Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB8FBAD3B58CE8C74C7D9478839C726662CDA5E4B9F8771A9B26FEAA41E50944/0/323830333a346261303a3a2f33322d3438203d3e203232343131.roa
File:                     323830333a346261303a3a2f33322d3438203d3e203232343131.roa (raw, json)
Hash identifier:          g3/necUwknwMRRCJU387++YgrI4xRQP45nawCADwNQ8=
Subject key identifier:   7D:74:57:CB:87:A1:B6:0F:9F:79:FF:12:A1:FA:DC:2C:F0:A8:62:B4
Certificate issuer:       /CN=F79E4BCAD42FC962E569A02BC9E230F581A7397F
Certificate serial:       6B61658A7F7CA281A8A41B9203D569B4CCBD7B9B
Authority key identifier: F7:9E:4B:CA:D4:2F:C9:62:E5:69:A0:2B:C9:E2:30:F5:81:A7:39:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F79E4BCAD42FC962E569A02BC9E230F581A7397F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB8FBAD3B58CE8C74C7D9478839C726662CDA5E4B9F8771A9B26FEAA41E50944/0/323830333a346261303a3a2f33322d3438203d3e203232343131.roa
Signing time:             Tue 05 Mar 2024 17:59:45 +0000
ROA not before:           Tue 05 Mar 2024 17:54:45 +0000
ROA not after:            Tue 04 Mar 2025 17:59:45 +0000
asID:                     22411
IP address blocks:        2803:4ba0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:61:65:8a:7f:7c:a2:81:a8:a4:1b:92:03:d5:69:b4:cc:bd:7b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79E4BCAD42FC962E569A02BC9E230F581A7397F
        Validity
            Not Before: Mar  5 17:54:45 2024 GMT
            Not After : Mar  4 17:59:45 2025 GMT
        Subject: CN=7D7457CB87A1B60F9F79FF12A1FADC2CF0A862B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4b:04:46:6e:af:16:5a:a4:1c:ff:df:48:23:
                    68:18:59:d7:ed:3b:a3:36:eb:31:af:e1:ff:ed:d4:
                    0b:90:59:35:a5:6c:1a:69:72:cb:8d:78:05:ce:ab:
                    2a:28:fc:db:20:f2:09:57:c4:9a:78:2f:c3:1b:53:
                    5a:48:dd:8d:71:bf:e8:32:e8:90:00:f5:16:ee:69:
                    7b:16:94:49:b9:f8:96:4a:69:57:36:da:2d:a3:72:
                    27:93:fb:5e:f5:2a:64:e5:69:12:67:ef:3e:fd:b5:
                    88:6f:38:3d:f4:ab:2f:7e:85:1f:fb:f4:12:ae:48:
                    16:9e:95:a6:54:79:0e:e6:ff:e7:14:b7:6e:28:71:
                    c4:02:0c:ed:fd:d9:70:c8:d5:86:4f:43:38:e8:cb:
                    f2:aa:89:bb:fb:fa:3a:f4:07:87:d7:53:77:d0:71:
                    33:7b:a8:14:34:51:50:cc:00:7d:08:75:0c:a4:0c:
                    0d:cb:48:ce:c2:fd:ae:4f:9c:03:c0:91:aa:42:3d:
                    2b:58:87:e6:22:ad:4b:73:9b:2d:cc:f8:68:e2:3a:
                    23:e5:50:5c:17:8b:0f:4b:c2:73:8b:76:77:6e:60:
                    2b:ba:86:02:63:a4:06:24:e2:54:17:f5:54:c3:cf:
                    26:41:d5:4e:12:98:54:a7:c4:14:3b:b9:3d:9b:5f:
                    7c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:74:57:CB:87:A1:B6:0F:9F:79:FF:12:A1:FA:DC:2C:F0:A8:62:B4
            X509v3 Authority Key Identifier:
                keyid:F7:9E:4B:CA:D4:2F:C9:62:E5:69:A0:2B:C9:E2:30:F5:81:A7:39:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB8FBAD3B58CE8C74C7D9478839C726662CDA5E4B9F8771A9B26FEAA41E50944/0/F79E4BCAD42FC962E569A02BC9E230F581A7397F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F79E4BCAD42FC962E569A02BC9E230F581A7397F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB8FBAD3B58CE8C74C7D9478839C726662CDA5E4B9F8771A9B26FEAA41E50944/0/323830333a346261303a3a2f33322d3438203d3e203232343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:7a:e5:8c:93:86:49:aa:91:da:60:e4:36:4b:86:83:97:
         84:69:16:0a:88:eb:ed:16:12:63:ae:35:1a:7e:76:d2:9e:9c:
         4e:5d:3d:44:08:fa:1e:11:6d:73:69:6d:3f:c4:ee:ce:af:fc:
         89:04:d8:32:e0:ca:73:a7:04:e7:82:bc:dd:28:92:1e:7e:9b:
         ac:40:33:b9:9d:9d:68:79:0b:93:69:ce:75:6f:cb:e0:3d:48:
         39:1d:32:af:2f:ee:32:26:e5:74:22:65:93:a0:38:fd:ed:2c:
         60:86:58:fa:88:13:78:40:5e:9a:42:74:fa:27:1d:d7:d7:2b:
         f5:d3:a8:48:3b:7f:d6:58:15:70:b4:f3:52:3c:24:b6:90:eb:
         a5:a3:df:c7:e8:f6:75:4a:df:eb:7b:f0:42:a7:e1:2f:31:df:
         4b:68:00:6b:3c:74:31:ca:32:d6:44:17:09:1d:73:98:43:58:
         22:3d:b4:d1:8d:8e:3d:55:28:5a:1d:ae:6f:f8:e7:0e:55:78:
         28:0b:7f:27:80:2f:10:c7:e6:80:73:3a:cc:58:fc:82:bb:3c:
         e1:5a:f4:db:5f:05:0d:6b:56:13:04:29:a0:00:b5:13:df:9a:
         c5:61:74:ea:e8:ca:29:0e:9d:bc:18:57:b5:56:8f:91:24:10:
         c3:35:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----