Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e203238313134.roa
File:                     323830333a336339303a3a2f33322d3634203d3e203238313134.roa (raw, json)
Hash identifier:          +gWuxRtpPJkAoOkMq6go9ZQdQGVyif+3POQk0vjrnBI=
Subject key identifier:   90:0F:CE:A6:37:A3:74:E2:5E:D1:3A:C9:8C:6F:71:70:3B:B4:26:F7
Certificate issuer:       /CN=B60DE235AFFBEBC89B74335E1C207C7C284BA7A5
Certificate serial:       1C592BFDE0F0B539F9C8E9B33430D0AB1FC3890A
Authority key identifier: B6:0D:E2:35:AF:FB:EB:C8:9B:74:33:5E:1C:20:7C:7C:28:4B:A7:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e203238313134.roa
Signing time:             Tue 05 Mar 2024 17:51:52 +0000
ROA not before:           Tue 05 Mar 2024 17:46:52 +0000
ROA not after:            Tue 04 Mar 2025 17:51:52 +0000
asID:                     28114
IP address blocks:        2803:3c90::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:59:2b:fd:e0:f0:b5:39:f9:c8:e9:b3:34:30:d0:ab:1f:c3:89:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B60DE235AFFBEBC89B74335E1C207C7C284BA7A5
        Validity
            Not Before: Mar  5 17:46:52 2024 GMT
            Not After : Mar  4 17:51:52 2025 GMT
        Subject: CN=900FCEA637A374E25ED13AC98C6F71703BB426F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:73:bc:33:ae:cd:0f:52:11:20:79:74:74:f4:
                    73:32:10:9c:62:83:ae:40:ca:b6:ad:89:fd:de:ee:
                    04:72:7f:11:b7:39:34:58:c5:68:19:71:a7:8e:f9:
                    40:de:4a:64:0f:e9:10:4d:81:58:86:fe:12:42:3b:
                    9c:a3:61:27:71:38:ce:48:25:4f:b5:03:ce:aa:e9:
                    25:a1:74:b1:99:ea:b2:f8:d4:bc:29:28:dc:15:bb:
                    41:5a:40:51:9b:c8:0e:0d:40:78:21:60:31:ea:56:
                    f5:67:57:66:7b:4b:9e:b3:cc:bf:f8:cd:8a:ca:19:
                    af:54:81:5e:d6:c4:13:b4:4f:bc:7d:3b:0f:24:4e:
                    62:b1:a9:69:43:87:fc:50:31:a2:29:96:0b:5d:3c:
                    bc:ba:90:2d:8b:2f:4c:ec:90:90:b2:d0:10:8d:bc:
                    19:72:b5:24:29:1f:63:19:94:f0:b1:fa:f6:e5:15:
                    10:a1:a4:b2:41:7d:bd:83:31:d0:3c:9b:8b:b3:03:
                    3f:95:fe:69:c1:18:de:5a:df:fe:f7:26:8d:5b:b9:
                    47:be:9f:ee:f0:c3:33:3c:af:08:fe:b5:0c:18:7a:
                    9a:e1:95:3e:7b:9d:21:c1:75:52:94:fa:2e:de:56:
                    70:1d:58:1d:17:8a:3e:8a:5e:e1:ee:cf:c5:5e:52:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0F:CE:A6:37:A3:74:E2:5E:D1:3A:C9:8C:6F:71:70:3B:B4:26:F7
            X509v3 Authority Key Identifier:
                keyid:B6:0D:E2:35:AF:FB:EB:C8:9B:74:33:5E:1C:20:7C:7C:28:4B:A7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B60DE235AFFBEBC89B74335E1C207C7C284BA7A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2DA8776F7A6C1CC6339173891BE65FFB62F46B6961F04AA7C949B4A76DD60B4/0/323830333a336339303a3a2f33322d3634203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:51:13:e8:8e:42:72:63:c8:05:05:03:97:fe:3f:f9:cd:
         17:64:4b:a2:a1:42:1e:a1:db:75:cb:85:78:35:b0:8f:a8:89:
         00:cd:be:bf:49:66:38:67:7b:ef:77:13:e1:d1:e9:af:91:c1:
         5d:7c:48:be:2e:ef:64:c8:24:56:b6:85:0f:c7:d5:8e:11:2a:
         fd:55:07:46:0b:6a:16:8d:77:fd:8a:82:56:16:ca:38:08:84:
         18:d6:49:68:f0:1b:bc:e2:34:4d:31:dc:79:5a:46:3e:e6:6d:
         00:21:b5:c3:ba:a6:95:5b:73:af:59:76:e0:df:14:14:ac:40:
         42:35:04:75:33:80:13:62:1e:88:90:da:03:97:63:62:86:36:
         10:64:56:dd:02:5b:c0:6d:45:8f:57:2d:20:39:9a:9b:a9:5e:
         b4:37:c2:6a:3b:8a:01:ac:30:82:01:81:8d:53:db:f7:62:8d:
         c3:33:3d:9f:17:a2:48:1e:a0:66:74:fb:36:be:0a:fd:6c:78:
         87:fb:d2:a0:96:81:ed:6d:e4:f5:ef:96:c9:08:4d:c5:4c:b9:
         5d:a5:3f:78:09:ba:11:2a:04:94:d9:51:f6:5d:33:cf:e1:de:
         d4:4f:5c:0a:6f:ae:c5:f3:03:4f:a3:bc:59:10:6b:ca:da:26:
         a9:ff:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----