Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a653a3a2f34372d3438203d3e203236323130.roa
File:                     323830303a38383a653a3a2f34372d3438203d3e203236323130.roa (raw, json)
Hash identifier:          gcglzX4Kdpge7Xr34jqKRmuaWxxbpRZpbO3hBZgmtiM=
Subject key identifier:   D0:9E:E4:8E:1F:34:0F:55:E5:C1:82:BE:49:9A:B7:9A:EE:16:56:C7
Certificate issuer:       /CN=0E2398E228CAF8263D654C1F35A155213634B840
Certificate serial:       244C35F8877BBC847CD2D8F85C64FB1C3C43269A
Authority key identifier: 0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a653a3a2f34372d3438203d3e203236323130.roa
Signing time:             Tue 05 Mar 2024 18:17:09 +0000
ROA not before:           Tue 05 Mar 2024 18:12:09 +0000
ROA not after:            Tue 04 Mar 2025 18:17:09 +0000
asID:                     26210
IP address blocks:        2800:88:e::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4c:35:f8:87:7b:bc:84:7c:d2:d8:f8:5c:64:fb:1c:3c:43:26:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2398E228CAF8263D654C1F35A155213634B840
        Validity
            Not Before: Mar  5 18:12:09 2024 GMT
            Not After : Mar  4 18:17:09 2025 GMT
        Subject: CN=D09EE48E1F340F55E5C182BE499AB79AEE1656C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:db:9a:e0:23:e0:5f:ef:9d:30:ef:59:2d:b4:
                    aa:2f:82:42:96:70:07:39:cc:58:8e:44:0f:06:48:
                    5a:a8:cd:2e:7b:df:4b:5f:c6:2b:24:e2:41:bc:5a:
                    e8:6d:cb:53:cd:46:48:d0:cf:7a:0b:dd:2b:da:4a:
                    1c:24:71:8e:11:eb:1d:9b:b5:e2:fa:a0:40:f2:ca:
                    46:14:3c:b8:6d:0d:ae:74:d0:72:a2:54:03:17:33:
                    91:99:62:9a:c7:c9:62:93:23:76:e2:bc:22:b7:14:
                    e0:c7:b3:58:d6:c9:f8:e5:e5:2a:19:06:fb:a1:b4:
                    8d:1e:31:49:98:bb:4b:48:3f:60:f6:97:bb:86:fb:
                    7c:11:36:a1:d4:72:4f:82:49:0f:1a:26:0b:19:1f:
                    b9:36:e1:c3:0e:8f:47:ee:77:b5:c3:5d:a9:9b:3a:
                    83:22:2b:67:62:8a:d1:eb:53:20:cc:ea:e3:76:ed:
                    b2:02:2c:1f:da:f9:eb:8a:75:94:2c:d2:ee:e3:4a:
                    5f:43:b0:af:fb:da:9e:c8:c3:b7:45:ab:fc:6f:10:
                    67:49:f6:7c:48:1c:d1:ad:55:91:a8:27:36:e3:66:
                    d8:50:b0:45:b9:cb:fa:5e:61:af:c2:ce:67:d0:d9:
                    13:99:15:d4:14:e3:8f:f0:cf:b1:85:d4:52:a1:a1:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9E:E4:8E:1F:34:0F:55:E5:C1:82:BE:49:9A:B7:9A:EE:16:56:C7
            X509v3 Authority Key Identifier:
                keyid:0E:23:98:E2:28:CA:F8:26:3D:65:4C:1F:35:A1:55:21:36:34:B8:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/0E2398E228CAF8263D654C1F35A155213634B840.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E2398E228CAF8263D654C1F35A155213634B840.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CECDE75047AAD135C0A47FE1DE6D6B0D3FE1B0671DDB5EF93A12544497C94415/0/323830303a38383a653a3a2f34372d3438203d3e203236323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:88:e::/47

    Signature Algorithm: sha256WithRSAEncryption
         a4:52:6e:b5:d4:1b:0c:57:69:e7:bd:c6:ee:db:56:3f:03:7e:
         7e:20:65:11:8d:10:07:6b:ae:df:87:ac:4a:3d:2e:41:0d:45:
         14:2c:30:a5:79:13:99:04:b7:f7:48:92:3f:27:53:34:2e:bc:
         ad:65:a4:0b:9b:cd:5e:0d:58:3e:8c:e7:04:3f:64:36:8b:38:
         39:a0:53:bf:52:5f:4f:4b:d9:ba:08:f3:66:b6:28:4e:87:ce:
         69:02:12:cb:cf:df:9a:27:f2:fc:34:37:86:40:d4:aa:7a:9c:
         73:36:1c:20:c8:cb:a6:75:27:ca:1c:3a:65:7a:78:93:da:a0:
         a2:5b:43:32:b3:f7:01:1c:1d:dc:c7:80:79:5d:7c:c3:a1:b2:
         14:38:2b:54:44:90:71:b8:f1:f5:cb:21:61:a8:73:3a:44:ef:
         fc:20:44:6c:a0:b5:ca:42:97:e0:e2:ae:47:00:6b:e5:b0:b5:
         0d:eb:75:a6:e3:d6:c1:5b:e2:d4:48:2f:3e:c9:67:15:47:aa:
         c7:64:4e:fb:75:54:a5:0a:16:89:af:84:fc:ae:50:98:c7:20:
         47:16:63:ab:ef:7b:02:2f:45:64:5c:25:81:6d:ec:a9:e3:92:
         16:98:95:fc:69:fa:8f:2e:ad:32:7f:25:3f:87:7a:da:2e:60:
         6c:ca:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----