 18:19:47 +0000
asID:                     52263
IP address blocks:        2803:1300::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f1:2a:e7:5b:2b:97:59:8c:55:76:9f:e8:7f:31:2f:ea:bc:b8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Mar  5 18:14:47 2024 GMT
            Not After : Mar  4 18:19:47 2025 GMT
        Subject: CN=CF716605DDDCEE5B9CA72FD6021BAF69F9D7D024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:5f:f5:da:a3:74:eb:6c:20:f7:2b:04:1c:
                    e1:4f:56:d5:90:05:54:63:ae:f6:7d:1f:ce:d5:16:
                    7b:b3:fc:73:82:7b:39:d8:16:66:f3:66:cb:f5:bd:
                    76:ab:64:69:a5:ce:4f:94:11:bc:cf:ae:df:c7:60:
                    8b:24:02:ce:8c:a5:8a:79:04:4c:f3:e1:e0:c7:ec:
                    25:65:0b:8b:31:48:10:ca:85:55:6d:81:6b:44:28:
                    6e:3a:12:37:2b:9e:1e:b9:50:db:18:d5:53:ad:7d:
                    66:58:50:0b:df:47:80:3c:62:7d:a6:ae:22:db:ce:
                    5a:e6:53:6c:58:2e:55:f7:83:49:cd:b2:52:34:a6:
                    e2:f7:5a:9c:37:b3:d9:65:2a:53:6a:5c:66:46:45:
                    01:55:c9:d5:61:80:87:2f:2e:1f:d7:54:2c:d7:85:
                    7a:52:85:c8:e6:da:85:97:61:d6:6b:65:db:0f:2f:
                    78:d6:6d:c0:1d:2a:7d:e2:6a:42:d6:40:6e:01:a5:
                    5e:34:80:c4:0f:a4:34:00:2a:ed:60:d5:b1:2e:3a:
                    0c:97:69:60:a4:1d:3c:3e:a6:f9:db:b9:99:12:82:
                    5a:bf:ba:3e:0b:8b:0d:23:7d:e4:df:70:80:0a:d6:
                    d6:b8:8f:3e:8d:2d:10:c4:83:69:10:94:39:af:f5:
                    64:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:66:05:DD:DC:EE:5B:9C:A7:2F:D6:02:1B:AF:69:F9:D7:D0:24
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/323830333a313330303a3a2f33322d3634203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1300::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:b2:de:88:28:22:5b:e1:0b:53:d4:a8:5d:84:e8:f9:aa:3c:
         b4:a6:51:29:b7:65:d2:fd:60:7d:92:b6:c8:f2:f0:7c:b4:35:
         51:dd:12:b0:9d:7b:55:f9:e5:87:d7:87:c2:9f:37:84:c5:cf:
         e8:b4:db:ec:b2:8d:ac:31:55:38:e7:ed:c5:58:d2:f7:0c:f3:
         da:a8:73:bb:e4:48:c7:f4:94:c1:92:f4:03:d0:dc:65:b9:4f:
         0d:ba:7f:87:1a:4f:44:f9:e6:36:b1:18:bc:99:dc:09:35:e1:
         7e:59:e7:9d:de:91:4f:80:25:0e:fa:3f:97:f8:f3:fc:a2:70:
         04:e3:42:9b:6a:3e:6c:a9:6b:57:ce:31:37:f4:c9:9b:98:92:
         02:e7:d0:4a:19:4d:6f:c7:1c:6d:49:f8:57:33:10:12:78:f3:
         5e:70:4b:51:52:01:23:6b:23:e2:ce:a0:1b:2b:c2:99:b0:58:
         70:3b:ea:05:69:26:57:7a:54:a6:4c:b6:92:a2:26:2d:6d:f5:
         75:4f:c7:dc:53:05:4b:42:e2:2f:a2:1b:e8:d8:eb:c6:ef:d9:
         1a:8f:9e:4b:0a:bc:cf:ee:18:ff:db:27:cb:de:50:8b:57:5d:
         91:73:84:b3:ff:37:f1:e6:49:bd:2c:2c:bc:d7:37:c2:ff:9c:
         47:b3:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----