Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a3a2f33322d3332203d3e20323733303131.roa
File:                     323830333a3339303a3a2f33322d3332203d3e20323733303131.roa (raw, json)
Hash identifier:          rQogkq9ynNYUsFTaNgRhIfkBoR7Q34/YXjQinsqk3HE=
Subject key identifier:   FA:E3:FF:7B:8C:5D:42:16:32:13:11:7E:36:61:76:50:77:5A:D2:05
Certificate issuer:       /CN=845A11C928BFE1E8ED4CA40A68A609BC4386CBE1
Certificate serial:       7B1AC9E532A2F1E89D540420E7F8689FE552F098
Authority key identifier: 84:5A:11:C9:28:BF:E1:E8:ED:4C:A4:0A:68:A6:09:BC:43:86:CB:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a3a2f33322d3332203d3e20323733303131.roa
Signing time:             Tue 05 Mar 2024 17:55:11 +0000
ROA not before:           Tue 05 Mar 2024 17:50:11 +0000
ROA not after:            Tue 04 Mar 2025 17:55:11 +0000
asID:                     273011
IP address blocks:        2803:390::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1a:c9:e5:32:a2:f1:e8:9d:54:04:20:e7:f8:68:9f:e5:52:f0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845A11C928BFE1E8ED4CA40A68A609BC4386CBE1
        Validity
            Not Before: Mar  5 17:50:11 2024 GMT
            Not After : Mar  4 17:55:11 2025 GMT
        Subject: CN=FAE3FF7B8C5D42163213117E36617650775AD205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:af:bb:bc:35:d7:72:ff:9c:ff:49:47:15:f3:
                    8f:ed:08:ec:0e:38:e2:b5:a6:35:79:e6:8c:63:e9:
                    99:bc:92:29:01:a4:78:ef:38:df:0c:bc:4f:ef:0d:
                    14:70:43:15:97:41:b3:aa:24:0c:f1:1d:66:8a:f6:
                    68:cb:ef:4f:b4:af:09:a3:74:3d:bd:16:62:24:88:
                    54:d3:ab:f7:ba:4c:11:fe:31:71:fa:d3:c4:1a:75:
                    04:58:38:d2:e4:65:5c:09:2b:da:5a:53:f2:21:23:
                    01:ee:1e:8e:36:24:e4:b8:9c:28:aa:98:3f:70:b4:
                    5b:74:16:21:68:07:a4:79:c0:12:92:4d:91:87:90:
                    3a:40:6a:5a:e0:e8:78:43:17:90:71:26:ca:83:3b:
                    3e:2f:6a:34:f0:3d:45:be:f1:8b:a4:cb:67:18:4f:
                    ea:7d:f0:57:0b:54:e3:1a:b6:ce:3f:7e:18:d9:9b:
                    c2:12:82:e6:6a:ac:73:a3:fb:8a:46:e7:16:3a:37:
                    27:02:99:45:5b:3f:73:04:e7:28:3e:8f:6b:fe:63:
                    86:2f:0f:46:5a:8d:88:2f:bf:6e:0a:0b:d7:06:d3:
                    33:37:02:9c:0c:16:e5:b5:54:be:33:ae:9b:6c:9c:
                    53:a6:e7:dd:e7:4d:60:e0:64:ca:d1:c0:94:c1:96:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E3:FF:7B:8C:5D:42:16:32:13:11:7E:36:61:76:50:77:5A:D2:05
            X509v3 Authority Key Identifier:
                keyid:84:5A:11:C9:28:BF:E1:E8:ED:4C:A4:0A:68:A6:09:BC:43:86:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845A11C928BFE1E8ED4CA40A68A609BC4386CBE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F795901C2F5F3693F09B6D80474803E659E531BBB6756D9FBC48A26AA5604BCE/0/323830333a3339303a3a2f33322d3332203d3e20323733303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:390::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:45:84:d4:9f:f0:df:04:a6:a2:5f:08:f0:1b:60:9b:a0:8f:
         8c:27:d1:2a:a7:21:e4:48:2d:4c:63:96:eb:e9:ec:8a:59:fb:
         c9:7a:f9:44:40:b8:0d:cf:04:c5:fc:e5:c3:27:5d:84:36:f7:
         d5:ff:95:23:bd:52:cf:1e:8c:c8:bf:81:65:aa:82:e2:fd:86:
         fa:b3:80:cd:ec:71:4c:c5:44:6a:dc:4d:1c:77:0c:d5:f4:50:
         a6:23:19:f7:34:6a:95:5e:60:c5:8e:4a:97:27:d9:ae:2e:ad:
         fd:45:c8:70:25:9f:59:98:4b:c6:2a:55:0f:b9:7b:f2:44:57:
         d3:3b:ac:8e:29:53:23:24:25:71:77:bd:24:14:2f:36:cd:e3:
         f3:ec:3a:ce:3f:7f:b6:89:3f:c1:e2:6a:60:75:b1:94:17:5f:
         19:c1:2c:b9:cf:bd:a9:62:f1:0b:ed:bb:75:97:43:ed:78:bb:
         e9:7c:5c:9c:a0:a8:14:7a:98:22:47:e6:55:e4:b7:22:e5:ea:
         00:c7:f5:31:d5:17:44:0f:f6:f9:9a:9f:84:6f:71:a1:ca:4e:
         00:97:07:6e:0c:0e:f3:46:89:2b:1e:0c:97:2e:d3:88:99:46:
         0d:5c:a8:a2:d1:14:cb:b9:4d:0b:f8:d1:ee:5e:3e:08:9d:88:
         0b:0c:de:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----