Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/323830333a346463303a3a2f33322d3438203d3e20323635373231.roa
File:                     323830333a346463303a3a2f33322d3438203d3e20323635373231.roa (raw, json)
Hash identifier:          OyOE6kXb9sMmTFy6svPYt+CZ6B4YjJUFGJD+6Ao7jMw=
Subject key identifier:   02:BC:92:94:10:64:A8:ED:EC:C1:C6:7E:58:A0:70:61:9E:5F:3E:1D
Certificate issuer:       /CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9
Certificate serial:       2D9CEA7EAF682DBCCE80EB6BEC5AB35A195F37BE
Authority key identifier: 2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/323830333a346463303a3a2f33322d3438203d3e20323635373231.roa
Signing time:             Tue 05 Mar 2024 18:08:56 +0000
ROA not before:           Tue 05 Mar 2024 18:03:56 +0000
ROA not after:            Tue 04 Mar 2025 18:08:56 +0000
asID:                     265721
IP address blocks:        2803:4dc0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9c:ea:7e:af:68:2d:bc:ce:80:eb:6b:ec:5a:b3:5a:19:5f:37:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9
        Validity
            Not Before: Mar  5 18:03:56 2024 GMT
            Not After : Mar  4 18:08:56 2025 GMT
        Subject: CN=02BC92941064A8EDECC1C67E58A070619E5F3E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:ed:92:5b:44:18:69:27:1b:28:cc:aa:d1:
                    ae:a9:62:5e:6a:91:08:f1:b9:c1:6c:f6:8d:dc:69:
                    16:fb:6a:37:4d:f4:cb:41:bf:ee:b1:3e:9d:bf:3c:
                    a4:06:db:5c:f5:88:9f:40:f0:22:2d:d5:d2:16:a4:
                    ae:27:6a:b2:04:d8:0f:88:0f:4a:ca:14:00:59:b4:
                    08:3f:c8:c2:a6:99:b7:7c:79:64:d6:38:d9:2d:57:
                    19:7b:eb:e9:e3:66:ce:56:1c:56:ba:e9:aa:13:b3:
                    b0:ed:e1:e6:21:9d:36:fc:dc:3e:a7:a4:97:bc:bd:
                    a4:21:30:d8:61:c6:d3:24:f8:61:7d:80:f4:ce:4a:
                    e0:5d:f6:dc:29:81:d3:af:56:b4:5a:be:69:4a:80:
                    18:8f:e4:30:85:82:37:c2:ce:74:7e:ed:11:e5:73:
                    8c:57:83:17:8f:87:9e:19:b0:b3:f2:1e:57:91:a7:
                    03:3f:9d:bd:ad:8b:0b:7c:eb:ec:e4:f6:2a:c1:b3:
                    40:90:da:85:27:77:a6:56:94:68:03:91:c0:cd:f7:
                    ed:a6:52:78:69:ce:a7:50:7f:f2:70:8c:7d:2f:b1:
                    68:43:64:d7:cb:ad:9b:52:38:49:99:8d:eb:60:a3:
                    01:34:21:bb:94:75:c2:2b:52:59:22:df:cd:f8:a4:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BC:92:94:10:64:A8:ED:EC:C1:C6:7E:58:A0:70:61:9E:5F:3E:1D
            X509v3 Authority Key Identifier:
                keyid:2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/323830333a346463303a3a2f33322d3438203d3e20323635373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:24:9b:8f:92:2b:7f:15:34:7b:30:ec:09:a1:c3:9c:c7:60:
         1c:fb:96:f7:d6:b8:9d:77:ec:4d:78:ec:85:b2:b9:41:45:ca:
         f4:b6:f4:c9:d5:a0:94:ca:f1:e1:8a:20:84:60:98:7c:0a:05:
         91:47:f9:95:ff:43:ba:ab:12:f6:58:5c:d8:33:ed:c4:47:24:
         85:a0:f1:b9:81:ab:2a:45:72:b5:82:8d:b5:0b:2a:ec:2f:a8:
         c0:9e:3d:dd:6a:a3:3f:16:8c:6c:23:ee:61:6e:c5:e3:52:84:
         d0:6c:cd:33:c1:e4:98:37:54:05:37:d4:17:ab:80:98:a0:ac:
         64:9d:b2:17:1b:0a:b4:e4:1c:ec:c5:f8:1a:86:a8:69:82:34:
         53:a6:8b:43:f6:0d:fa:bd:eb:c3:78:3f:8c:af:b7:7b:65:bf:
         3c:22:60:45:18:96:ee:24:f0:2b:6b:ba:32:f9:fc:28:60:32:
         d8:58:ab:85:e3:73:6b:7e:93:7a:49:4a:d9:b7:76:c1:44:0a:
         6a:93:a4:19:86:27:80:8d:aa:ca:e6:59:56:e2:41:18:80:7b:
         31:26:c0:28:5c:7b:a4:78:56:63:05:e2:ba:6c:d1:bc:35:7f:
         d2:1d:02:f8:b9:b0:f7:a5:9f:8d:f4:d3:c9:a8:8a:98:3c:9f:
         5b:0c:3f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----