Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a3a2f33322d3438203d3e20323639393535.roa
File:                     323830333a323665303a3a2f33322d3438203d3e20323639393535.roa (raw, json)
Hash identifier:          oim9OrEXho0uA2FTzmTLMTijtMPZQJOOfvXfd/1j65s=
Subject key identifier:   C8:55:C1:76:8A:9C:1E:A4:1A:CC:95:22:B9:C1:FA:CF:B9:A9:D9:C3
Certificate issuer:       /CN=1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4
Certificate serial:       20EBF5C5B4BF5ABE94B26D2CF76E5911A1E8E3
Authority key identifier: 1D:EE:90:79:9B:3B:2F:7E:FC:21:6D:AB:92:BD:F4:58:6D:4C:C0:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a3a2f33322d3438203d3e20323639393535.roa
Signing time:             Tue 05 Mar 2024 18:14:43 +0000
ROA not before:           Tue 05 Mar 2024 18:09:43 +0000
ROA not after:            Tue 04 Mar 2025 18:14:43 +0000
asID:                     269955
IP address blocks:        2803:26e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:eb:f5:c5:b4:bf:5a:be:94:b2:6d:2c:f7:6e:59:11:a1:e8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4
        Validity
            Not Before: Mar  5 18:09:43 2024 GMT
            Not After : Mar  4 18:14:43 2025 GMT
        Subject: CN=C855C1768A9C1EA41ACC9522B9C1FACFB9A9D9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:d6:91:d8:0c:70:18:46:02:02:c1:d8:a1:
                    5b:3c:5c:d7:09:ac:90:6f:32:21:19:31:28:33:99:
                    96:0f:75:aa:bc:98:9c:0a:a5:19:cb:cd:41:1c:1a:
                    f2:93:5e:09:71:3a:5b:74:dc:59:8d:28:92:b8:b0:
                    9c:93:aa:18:c0:3e:d8:04:33:ed:2c:0f:d3:b4:2a:
                    71:a5:b3:d9:fa:68:6d:7e:4c:64:65:bd:3f:54:d1:
                    e1:45:ee:4c:9e:81:6d:ac:4a:ca:d4:88:8a:ec:41:
                    46:71:d8:b6:a0:6e:8b:a1:ba:5e:d3:1d:37:02:2b:
                    b7:a0:1e:13:95:f4:ad:63:b0:f1:5b:91:65:63:c4:
                    67:5a:82:b6:37:a0:7e:f7:fe:c2:65:fd:3b:4a:ac:
                    ae:f7:21:b8:df:fd:b0:09:40:e7:34:3f:48:28:42:
                    be:f6:55:a8:6a:18:c6:17:f5:cc:31:00:28:df:26:
                    ec:2c:53:2b:1e:51:a5:76:81:25:e3:29:7c:36:08:
                    8f:2d:ea:d4:2b:df:34:19:af:64:b5:67:4d:87:75:
                    c0:0c:d3:2c:ca:34:ee:6a:8b:4c:b7:c1:5e:3d:3c:
                    55:85:63:d7:a8:3f:c5:6e:d6:58:55:c1:5b:62:49:
                    c3:87:76:04:7a:8c:ed:39:0d:3c:7e:68:0b:43:27:
                    1c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:55:C1:76:8A:9C:1E:A4:1A:CC:95:22:B9:C1:FA:CF:B9:A9:D9:C3
            X509v3 Authority Key Identifier:
                keyid:1D:EE:90:79:9B:3B:2F:7E:FC:21:6D:AB:92:BD:F4:58:6D:4C:C0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1DEE90799B3B2F7EFC216DAB92BDF4586D4CC0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8583101F33B33E0A9D6AECC74233EB868B767DDEE02A20FC18B803B5CB41DEA/0/323830333a323665303a3a2f33322d3438203d3e20323639393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:26e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:b4:a3:9a:fd:0b:e6:07:9d:23:f6:ae:c7:af:83:8f:35:80:
         f3:f2:b0:99:a3:7c:af:70:24:81:f9:22:25:f3:54:80:7a:1f:
         51:ca:4a:93:f7:74:e2:d5:9c:19:1a:22:4d:11:a1:22:0c:20:
         05:72:29:4f:32:a1:fd:e7:47:c4:1e:ac:0a:6e:73:2b:bc:f5:
         b2:c9:75:09:94:e1:10:ef:2c:33:78:01:9a:3c:8a:c6:a0:97:
         cb:2a:4b:1c:eb:77:6b:c7:27:a0:99:93:b9:92:f0:cf:38:7c:
         c9:9f:9c:23:18:b7:67:7a:6e:72:9c:85:21:d6:11:bf:6e:f2:
         87:03:31:57:72:10:44:69:43:b1:ed:83:e0:6b:3c:fb:fb:5a:
         dc:5c:8a:58:a5:a0:79:46:76:5c:4b:54:f3:a5:6b:cf:8e:c8:
         e4:4d:18:ed:47:72:7a:48:bd:4f:75:c8:e9:b2:73:5d:d1:f7:
         e4:a2:ae:3f:46:dc:ce:28:a4:ce:43:57:7e:a3:e0:0a:a3:4b:
         a4:02:1c:b4:ca:be:07:32:e8:f1:6d:86:a8:f3:2c:b4:72:bf:
         90:0b:9d:4f:c7:7f:c7:49:99:7c:93:e5:e4:d3:bc:79:79:12:
         35:20:d7:45:81:7c:87:5e:52:53:02:b8:2a:78:e6:36:f7:7e:
         cf:9e:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----