Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/323830333a646463303a3a2f33322d3332203d3e203237383535.roa
File:                     323830333a646463303a3a2f33322d3332203d3e203237383535.roa (raw, json)
Hash identifier:          gCyiMNDUJ0hM0OVuXZZtyvZXWwBG3MLdgTSIjUr0E9U=
Subject key identifier:   A7:90:95:C6:5D:DA:B3:A7:FC:E4:F2:06:70:D0:20:73:15:A9:FB:AB
Certificate issuer:       /CN=2D9B47B31B2096B35C9794693DF659896A6B49CE
Certificate serial:       7CCB4609843F526381951AD6CDDEFDBF8FDEEB44
Authority key identifier: 2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/323830333a646463303a3a2f33322d3332203d3e203237383535.roa
Signing time:             Tue 05 Mar 2024 17:41:44 +0000
ROA not before:           Tue 05 Mar 2024 17:36:44 +0000
ROA not after:            Tue 04 Mar 2025 17:41:44 +0000
asID:                     27855
IP address blocks:        2803:ddc0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cb:46:09:84:3f:52:63:81:95:1a:d6:cd:de:fd:bf:8f:de:eb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D9B47B31B2096B35C9794693DF659896A6B49CE
        Validity
            Not Before: Mar  5 17:36:44 2024 GMT
            Not After : Mar  4 17:41:44 2025 GMT
        Subject: CN=A79095C65DDAB3A7FCE4F20670D0207315A9FBAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:fe:7c:17:36:70:c8:d2:cf:84:6d:3e:ed:
                    c1:5d:e5:40:ce:b6:35:01:4a:e2:bb:aa:81:3b:00:
                    44:56:2b:c0:b4:86:a1:e3:11:74:b1:7f:b2:9a:35:
                    0b:dd:6a:31:0a:87:96:9e:9a:62:38:08:6a:6b:9c:
                    94:90:9b:a3:c6:69:f1:1f:b5:85:6d:ff:d8:df:bd:
                    c0:27:5e:33:7f:a1:e5:ff:f6:40:2c:4f:b6:dc:a8:
                    8c:8c:40:f1:06:72:81:ef:36:0d:8d:5d:22:9a:98:
                    94:31:7b:7e:97:3e:61:4f:c2:b4:90:52:ea:2b:bc:
                    47:74:cf:a2:7a:b7:e1:0f:0f:63:10:12:e3:76:41:
                    a2:48:80:2e:81:b2:8b:b7:75:48:29:cf:cd:5a:c6:
                    96:b0:8b:d7:d2:c8:b7:ac:8f:b6:ed:d3:54:db:75:
                    e9:19:a8:b3:26:2c:03:3c:63:76:7a:6d:61:03:36:
                    d0:8d:26:cb:00:a5:3e:65:09:8c:7e:cb:9b:ed:a5:
                    ab:c6:bb:48:c0:e1:8f:40:32:89:ec:de:c0:08:e7:
                    d1:4f:f5:ad:1b:af:0f:60:34:8d:eb:44:1d:41:2e:
                    c5:4a:94:8a:04:bb:9e:a2:9b:02:71:69:07:91:47:
                    05:d3:48:7e:de:79:39:2d:c1:39:9f:5a:dd:01:03:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:90:95:C6:5D:DA:B3:A7:FC:E4:F2:06:70:D0:20:73:15:A9:FB:AB
            X509v3 Authority Key Identifier:
                keyid:2D:9B:47:B3:1B:20:96:B3:5C:97:94:69:3D:F6:59:89:6A:6B:49:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D9B47B31B2096B35C9794693DF659896A6B49CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8821A5F06E8036E9E1AE0DFE027EE6076D72DCC6BC2655EA3BFDD6274FAD7E4/0/323830333a646463303a3a2f33322d3332203d3e203237383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ddc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:3d:68:a6:f0:a5:97:f3:a2:6d:04:e1:a3:e9:7c:86:88:17:
         d1:0e:a7:99:e2:f2:78:e5:ce:68:42:c7:4a:93:ab:29:c0:d6:
         1a:6c:20:2d:bc:ff:d9:23:ed:5d:8c:23:3d:c0:4e:af:aa:8a:
         10:bc:80:e9:01:00:45:c4:f2:a6:15:27:bc:85:b9:81:b2:85:
         67:57:1a:02:77:d0:4e:37:1a:79:58:26:7b:84:9d:70:27:56:
         86:57:20:95:f9:c8:0f:54:9a:cd:1c:cd:d9:fb:63:81:8b:63:
         99:44:62:1d:ac:9d:40:71:55:a6:bc:1b:29:5c:f2:9f:5d:29:
         d0:86:47:6f:04:48:2b:c7:ed:94:ab:31:8c:ce:59:9f:e0:95:
         9a:1c:83:ca:af:52:c9:b8:01:82:65:1b:39:75:07:7e:ef:1d:
         b1:f6:c7:ac:72:29:b6:31:51:8d:87:47:66:31:a7:77:20:d1:
         14:c9:5f:3a:98:58:83:8a:9f:dd:4d:5c:9d:a3:23:8a:2b:c7:
         d2:d4:ee:99:f9:7d:64:5b:9e:10:6e:71:ef:f8:5e:a9:3f:81:
         df:be:e9:f4:2f:25:cd:48:c0:d3:06:32:7d:c4:a9:bd:41:0e:
         1e:82:d6:25:8c:6b:fb:c2:37:33:b3:67:7f:cd:5f:0b:cd:f1:
         42:12:b7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----