Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/323830333a326565303a3a2f33322d3438203d3e20323639393833.roa
File:                     323830333a326565303a3a2f33322d3438203d3e20323639393833.roa (raw, json)
Hash identifier:          /+8As4MRpEKwdIJBHqv/Ju2YAuSLrjeLxG3TBU4ucSA=
Subject key identifier:   76:1D:D9:DF:43:69:D7:80:3F:BE:16:3B:C9:43:CB:C1:06:C1:24:B5
Certificate issuer:       /CN=C1C868DAE462CF1EFAC4EF35B251505AC4C7F982
Certificate serial:       39ABA6CEA207913C9F576977E65EFE2E3A5B32F6
Authority key identifier: C1:C8:68:DA:E4:62:CF:1E:FA:C4:EF:35:B2:51:50:5A:C4:C7:F9:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/323830333a326565303a3a2f33322d3438203d3e20323639393833.roa
Signing time:             Tue 05 Mar 2024 18:19:15 +0000
ROA not before:           Tue 05 Mar 2024 18:14:15 +0000
ROA not after:            Tue 04 Mar 2025 18:19:15 +0000
asID:                     269983
IP address blocks:        2803:2ee0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ab:a6:ce:a2:07:91:3c:9f:57:69:77:e6:5e:fe:2e:3a:5b:32:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C868DAE462CF1EFAC4EF35B251505AC4C7F982
        Validity
            Not Before: Mar  5 18:14:15 2024 GMT
            Not After : Mar  4 18:19:15 2025 GMT
        Subject: CN=761DD9DF4369D7803FBE163BC943CBC106C124B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:fb:1a:dd:7c:88:2a:90:74:be:3e:de:03:
                    ba:86:6c:1d:5b:ad:12:8f:23:f8:f4:91:73:56:c1:
                    e0:12:33:06:ef:2e:03:e9:f4:7a:3d:83:d8:b7:0f:
                    87:09:31:30:f8:77:b0:68:38:33:23:34:25:90:8a:
                    b2:81:fd:4a:3b:ab:ad:00:f7:d3:22:b8:51:72:b4:
                    c2:3f:b3:12:c0:f0:78:d0:64:32:52:9d:39:14:bc:
                    22:80:a7:d2:1c:bb:f6:c2:3d:71:f0:5f:0f:2e:97:
                    43:62:a4:db:f0:af:ef:cf:09:84:3a:81:51:ff:c3:
                    b3:c7:50:b8:e5:14:57:6b:d2:90:98:81:59:6c:c2:
                    6c:83:35:e3:7a:fd:73:c3:01:21:e1:f9:50:a5:af:
                    6f:6d:48:24:21:f3:31:5c:d9:ac:22:3a:a8:72:6d:
                    2d:6d:a9:07:69:da:3a:99:00:c0:0f:df:12:91:2b:
                    92:1b:26:58:ba:78:ff:e3:40:e6:7f:ba:a8:72:80:
                    29:6a:a2:c3:67:d1:87:f7:ab:37:ba:46:bb:bd:f7:
                    a2:95:b4:0b:68:0c:62:63:28:fa:56:a3:2a:82:81:
                    c3:de:c2:44:3e:f1:7b:57:3a:8b:2c:f2:ea:1d:71:
                    a1:3e:fc:07:2b:49:e8:ea:7d:24:68:43:97:0a:8e:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1D:D9:DF:43:69:D7:80:3F:BE:16:3B:C9:43:CB:C1:06:C1:24:B5
            X509v3 Authority Key Identifier:
                keyid:C1:C8:68:DA:E4:62:CF:1E:FA:C4:EF:35:B2:51:50:5A:C4:C7:F9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1C868DAE462CF1EFAC4EF35B251505AC4C7F982.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFA05B91C0B6502F383C73BCCE72873D13422A0C22B0BC4A30AE1FF53B4B2833/0/323830333a326565303a3a2f33322d3438203d3e20323639393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:97:1d:6f:0d:63:67:0c:3d:82:1d:b0:c0:a0:fa:2d:eb:0f:
         ec:89:0e:db:47:03:fa:d2:24:a7:ac:51:e9:5a:80:2b:d1:de:
         72:73:7e:f1:32:cd:df:4d:d1:ef:30:f4:68:fe:23:11:14:1a:
         0d:00:44:37:94:6f:e5:31:db:76:d3:9b:71:94:6a:87:20:4f:
         d7:9b:d5:7c:af:54:d9:83:5f:2a:05:f5:30:f6:37:b9:c6:dc:
         25:38:87:19:7c:ad:ed:5c:63:db:57:49:96:63:ab:1b:43:ec:
         aa:69:72:6b:84:5d:e5:3d:bc:f0:f7:13:4c:a4:65:94:34:86:
         4f:59:83:cc:a6:3b:33:c0:9a:1c:0b:ca:16:66:a8:a8:70:f3:
         25:90:6a:12:7c:c7:83:2e:17:95:6d:2b:66:73:3f:0d:82:a5:
         4b:b6:52:09:c4:ae:85:b9:ef:f9:36:56:28:c0:10:9c:b1:67:
         56:ea:45:b3:ed:9e:62:72:f7:9f:99:75:2c:a8:dc:1e:df:62:
         91:1d:ae:91:ba:7b:46:0e:29:fa:ad:61:78:44:d7:68:ce:50:
         ac:40:78:ee:8b:f2:09:7d:6a:6d:8d:47:8d:ab:48:47:27:0c:
         37:4b:16:da:81:b7:9e:39:93:51:6b:90:57:c4:df:79:e6:6e:
         30:72:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----