Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/323830333a633935303a3a2f33322d3438203d3e20323733383334.roa
File:                     323830333a633935303a3a2f33322d3438203d3e20323733383334.roa (raw, json)
Hash identifier:          MQ4CmIVl4zfmAi/Mq3z0bMRWOiSetkDlUoBlWV/NkGg=
Subject key identifier:   AC:8B:D6:A1:4C:02:BA:9D:C6:F8:8D:DE:27:35:CB:C1:C3:FC:30:B6
Certificate issuer:       /CN=E965E5CF9E1070A4CE10F4A8BE0183D80413014D
Certificate serial:       14BC344268FC47C463523ECC9FF8E24E0E891EBD
Authority key identifier: E9:65:E5:CF:9E:10:70:A4:CE:10:F4:A8:BE:01:83:D8:04:13:01:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/323830333a633935303a3a2f33322d3438203d3e20323733383334.roa
Signing time:             Thu 23 May 2024 22:35:00 +0000
ROA not before:           Thu 23 May 2024 22:30:00 +0000
ROA not after:            Thu 22 May 2025 22:35:00 +0000
asID:                     273834
IP address blocks:        2803:c950::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bc:34:42:68:fc:47:c4:63:52:3e:cc:9f:f8:e2:4e:0e:89:1e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E965E5CF9E1070A4CE10F4A8BE0183D80413014D
        Validity
            Not Before: May 23 22:30:00 2024 GMT
            Not After : May 22 22:35:00 2025 GMT
        Subject: CN=AC8BD6A14C02BA9DC6F88DDE2735CBC1C3FC30B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a2:70:d5:cf:4a:cc:64:66:c4:8d:16:f9:46:
                    80:0b:2c:48:34:04:5b:f4:7a:6c:78:14:54:e9:12:
                    d4:a6:8d:48:bb:35:eb:28:5e:1a:1c:4b:df:dc:f0:
                    91:b5:cd:d7:7b:fd:1a:36:c2:50:18:09:a1:ad:2f:
                    db:2c:7f:be:8e:50:06:95:e3:41:6d:cf:72:5b:4d:
                    22:4d:bb:7b:d1:ad:00:cb:6c:13:71:f5:0c:4f:51:
                    73:e8:cb:4d:73:3f:20:60:c0:69:d5:b2:c8:6c:e7:
                    3b:aa:02:92:0a:5e:b2:97:8a:6c:dd:98:98:98:c6:
                    67:7e:c2:a2:c7:9e:a4:ca:6f:f2:eb:f6:65:fa:94:
                    96:07:af:5d:b3:82:10:52:25:2d:25:50:e5:9f:5a:
                    3a:62:13:86:02:c7:35:c8:7c:88:29:04:5b:67:57:
                    1f:81:6c:5b:f7:a6:6b:64:57:61:8c:66:b2:bc:e0:
                    41:c2:fe:ef:89:81:6d:71:51:b1:9d:1a:3a:e2:cd:
                    25:e4:77:d8:7e:d7:a0:6a:73:57:b0:59:4a:b5:ee:
                    c5:7e:20:4f:41:9e:0a:20:49:7b:78:8d:4e:6c:4d:
                    76:39:ea:42:38:d6:c8:81:03:0b:b8:d7:0d:eb:aa:
                    46:d2:6d:79:c5:69:f0:83:b0:02:96:02:49:36:b4:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8B:D6:A1:4C:02:BA:9D:C6:F8:8D:DE:27:35:CB:C1:C3:FC:30:B6
            X509v3 Authority Key Identifier:
                keyid:E9:65:E5:CF:9E:10:70:A4:CE:10:F4:A8:BE:01:83:D8:04:13:01:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E965E5CF9E1070A4CE10F4A8BE0183D80413014D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8A3A5DE808DE4883FEB754FCD1E9CCA9B97C1AB01B2E6EE87EE372B0DD3A102/0/323830333a633935303a3a2f33322d3438203d3e20323733383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c950::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:f5:2f:b4:13:d0:92:d8:94:ac:75:65:39:89:07:8f:5c:84:
         5f:21:20:f4:03:72:9a:fd:06:e6:19:21:42:19:93:0b:fb:26:
         2c:67:0a:f0:bc:6c:11:82:07:5d:9c:2a:aa:d6:a1:ac:e2:e2:
         70:a8:64:3a:12:1c:40:00:6a:67:a6:68:11:69:5e:8d:13:ab:
         ff:bd:cc:fa:ed:05:26:27:a0:d5:81:50:c6:03:d5:76:0d:3c:
         cf:85:28:4e:5b:b8:68:01:8f:04:16:b1:74:e3:39:0b:64:15:
         ee:75:7d:df:0b:9b:92:22:55:12:1d:74:9b:d5:ba:18:6c:54:
         a0:a4:b8:37:41:b8:fc:98:0e:73:d3:a5:6e:10:c7:1d:a7:a7:
         d0:fc:78:ab:c8:85:7d:5b:83:71:e1:9b:57:f2:77:33:03:dc:
         fa:75:89:3b:3a:40:41:d0:f8:cb:54:ba:81:d5:e1:6b:27:4e:
         20:90:59:0e:c2:d8:6d:a3:0a:5a:cc:e6:96:b2:a0:06:90:05:
         bc:9e:b9:8c:b5:d9:69:9f:1d:4a:1f:30:fd:02:00:12:3a:67:
         51:83:c6:5c:db:72:1b:f8:5f:dc:aa:8a:df:70:da:56:e8:1a:
         74:16:c7:23:c2:a7:30:72:a8:a4:02:f9:19:6f:08:76:30:29:
         07:80:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----