Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/323830333a393232303a3a2f33322d3332203d3e20323635383432.roa
File:                     323830333a393232303a3a2f33322d3332203d3e20323635383432.roa (raw, json)
Hash identifier:          cvz0jAYQSeUPsgGZty1Ko7nr4uiuusDkjfOJj+ajngs=
Subject key identifier:   8F:9E:BE:92:D0:0E:AE:F5:AF:9A:39:C9:50:BE:D5:92:BF:F8:9D:8C
Certificate issuer:       /CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
Certificate serial:       1635A94DE0BEB0A1408A5A4B0C39A1F85F164BC1
Authority key identifier: DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/323830333a393232303a3a2f33322d3332203d3e20323635383432.roa
Signing time:             Tue 05 Mar 2024 17:52:03 +0000
ROA not before:           Tue 05 Mar 2024 17:47:03 +0000
ROA not after:            Tue 04 Mar 2025 17:52:03 +0000
asID:                     265842
IP address blocks:        2803:9220::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:35:a9:4d:e0:be:b0:a1:40:8a:5a:4b:0c:39:a1:f8:5f:16:4b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1
        Validity
            Not Before: Mar  5 17:47:03 2024 GMT
            Not After : Mar  4 17:52:03 2025 GMT
        Subject: CN=8F9EBE92D00EAEF5AF9A39C950BED592BFF89D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:ae:f4:87:22:15:11:e6:34:79:4e:f2:8d:
                    df:86:99:3e:ab:1a:c2:75:17:ab:0a:ca:ba:65:41:
                    dd:34:92:8e:c2:49:7a:5b:f1:70:3b:91:0c:e7:ec:
                    0d:8f:54:9c:c0:bd:90:6f:22:35:38:2b:61:a5:84:
                    72:cb:6f:66:53:bd:93:d4:96:36:fe:ce:98:9f:8b:
                    44:61:6e:06:9b:bd:81:40:10:29:7d:09:84:07:7c:
                    12:12:bc:b1:0f:d3:6d:fe:9d:0c:98:6c:e2:f8:47:
                    72:8b:62:11:c9:38:e6:e2:90:ee:72:b6:37:8f:66:
                    f9:90:9a:00:09:31:2d:85:f3:a2:61:53:78:43:43:
                    a2:a1:de:08:fc:ae:44:93:9d:f3:0d:da:73:39:11:
                    8d:ab:07:e5:b2:86:dc:96:55:be:f3:fc:94:14:3b:
                    f0:6b:12:9b:e2:03:19:39:73:22:19:2e:fd:6a:01:
                    45:e3:04:82:69:0e:a9:2a:cb:0f:6a:f1:cb:aa:cd:
                    1f:d2:d9:9f:c7:de:a0:95:1e:2e:c2:02:70:23:52:
                    64:84:00:1e:3c:00:61:63:a7:71:3a:dc:c3:64:6b:
                    90:c3:e3:5b:15:f2:80:71:c2:db:cd:c9:b4:fa:c9:
                    38:3d:00:98:5d:8f:eb:cc:79:b1:00:4d:0c:76:53:
                    22:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9E:BE:92:D0:0E:AE:F5:AF:9A:39:C9:50:BE:D5:92:BF:F8:9D:8C
            X509v3 Authority Key Identifier:
                keyid:DE:0E:9C:48:41:E7:FD:1E:40:27:86:DB:D8:A1:B3:5F:69:AD:C5:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE0E9C4841E7FD1E402786DBD8A1B35F69ADC5E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F64129A3275E11FC5E33280C6B65D077E07295A2F49025888B3722B709E6FE/0/323830333a393232303a3a2f33322d3332203d3e20323635383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9220::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:14:78:0d:ac:21:51:78:4d:37:24:e3:ab:b4:4e:66:91:13:
         c1:f9:cf:a3:6b:d4:91:04:52:ae:62:82:c1:ac:ad:dd:ad:63:
         75:b0:63:7a:20:aa:e4:57:49:79:e5:ff:65:56:b0:ec:68:e7:
         42:6d:95:b4:25:ec:a3:61:d2:9e:cf:69:63:d0:b7:40:6a:44:
         59:d1:e2:fe:51:46:43:fb:34:f4:d8:1f:24:f5:c2:1f:47:88:
         48:6f:db:89:fd:51:db:8b:92:b7:3c:e0:1b:46:e9:65:b8:61:
         b7:55:40:25:ad:bc:f8:5b:2b:02:c0:e6:40:69:aa:ca:f0:9a:
         4f:5d:74:5d:f7:be:7d:3e:33:19:64:6b:8c:e9:cd:94:82:b6:
         f5:8c:b0:08:c0:43:c5:96:a7:03:b0:75:81:0a:dd:55:f6:bc:
         39:0f:b2:d1:04:dd:ce:5f:02:84:ea:e0:74:2a:a3:20:a7:0f:
         2d:93:14:64:c5:96:36:90:9e:f4:ba:fb:53:6a:ec:b6:72:47:
         ae:2a:f9:55:db:50:06:14:ff:4a:56:3d:fe:89:1c:3c:31:6d:
         ae:91:4a:0f:23:5b:69:9b:ac:cc:a0:96:1e:3a:f3:18:ce:bd:
         3b:f1:12:67:f2:47:73:ad:2f:4b:59:f1:5f:8d:e9:7f:83:6f:
         1f:0b:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----