Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/323830333a313761303a3a2f33322d3332203d3e20323637373737.roa
File:                     323830333a313761303a3a2f33322d3332203d3e20323637373737.roa (raw, json)
Hash identifier:          HVphtuAejwSytiZccmwiNw4Jz8t4sNRqF1j7GuKb3hc=
Subject key identifier:   AF:07:FE:C0:42:D1:B4:D0:55:8B:58:E6:FB:68:37:F6:02:65:89:67
Certificate issuer:       /CN=4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E
Certificate serial:       28574B89BDE88EF82C5B3069D782E71B1F37A5C2
Authority key identifier: 4C:E9:DD:4A:CA:90:E6:24:B6:F7:B7:2C:71:A4:7D:45:41:C7:BB:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/323830333a313761303a3a2f33322d3332203d3e20323637373737.roa
Signing time:             Tue 05 Mar 2024 18:11:02 +0000
ROA not before:           Tue 05 Mar 2024 18:06:02 +0000
ROA not after:            Tue 04 Mar 2025 18:11:02 +0000
asID:                     267777
IP address blocks:        2803:17a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:57:4b:89:bd:e8:8e:f8:2c:5b:30:69:d7:82:e7:1b:1f:37:a5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E
        Validity
            Not Before: Mar  5 18:06:02 2024 GMT
            Not After : Mar  4 18:11:02 2025 GMT
        Subject: CN=AF07FEC042D1B4D0558B58E6FB6837F602658967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:95:8b:d2:ac:0b:b8:c3:21:68:ca:f7:b0:
                    56:8a:15:e2:e8:c4:7b:4a:56:a2:d5:8b:26:3f:2d:
                    f6:ac:f9:ee:c2:db:68:49:7d:a9:36:27:c5:bf:8e:
                    0f:07:c0:4c:55:f9:95:4b:46:43:32:a0:63:47:00:
                    d2:0e:a1:29:9c:42:ab:b8:04:ae:71:40:de:f7:98:
                    af:11:a5:ef:fc:00:ef:b3:96:32:e1:b1:cf:2f:a3:
                    63:74:47:86:ea:85:8a:ae:62:6a:12:1d:1d:69:63:
                    49:0a:d8:e4:61:9e:40:55:33:71:7a:1d:3d:bc:cf:
                    46:83:fc:42:b2:77:32:60:d8:2c:b7:36:87:b8:f8:
                    83:a6:78:b1:be:81:23:65:60:77:17:a4:94:31:6e:
                    1b:fc:65:83:53:48:66:7d:eb:08:73:09:02:e0:e5:
                    a4:3f:79:00:92:9c:8a:ea:d2:35:55:40:a2:cd:40:
                    fb:6c:f4:7a:94:f8:85:2e:5e:70:33:61:5d:61:4f:
                    d8:29:b8:d7:77:49:95:29:df:67:42:a2:f3:ee:4a:
                    18:09:a6:54:13:5a:c2:c5:98:3d:b9:11:5c:57:a8:
                    2a:96:5a:53:60:34:93:79:aa:32:d2:c4:a6:6e:56:
                    b0:78:61:26:dc:3d:bd:47:77:c6:33:18:b6:e9:1b:
                    65:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:07:FE:C0:42:D1:B4:D0:55:8B:58:E6:FB:68:37:F6:02:65:89:67
            X509v3 Authority Key Identifier:
                keyid:4C:E9:DD:4A:CA:90:E6:24:B6:F7:B7:2C:71:A4:7D:45:41:C7:BB:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CE9DD4ACA90E624B6F7B72C71A47D4541C7BB4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D75A75B66B5C044C8E537C3F2BF84E0400EBEB5EECB72ADCD5687563CE4B218C/0/323830333a313761303a3a2f33322d3332203d3e20323637373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:17a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:cd:34:4a:18:3d:17:b4:9b:4a:fe:85:3b:f1:d8:64:90:71:
         8f:74:d7:7a:54:b2:f3:08:47:5c:c1:9a:2d:a8:62:3e:d7:5e:
         e1:9b:54:ae:a2:9a:6c:60:5c:83:d8:0c:80:89:60:9d:a8:fd:
         7b:9e:cb:e0:c1:39:63:80:a7:c0:46:30:7b:b2:c0:23:e8:50:
         c5:0a:f4:f8:60:cc:07:ac:c8:d4:7c:04:0c:3f:1d:7a:7c:ae:
         a0:80:6f:04:2b:94:3f:88:8f:1f:d4:b9:d7:82:d7:4a:0e:cd:
         93:e9:b7:dc:5b:41:f5:3f:f1:2f:03:ab:4c:58:e3:5c:1f:13:
         c8:8d:fe:67:e4:48:7f:74:ce:72:2e:a4:a2:17:78:d9:89:73:
         38:de:86:65:0d:1d:df:57:19:2b:40:e8:16:99:0d:9c:23:68:
         48:f3:67:5a:fd:88:a3:d7:b9:34:ab:61:29:36:70:8e:e0:b8:
         74:21:34:ae:79:72:ed:94:16:59:1b:94:96:8f:8e:e0:31:a5:
         c6:fc:e6:19:f6:55:15:f1:a2:cf:8f:1b:b0:62:7f:c0:af:1d:
         62:94:3c:2e:a0:29:b9:91:79:fa:18:a0:e5:56:f0:68:2e:45:
         66:9d:fb:8a:33:f7:a4:3d:31:63:f8:1b:6b:71:93:33:8b:d2:
         a4:7d:a9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----