Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3438203d3e20323634373733.roa
File:                     323830333a646539303a3a2f33322d3438203d3e20323634373733.roa (raw, json)
Hash identifier:          jYpehbSOUy+cmuZYgWcFm2UW7FJHgwZEWV+WhhcuRvk=
Subject key identifier:   B4:37:9B:FF:25:43:19:71:72:1D:40:DA:B5:46:55:5E:02:C7:61:8A
Certificate issuer:       /CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
Certificate serial:       792B1D0AEC504A5D5AD7FDD811E5613975AB1BA1
Authority key identifier: 18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3438203d3e20323634373733.roa
Signing time:             Wed 24 Jul 2024 21:40:02 +0000
ROA not before:           Wed 24 Jul 2024 21:35:02 +0000
ROA not after:            Wed 23 Jul 2025 21:40:02 +0000
asID:                     264773
IP address blocks:        2803:de90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2b:1d:0a:ec:50:4a:5d:5a:d7:fd:d8:11:e5:61:39:75:ab:1b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F
        Validity
            Not Before: Jul 24 21:35:02 2024 GMT
            Not After : Jul 23 21:40:02 2025 GMT
        Subject: CN=B4379BFF25431971721D40DAB546555E02C7618A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:a5:91:33:4d:1e:ac:28:08:54:52:64:c4:
                    10:74:76:72:60:e4:da:e0:2f:75:c9:8c:83:fe:ce:
                    a4:16:aa:af:9c:9b:22:ad:e2:7f:cf:c2:8b:e6:42:
                    d4:cb:34:a9:b6:6f:4b:25:85:db:01:3c:00:7d:1f:
                    6a:f5:5a:95:f1:0d:ae:33:c5:e2:21:bf:52:d7:93:
                    fe:a8:35:fa:10:12:fc:00:62:13:ec:4a:a0:71:60:
                    0d:fa:18:7c:6e:c1:12:1d:6e:03:06:dd:bd:3f:ba:
                    e7:28:8f:af:57:04:44:cd:07:70:a6:d1:88:0d:df:
                    f0:f0:bc:3b:a2:98:be:36:c2:44:3d:b9:d9:b1:a2:
                    a9:7a:28:b8:42:a4:8f:f7:76:4c:8d:1e:27:43:d2:
                    76:b0:2f:1e:dc:10:d9:56:cf:76:c9:4d:76:e4:0a:
                    e3:3a:1c:15:6f:44:95:be:7e:f4:0f:1c:33:aa:0e:
                    6d:00:82:41:72:eb:9b:25:19:a0:95:2e:06:05:c0:
                    bd:e1:f1:06:56:b1:5b:e4:d4:74:5c:fc:24:b2:63:
                    12:7a:ef:46:f3:45:e2:4a:13:8f:98:de:d5:9c:99:
                    df:51:94:b2:14:df:78:d9:fc:5b:75:2e:bc:6e:8f:
                    53:80:e6:ac:6a:aa:f0:31:79:a1:e9:aa:a0:a7:60:
                    14:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:37:9B:FF:25:43:19:71:72:1D:40:DA:B5:46:55:5E:02:C7:61:8A
            X509v3 Authority Key Identifier:
                keyid:18:CD:F6:7D:EB:5A:4D:EB:A3:6F:8B:FA:60:8A:B3:EF:53:58:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/18CDF67DEB5A4DEBA36F8BFA608AB3EF5358F17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18E1131EBB0ED353C0FAEF6691DFED3664FF43F43AFC475FA41275E4E573B779/0/323830333a646539303a3a2f33322d3438203d3e20323634373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de90::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:fc:4a:49:f9:c5:28:f6:1c:b0:53:b8:62:e2:b2:00:f1:bf:
         86:5c:b8:23:06:fa:46:16:b2:8c:9f:c7:4a:24:37:b9:07:85:
         73:e4:c4:56:32:05:d9:69:c3:2d:0b:7e:b2:aa:4e:c8:1a:e8:
         80:f1:61:53:e8:5e:67:4a:54:57:c7:6c:f5:7a:f4:bf:90:3c:
         2c:97:da:23:bd:01:83:af:93:69:26:0f:48:d4:5e:4b:93:ab:
         df:ba:aa:5f:a2:49:ca:81:20:25:41:9f:d7:e9:7d:20:af:10:
         1b:a3:b9:d0:e3:c7:97:5d:25:1b:a3:04:4a:57:e1:01:f3:c3:
         0e:e4:9c:6a:0a:4c:e7:98:dc:8c:0b:1a:41:71:6e:3d:01:c4:
         bd:f1:43:0b:d1:ba:1b:29:fd:d0:0b:71:9d:c0:c1:2d:78:7a:
         c9:90:d2:bf:7a:ba:bc:09:db:d8:60:8d:4f:09:55:ae:36:3d:
         08:e3:99:68:85:1e:72:2c:f6:05:d2:bd:f1:60:a1:a4:45:bf:
         3a:59:7f:58:8b:4c:df:c5:b8:f6:69:a6:53:17:be:15:79:aa:
         23:d7:c2:79:36:94:78:69:c6:7b:34:c8:e0:f4:60:4d:81:ce:
         ed:9d:15:a1:f4:d4:68:50:ea:b9:f1:19:22:d5:01:1e:48:68:
         c8:67:3a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----