Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20333935313631.roa
File:                     323830303a6261303a3a2f33322d3438203d3e20333935313631.roa (raw, json)
Hash identifier:          aFiabRf+a03Cb2Ij27xX/5HNQb9widz0pnfjbV19M74=
Subject key identifier:   2D:62:B6:EB:AA:76:9C:DE:35:6B:B9:89:0A:36:BA:CF:28:0A:B3:0F
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       439BA2F18855018FCF259585B0F0BDF1EC40403C
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20333935313631.roa
Signing time:             Tue 05 Mar 2024 18:02:23 +0000
ROA not before:           Tue 05 Mar 2024 17:57:23 +0000
ROA not after:            Tue 04 Mar 2025 18:02:23 +0000
asID:                     395161
IP address blocks:        2800:ba0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9b:a2:f1:88:55:01:8f:cf:25:95:85:b0:f0:bd:f1:ec:40:40:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Mar  5 17:57:23 2024 GMT
            Not After : Mar  4 18:02:23 2025 GMT
        Subject: CN=2D62B6EBAA769CDE356BB9890A36BACF280AB30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6a:99:57:04:79:23:7e:d1:c0:f7:d1:77:ec:
                    c5:e3:7b:1d:e4:35:5c:36:fc:b0:5c:45:22:6b:97:
                    0b:ac:21:5c:7d:08:18:e0:c7:4a:6d:83:ac:dd:5b:
                    df:0d:0b:cb:fa:f2:0d:d9:20:88:63:4b:f8:7c:16:
                    56:77:93:81:32:45:c9:df:fc:4b:e0:09:e2:7c:0c:
                    a1:7b:97:a0:77:78:79:24:90:dd:14:7a:6e:0b:e0:
                    87:6f:06:3b:af:2d:93:3e:b4:68:6a:d5:fd:a9:42:
                    b3:02:76:58:b7:51:b8:40:22:84:2e:47:64:d3:09:
                    85:1d:aa:8f:2c:33:50:94:17:11:84:04:99:cc:59:
                    05:f7:3f:f1:e8:7e:cc:25:04:94:a7:01:11:53:f8:
                    10:95:aa:db:99:41:c5:c1:4b:c4:86:3b:d5:98:a5:
                    9e:d6:5f:c3:6e:84:ea:44:ed:3f:11:e6:e7:02:d9:
                    ca:d1:6b:44:68:e4:b6:64:df:a9:47:25:68:ba:d7:
                    a5:ba:07:63:d4:09:02:7e:ac:13:57:f4:62:ab:8d:
                    51:46:22:1b:54:e4:ca:6f:ea:2b:43:b4:b1:f7:e2:
                    2d:25:e1:01:db:84:eb:a5:d5:22:f4:73:cf:73:c6:
                    6e:d5:a6:3a:84:b4:db:4e:91:50:c0:ab:0a:01:ff:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:62:B6:EB:AA:76:9C:DE:35:6B:B9:89:0A:36:BA:CF:28:0A:B3:0F
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/323830303a6261303a3a2f33322d3438203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:05:c8:f0:3c:1a:66:1c:ef:cf:c6:34:26:3e:e1:b8:f1:4b:
         5f:a3:3c:27:34:2e:ee:fa:6a:15:0d:21:e0:47:b0:cd:ff:65:
         21:6e:da:a1:04:c5:8b:33:93:54:3e:a5:b4:cb:08:17:ae:3c:
         56:62:9a:d9:06:51:70:d9:cf:53:e1:c0:0c:7b:e2:de:25:6e:
         89:e0:0b:e7:61:a5:3c:a7:eb:ef:cc:ad:89:ff:a7:16:bf:e9:
         94:e5:6b:8e:99:fa:fe:8f:9d:be:6b:97:16:12:ad:26:36:b4:
         51:71:40:33:18:4d:02:dd:77:2e:55:df:62:c3:fc:01:f1:1d:
         61:50:e8:69:45:a2:4c:51:a8:04:8a:93:87:4a:11:ea:99:f3:
         7b:f8:45:58:c1:c6:f2:f1:d6:e6:2c:a0:9b:f8:06:6e:97:ee:
         9c:5f:d4:95:ae:78:8a:99:1c:b1:17:d1:0f:af:47:ba:58:79:
         1b:84:be:a1:64:b4:6f:b8:e2:53:2c:89:21:56:c8:e0:b0:33:
         03:3b:37:03:e4:6b:4b:ae:d8:a0:32:7a:c9:9d:7a:a2:e9:62:
         c8:34:4a:4e:48:32:a1:24:d4:56:4b:a5:5b:39:7c:c0:c8:f4:
         d3:6c:07:0f:f8:ee:27:4b:70:e1:4d:69:b4:46:05:da:04:b3:
         a7:6b:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----