Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/323830333a393334303a3a2f33322d3438203d3e20323634363936.roa
File:                     323830333a393334303a3a2f33322d3438203d3e20323634363936.roa (raw, json)
Hash identifier:          GGaVrRjyCOIKhsVl5kdKoHFfeyqQXLJCxUW4frmRgq8=
Subject key identifier:   1E:23:D8:51:83:93:D5:F1:AC:6A:DF:FC:16:EB:0B:A9:B5:3B:3C:22
Certificate issuer:       /CN=D2A5337FA87797971D233BE327907396D0813D5E
Certificate serial:       078AC977B262259B322CB5BC6B0C174C3F0F7AC7
Authority key identifier: D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/323830333a393334303a3a2f33322d3438203d3e20323634363936.roa
Signing time:             Tue 05 Mar 2024 18:21:23 +0000
ROA not before:           Tue 05 Mar 2024 18:16:23 +0000
ROA not after:            Tue 04 Mar 2025 18:21:23 +0000
asID:                     264696
IP address blocks:        2803:9340::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8a:c9:77:b2:62:25:9b:32:2c:b5:bc:6b:0c:17:4c:3f:0f:7a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A5337FA87797971D233BE327907396D0813D5E
        Validity
            Not Before: Mar  5 18:16:23 2024 GMT
            Not After : Mar  4 18:21:23 2025 GMT
        Subject: CN=1E23D8518393D5F1AC6ADFFC16EB0BA9B53B3C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:e8:d7:54:89:cc:0d:53:af:42:87:93:fd:
                    74:90:ba:ad:62:3a:fb:5c:f4:82:37:9e:fd:d8:c9:
                    48:ab:ff:2a:02:07:62:77:51:72:2f:5e:59:84:ff:
                    c5:fb:4c:59:25:d0:58:79:b4:eb:05:22:e5:5d:98:
                    0c:92:04:b6:b7:e5:9a:29:78:f2:d3:9b:4f:ff:ab:
                    bf:20:d9:6f:ac:a1:78:dc:13:cd:31:f6:78:87:35:
                    be:87:f6:d1:5f:37:11:65:d2:48:42:17:1c:b6:1b:
                    e7:30:53:87:c7:d7:04:79:e7:fb:b8:bd:7d:03:09:
                    be:74:91:3c:3e:c8:2b:95:57:6a:d6:53:fe:4e:c4:
                    2a:ff:9f:56:c7:21:4d:dc:9a:de:63:72:70:07:38:
                    b3:a7:41:dd:f5:83:54:37:4f:6b:53:56:87:08:9a:
                    58:ba:6e:8e:61:79:e8:a9:60:d6:0f:02:21:8e:25:
                    1a:a5:c6:b1:7f:af:06:ca:c5:9b:ec:2b:85:ed:41:
                    08:1b:22:15:c1:c3:f0:17:05:a9:52:c9:b4:42:bc:
                    ba:54:81:da:ca:a5:69:77:2a:45:58:b4:6c:a0:4b:
                    8b:80:8a:e6:80:83:1e:f5:9f:9e:7d:e2:04:77:9e:
                    f8:66:da:be:ab:b2:9b:a5:91:6c:38:ba:53:87:e9:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:D8:51:83:93:D5:F1:AC:6A:DF:FC:16:EB:0B:A9:B5:3B:3C:22
            X509v3 Authority Key Identifier:
                keyid:D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/323830333a393334303a3a2f33322d3438203d3e20323634363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9340::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:1f:64:c1:47:eb:60:62:22:e5:ad:9b:57:6d:66:b0:45:81:
         1f:e6:f3:5d:c8:4c:0b:a0:a0:01:89:a5:27:9b:7a:e6:0e:d1:
         2b:93:a8:ca:41:05:71:e0:a7:dc:aa:7b:56:a6:22:e9:71:90:
         39:3e:e9:6a:b4:1c:c8:db:8e:5d:e3:26:8c:f8:3c:85:5d:a8:
         ad:8d:b8:f7:9f:52:5f:66:df:38:a2:6e:ba:a2:6f:76:19:62:
         17:24:e8:ce:1f:c2:f4:8d:65:4b:d5:99:14:99:22:97:38:d9:
         d5:84:55:ec:f1:84:0d:c6:7f:28:1d:eb:53:82:4a:69:fb:f0:
         1e:cb:af:25:1f:61:5e:65:3e:98:f9:aa:a3:1a:2a:af:29:a5:
         14:a8:3c:e4:67:59:b1:3a:50:45:d6:3a:f7:f8:da:a9:9f:01:
         cd:72:23:94:b5:82:25:33:fa:2a:b8:86:6b:b2:fc:67:78:9f:
         72:c9:14:a2:1c:95:54:7b:27:b3:87:b4:13:34:41:08:7e:e7:
         77:3c:0d:ce:9e:57:fd:6c:bf:6b:04:d9:4d:be:a1:19:4f:de:
         d0:35:d2:6e:25:3e:5b:3f:85:77:8d:d6:0f:9a:4a:ea:bf:2d:
         6d:06:66:44:e3:cf:25:40:1c:30:28:9e:b4:a2:eb:93:56:e2:
         60:6c:c6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----