Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/323830303a3535303a32613a3a2f34382d3438203d3e203230393430.roa
File:                     323830303a3535303a32613a3a2f34382d3438203d3e203230393430.roa (raw, json)
Hash identifier:          ff6gKzA5NI1Q2qny6AtbpcSenh0h93/FwruSdrEct/4=
Subject key identifier:   9D:7F:20:A2:2C:22:CE:C1:AA:52:9C:18:FC:F9:EE:F0:41:62:B8:A4
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       1E22BC0C881C38B9DC8CD644F68BA15952928389
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/323830303a3535303a32613a3a2f34382d3438203d3e203230393430.roa
Signing time:             Tue 05 Mar 2024 17:44:25 +0000
ROA not before:           Tue 05 Mar 2024 17:39:25 +0000
ROA not after:            Tue 04 Mar 2025 17:44:25 +0000
asID:                     20940
IP address blocks:        2800:550:2a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:22:bc:0c:88:1c:38:b9:dc:8c:d6:44:f6:8b:a1:59:52:92:83:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:25 2024 GMT
            Not After : Mar  4 17:44:25 2025 GMT
        Subject: CN=9D7F20A22C22CEC1AA529C18FCF9EEF04162B8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:63:2c:28:44:71:92:50:fd:39:5a:f1:41:
                    c9:f3:5f:52:72:41:45:b7:3a:40:15:1b:c5:52:50:
                    52:d6:ef:d1:5a:f4:9a:9f:85:5b:95:5d:72:f4:77:
                    e8:34:25:80:41:b6:a5:a6:86:16:ff:c0:63:c1:86:
                    0d:c3:98:47:10:e4:62:fe:18:fa:e5:c8:c2:a3:19:
                    4f:63:21:f8:2b:9e:f8:92:36:dc:6d:83:57:ca:ce:
                    d8:94:cb:ef:48:eb:2d:da:aa:b6:8e:6b:2c:e0:bc:
                    43:72:50:3a:1c:47:72:4d:e6:03:43:46:82:16:93:
                    09:fc:4d:45:fa:82:8b:20:25:6a:cd:00:e6:90:9f:
                    c4:a0:7d:a5:02:5d:05:fe:fe:45:d4:58:4e:63:86:
                    51:10:e2:9f:f6:03:f3:e8:2c:64:00:91:86:b5:c9:
                    c9:d6:ec:07:21:68:77:ef:52:e3:0d:0a:62:37:19:
                    fb:f8:f8:72:8c:3f:fd:4b:0c:e8:60:7f:69:85:51:
                    fc:ff:1c:0c:37:8f:48:9f:1a:c1:30:5a:d0:c5:f1:
                    ab:5c:2d:5c:3f:8b:8c:ac:79:c2:92:db:10:ae:a7:
                    f7:97:ab:52:c2:c3:48:cb:7a:54:f0:b5:b2:59:4b:
                    cd:5e:60:e2:12:04:6d:30:c8:c9:d3:e0:8d:c5:a4:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7F:20:A2:2C:22:CE:C1:AA:52:9C:18:FC:F9:EE:F0:41:62:B8:A4
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/323830303a3535303a32613a3a2f34382d3438203d3e203230393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:550:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:c4:67:9e:6e:30:75:33:49:13:33:9b:18:e1:b8:2b:73:35:
         ef:3f:e0:c0:7d:99:fb:73:58:f3:08:e6:01:4f:15:8e:38:44:
         0f:13:c9:ea:71:ff:6d:b6:97:be:17:2b:73:7a:44:51:6b:b0:
         6b:4f:06:e1:e8:c6:45:27:70:c9:bd:80:27:cf:0f:0c:23:ec:
         0a:17:f7:c3:a7:2c:78:f3:6c:b7:0b:88:b6:d0:14:18:8a:cf:
         33:6e:c6:61:c5:20:77:53:d2:d6:03:5c:34:2e:09:1f:53:ff:
         d3:75:e2:c6:8c:10:eb:96:20:29:29:c1:0e:9c:3c:d2:6f:39:
         1b:5e:cb:7d:20:4c:12:d4:85:f5:5d:9c:6f:48:0b:4d:d5:c6:
         6d:3f:82:b8:38:95:33:6f:d7:0f:9c:d1:f0:03:7a:53:84:e7:
         f2:7f:6b:a5:e1:74:41:44:33:05:90:2f:23:6a:c9:12:fd:5d:
         cb:80:44:98:de:f6:7b:a8:17:d0:70:d3:9a:b2:68:21:3a:28:
         e4:31:75:38:9a:6b:44:3c:61:b8:1b:c8:c6:91:c0:2a:43:e3:
         08:60:8d:4b:1c:a2:58:57:d0:93:1e:32:9a:eb:ee:24:5b:6c:
         7d:4b:97:c8:8b:d7:f9:88:17:d8:9c:51:42:76:d8:5f:66:ba:
         59:f2:83:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----