Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/323830333a313132303a3a2f33322d3438203d3e203532333238.roa
File:                     323830333a313132303a3a2f33322d3438203d3e203532333238.roa (raw, json)
Hash identifier:          cOAX/Th44G/8uPs/+mph6uriPlRjqjsMw+kZ5ltHOQc=
Subject key identifier:   0D:42:41:9F:5C:90:77:C0:29:92:C8:A1:AA:BF:71:31:C5:AE:5C:2F
Certificate issuer:       /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial:       01AB87414A63234E0E44C99A17AE5BC6803BF90B
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/323830333a313132303a3a2f33322d3438203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 18:02:48 +0000
ROA not before:           Tue 05 Mar 2024 17:57:48 +0000
ROA not after:            Tue 04 Mar 2025 18:02:48 +0000
asID:                     52328
IP address blocks:        2803:1120::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ab:87:41:4a:63:23:4e:0e:44:c9:9a:17:ae:5b:c6:80:3b:f9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
        Validity
            Not Before: Mar  5 17:57:48 2024 GMT
            Not After : Mar  4 18:02:48 2025 GMT
        Subject: CN=0D42419F5C9077C02992C8A1AABF7131C5AE5C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:85:94:70:4d:d9:ef:52:4f:24:45:66:ae:
                    90:bd:fd:15:36:b6:aa:24:65:45:f8:10:ce:3d:34:
                    a7:23:59:d4:99:cc:a7:ef:5d:c0:f8:3a:8e:74:ae:
                    75:47:b3:6d:e0:ee:9d:cc:e6:16:d7:bb:b5:0c:df:
                    17:36:bc:0f:a5:b7:07:c0:b8:92:0f:f0:e2:20:4a:
                    b7:2d:b0:10:ce:b8:80:71:4e:e0:97:bb:15:a0:fb:
                    2d:bf:e1:9a:fb:f1:4f:59:f3:5f:bd:e3:b8:bb:86:
                    07:2b:f6:97:4c:dd:3e:47:3b:63:29:56:20:69:d2:
                    ec:93:5b:e3:f0:14:1c:fb:06:41:68:5b:40:71:0a:
                    4f:7d:95:24:87:b1:f5:a4:15:34:9b:68:2d:8f:63:
                    52:aa:32:09:5a:6a:5e:2c:ed:54:b0:d4:6b:45:42:
                    22:f8:5a:bf:7b:9a:48:69:63:a8:02:3e:81:95:b8:
                    03:b2:8f:18:25:66:50:fe:cf:f3:6e:e8:fa:4d:ed:
                    a3:d7:d2:f7:14:55:1b:11:a1:2b:64:34:6b:80:fc:
                    52:70:52:ae:d8:5e:03:b8:da:2b:18:f1:58:5e:40:
                    e6:07:b6:64:c5:0d:3f:2d:a3:c7:0e:91:94:1e:f8:
                    c6:d8:ba:3f:6f:ef:3a:8d:ba:8c:e7:aa:00:71:b9:
                    2b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:42:41:9F:5C:90:77:C0:29:92:C8:A1:AA:BF:71:31:C5:AE:5C:2F
            X509v3 Authority Key Identifier:
                keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/323830333a313132303a3a2f33322d3438203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1120::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:2a:a8:91:0d:46:dc:90:ad:b0:ac:63:77:a5:6a:25:f6:59:
         83:e0:66:fc:6f:44:31:12:49:06:a3:77:28:f5:6a:71:29:d2:
         11:e2:d4:15:f7:57:01:d4:ff:0f:e8:1f:41:2d:02:43:9b:49:
         d6:6e:1e:9c:73:66:87:66:7d:2a:6b:eb:d5:c3:f0:1f:24:cc:
         70:e5:60:6c:5d:b3:05:31:da:aa:15:3d:c6:0d:10:b6:ac:c0:
         82:50:b5:50:84:7d:e2:f6:60:6f:b3:4b:01:18:4d:5e:8b:7e:
         9c:e5:e5:6a:1c:cf:93:d7:cc:8b:18:4a:ae:c8:c3:06:46:5d:
         d7:2c:f7:2c:46:76:bf:6b:2a:2e:3d:d8:45:97:a3:5d:aa:d0:
         e4:4e:41:52:d3:63:53:10:4f:0f:81:78:7c:4f:3b:a5:da:69:
         3a:dc:c2:31:d5:d6:0f:69:82:32:f8:33:8d:bd:f6:cf:59:ad:
         61:bf:24:2a:72:1e:26:f6:e8:db:8e:11:40:bd:6f:38:f5:14:
         5d:c9:97:c2:72:f3:0c:71:80:a1:28:e8:a2:2f:ea:a7:59:b4:
         62:40:16:20:b2:c2:65:79:af:43:10:aa:05:5d:29:4e:31:43:
         94:e9:2e:b4:25:a4:a5:86:a5:b9:48:d0:98:62:5b:9d:d0:39:
         97:4f:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----