Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/323830333a613738303a3a2f33322d3332203d3e20323633373136.roa
File:                     323830333a613738303a3a2f33322d3332203d3e20323633373136.roa (raw, json)
Hash identifier:          wQY38TDelp8+pgnxts9VMBxXN0qHvmhsXMT60zywaiY=
Subject key identifier:   67:FE:78:87:EA:27:82:A2:75:0E:29:A3:5B:B2:38:8F:75:4C:D6:6C
Certificate issuer:       /CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04
Certificate serial:       282724FA6BD40ED4717382B7F31611A835CB3C6D
Authority key identifier: 48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/323830333a613738303a3a2f33322d3332203d3e20323633373136.roa
Signing time:             Tue 05 Mar 2024 18:06:44 +0000
ROA not before:           Tue 05 Mar 2024 18:01:44 +0000
ROA not after:            Tue 04 Mar 2025 18:06:44 +0000
asID:                     263716
IP address blocks:        2803:a780::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:27:24:fa:6b:d4:0e:d4:71:73:82:b7:f3:16:11:a8:35:cb:3c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04
        Validity
            Not Before: Mar  5 18:01:44 2024 GMT
            Not After : Mar  4 18:06:44 2025 GMT
        Subject: CN=67FE7887EA2782A2750E29A35BB2388F754CD66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:d5:94:75:3c:f3:a3:03:15:f0:8d:41:91:
                    21:c5:fa:d4:01:f3:d5:5f:00:23:b8:c8:9e:86:45:
                    70:ab:56:ab:53:89:2b:37:71:d1:8b:80:7d:a4:a3:
                    e7:1e:b6:9d:df:a3:f4:e1:ee:a5:de:02:2d:b4:7d:
                    35:2c:24:62:92:81:5f:08:48:3a:13:54:d5:90:ca:
                    88:47:63:85:65:20:8c:96:34:1b:b8:70:23:5f:a9:
                    d7:d7:17:75:8f:94:10:d7:24:b2:33:db:08:91:6c:
                    8c:99:fe:ab:43:ef:81:18:03:6b:90:5a:ff:29:01:
                    06:c9:c1:5f:0e:b1:b3:60:c2:f5:57:79:79:fa:04:
                    d3:4f:14:9d:70:6d:54:5f:c3:a0:14:ba:1a:d5:da:
                    87:44:db:5d:19:14:2f:7a:35:c4:99:b1:81:47:45:
                    fa:a4:47:b9:d0:b9:75:93:76:25:1d:13:49:2a:e1:
                    b8:d0:85:3a:0f:8b:c9:37:e1:ed:ea:93:14:62:8d:
                    b5:6d:4c:8a:76:bf:d8:14:78:2c:17:06:c1:5b:a3:
                    eb:58:6c:2c:be:48:3d:6b:f6:26:52:ad:80:85:54:
                    05:2b:ad:10:1e:3a:1a:f5:6b:e2:88:97:01:76:c6:
                    da:b7:0b:79:6c:7b:53:19:c8:ba:61:c3:0b:19:b6:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FE:78:87:EA:27:82:A2:75:0E:29:A3:5B:B2:38:8F:75:4C:D6:6C
            X509v3 Authority Key Identifier:
                keyid:48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/323830333a613738303a3a2f33322d3332203d3e20323633373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a780::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:5e:26:83:4d:16:c2:9d:8e:14:e3:f2:3d:e2:ed:dc:2a:79:
         90:7b:cd:d0:96:e5:2b:3b:dd:86:f2:2b:8d:81:47:68:cd:d7:
         1e:60:89:90:ce:24:20:79:d1:51:db:fe:9b:0f:1a:83:e0:65:
         32:8f:a0:4a:fc:47:6b:de:da:0c:f7:fe:52:0e:01:69:42:6e:
         a1:6c:60:1e:da:fa:80:67:e6:54:02:cd:9b:54:0e:12:78:ab:
         9d:04:94:2f:9b:8d:5d:3a:8b:b0:b3:e1:06:4c:a5:74:7e:49:
         fc:83:ee:35:68:cc:0a:d9:ec:ef:e2:96:20:52:12:eb:88:60:
         07:6c:65:05:86:86:65:13:dd:f1:fd:cd:e3:b5:3e:f4:45:03:
         fb:3f:e6:b9:2e:6c:a2:0d:6c:e8:cf:b0:d2:75:46:39:96:3b:
         fe:0d:92:d0:71:0e:5d:36:b4:f3:03:0e:d7:e4:4b:9c:f5:c9:
         86:e5:3c:31:f9:8f:2c:4e:dd:98:bb:76:2e:4d:91:26:8a:1b:
         a0:a5:56:ce:12:8b:8c:96:84:87:99:82:15:f3:19:bb:df:c6:
         77:96:40:8a:3c:db:9b:54:15:f9:c1:c6:aa:75:72:83:16:19:
         bd:76:3e:17:32:d1:a6:92:8a:71:70:e3:91:45:63:e9:4b:c6:
         42:f3:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----