Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830303a6234303a3a2f33322d3438203d3e20323632323230.roa
File:                     323830303a6234303a3a2f33322d3438203d3e20323632323230.roa (raw, json)
Hash identifier:          a5MnQbwJGNxl8g2H4oMNfESfdcL0dnqxtnG5kfMqKBk=
Subject key identifier:   41:8B:DE:98:2D:AA:14:84:48:8C:F4:51:1E:30:D1:DF:65:63:CE:33
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       2B650DE3805A3E07827CC3D8DAF9FD6D358795C0
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830303a6234303a3a2f33322d3438203d3e20323632323230.roa
Signing time:             Tue 05 Mar 2024 17:57:37 +0000
ROA not before:           Tue 05 Mar 2024 17:52:37 +0000
ROA not after:            Tue 04 Mar 2025 17:57:37 +0000
asID:                     262220
IP address blocks:        2800:b40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:65:0d:e3:80:5a:3e:07:82:7c:c3:d8:da:f9:fd:6d:35:87:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Mar  5 17:52:37 2024 GMT
            Not After : Mar  4 17:57:37 2025 GMT
        Subject: CN=418BDE982DAA1484488CF4511E30D1DF6563CE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e2:31:8f:82:a8:0a:e8:c5:e2:4e:dc:2d:8e:
                    5b:92:e3:d6:67:ab:d8:bd:75:b0:da:5e:79:58:b8:
                    44:86:89:c3:ab:ed:8b:a6:3f:e2:70:0e:bb:c8:05:
                    20:7f:bf:4f:0f:e3:37:94:14:9d:69:79:65:81:66:
                    69:8b:51:b6:b0:c3:e4:7f:d3:be:b2:b7:e3:fd:ec:
                    fe:98:b7:77:a4:82:18:54:85:75:8f:d3:52:36:d0:
                    a4:16:75:ba:75:47:21:f3:a9:a3:f9:a6:00:05:06:
                    1c:a4:e9:b6:42:e2:90:0a:46:a8:9e:51:3d:e9:9f:
                    e5:60:2f:44:23:b7:93:e8:59:a5:89:ed:ea:72:6c:
                    16:cc:46:ef:7e:ba:71:cc:83:35:ad:fc:95:15:54:
                    18:0b:23:53:1d:4d:74:4f:d7:56:87:c4:47:1e:ba:
                    5a:15:0e:20:65:c1:68:55:60:9b:e1:f4:6b:de:39:
                    63:a4:a4:fe:4e:2f:12:43:4c:42:6b:d5:5d:e7:d5:
                    6b:91:ec:e7:b4:e1:6f:87:df:d7:56:42:57:41:ad:
                    ae:4d:8e:f6:ab:ac:a8:bf:dc:e2:9e:ff:2f:be:c5:
                    b0:01:0f:62:12:11:10:10:82:19:71:57:fd:8e:95:
                    cd:9c:06:cf:f2:22:e0:b6:aa:fb:2d:d9:6a:bf:e9:
                    22:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8B:DE:98:2D:AA:14:84:48:8C:F4:51:1E:30:D1:DF:65:63:CE:33
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/323830303a6234303a3a2f33322d3438203d3e20323632323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:6c:08:3f:7f:77:98:84:9b:c2:ee:c7:7c:19:46:52:42:2d:
         3c:e6:96:29:a2:8d:7c:91:50:07:ef:2b:40:98:71:07:d6:b4:
         bd:dc:87:97:32:51:eb:6f:62:08:7a:f2:cc:16:b3:21:92:e5:
         57:a1:12:b1:db:6c:93:6e:96:05:94:2f:e4:bb:3a:8e:66:f9:
         80:e4:37:b7:9f:ab:4b:f8:ce:d1:e3:e6:3a:d4:d2:df:82:ef:
         2b:66:59:f3:7e:ca:7c:5d:a4:28:eb:5d:5c:4b:cf:e0:22:dc:
         8b:b8:76:38:64:33:48:2d:3d:f5:a0:02:89:78:a2:c2:52:14:
         75:b7:b0:db:ef:54:a9:78:0e:d4:2b:41:8c:7f:a6:4d:0b:d1:
         10:37:51:02:8e:a9:92:94:15:d5:b2:8c:43:90:41:1a:f9:86:
         f8:31:7c:0f:fb:05:bd:0b:7a:59:58:8c:2a:81:e3:03:06:92:
         03:77:13:67:c0:e8:55:55:a6:19:1c:24:c9:2a:54:10:57:ac:
         ab:62:5b:f8:5f:0c:1d:c5:cc:68:ad:f0:a2:22:6a:d2:de:52:
         f5:66:da:9b:f6:ba:08:15:c0:39:8f:d9:e8:3f:bf:c2:e4:fc:
         38:b2:f9:68:e7:ba:3d:aa:51:4c:a5:0c:dc:d7:a0:40:04:cf:
         27:a2:19:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----