Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59858289317AE64C3C4150A2C72C0B779A88158A4AE380B8B33FE5FB924B5274/0/323830333a393330303a3a2f33322d3332203d3e20323635373630.roa
File:                     323830333a393330303a3a2f33322d3332203d3e20323635373630.roa (raw, json)
Hash identifier:          aXyacwa78NkDpcQy7XBGefNUDSqee9dNcFTnYKptW70=
Subject key identifier:   47:A4:C7:16:05:A9:19:CE:6E:A0:CF:EE:2D:72:BF:E0:AB:E3:DF:22
Certificate issuer:       /CN=F48A92772285FCFD04119FD6A39C74DC9F7A7C57
Certificate serial:       54B8E713D9269B8C8C0BA796C699EB566C7C5C20
Authority key identifier: F4:8A:92:77:22:85:FC:FD:04:11:9F:D6:A3:9C:74:DC:9F:7A:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F48A92772285FCFD04119FD6A39C74DC9F7A7C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59858289317AE64C3C4150A2C72C0B779A88158A4AE380B8B33FE5FB924B5274/0/323830333a393330303a3a2f33322d3332203d3e20323635373630.roa
Signing time:             Tue 05 Mar 2024 18:04:05 +0000
ROA not before:           Tue 05 Mar 2024 17:59:05 +0000
ROA not after:            Tue 04 Mar 2025 18:04:05 +0000
asID:                     265760
IP address blocks:        2803:9300::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b8:e7:13:d9:26:9b:8c:8c:0b:a7:96:c6:99:eb:56:6c:7c:5c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F48A92772285FCFD04119FD6A39C74DC9F7A7C57
        Validity
            Not Before: Mar  5 17:59:05 2024 GMT
            Not After : Mar  4 18:04:05 2025 GMT
        Subject: CN=47A4C71605A919CE6EA0CFEE2D72BFE0ABE3DF22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:e8:76:25:2a:e3:2f:df:22:1e:29:96:07:
                    d8:8c:b8:d9:79:a6:cd:d8:f3:0a:fa:36:70:45:67:
                    4e:52:7a:94:67:a5:69:a1:0a:4a:a3:2b:62:aa:65:
                    2b:8f:db:68:2c:ff:81:ff:50:eb:96:24:62:e3:d4:
                    fa:85:0b:7a:25:6a:fc:11:27:66:f3:2c:e9:de:d4:
                    69:e6:51:dc:47:c4:94:bf:09:49:ba:e0:9f:7a:74:
                    cf:24:60:4f:26:c2:5b:a4:d6:20:f5:44:48:37:02:
                    de:d1:a8:03:09:ea:97:f9:a0:b2:ad:48:17:a4:e9:
                    d1:d3:00:ed:c3:1e:65:a2:7f:57:29:6f:27:89:33:
                    50:d0:a3:16:3b:05:3d:9f:b1:6a:32:59:6d:5d:63:
                    69:6b:07:13:2d:34:e4:70:eb:d3:1c:61:9c:d1:9b:
                    7d:1b:cf:80:26:7e:b6:c6:47:1d:24:82:7f:ae:f9:
                    a9:05:8b:39:53:4e:d8:7e:b9:1a:ff:dc:1e:2b:5d:
                    bc:db:6a:0d:97:f3:4d:a0:db:78:4b:ab:d5:a6:c7:
                    a9:a7:08:d2:2a:20:e0:7f:d4:1d:bc:21:a3:8f:8c:
                    42:b1:43:ab:4d:7f:1f:f5:35:3f:a2:5a:ff:e9:24:
                    67:c5:42:16:1f:eb:12:bc:aa:0b:8f:33:70:75:94:
                    6c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A4:C7:16:05:A9:19:CE:6E:A0:CF:EE:2D:72:BF:E0:AB:E3:DF:22
            X509v3 Authority Key Identifier:
                keyid:F4:8A:92:77:22:85:FC:FD:04:11:9F:D6:A3:9C:74:DC:9F:7A:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59858289317AE64C3C4150A2C72C0B779A88158A4AE380B8B33FE5FB924B5274/0/F48A92772285FCFD04119FD6A39C74DC9F7A7C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F48A92772285FCFD04119FD6A39C74DC9F7A7C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59858289317AE64C3C4150A2C72C0B779A88158A4AE380B8B33FE5FB924B5274/0/323830333a393330303a3a2f33322d3332203d3e20323635373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9300::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:64:5c:a9:f4:79:2f:46:aa:dd:17:d7:ea:23:f3:28:bd:4b:
         b9:f7:87:48:47:16:be:00:65:b3:7f:fb:80:06:dd:d6:29:a0:
         e4:6e:bd:6c:6e:d8:e5:c0:76:e4:84:c8:68:4f:14:8e:65:f1:
         d1:69:8f:f7:ca:61:5b:d4:9c:21:c5:62:50:96:21:21:36:cc:
         08:13:77:c7:3b:ec:9b:2b:da:bf:0b:4c:20:2b:e0:52:a7:ff:
         6f:2a:ee:c6:8c:51:ff:08:b0:e4:40:17:ff:e0:25:5f:b5:28:
         b4:05:fc:07:cc:af:50:33:04:2a:b6:9c:18:c1:b3:30:aa:36:
         f1:67:d6:63:cf:13:88:2c:a0:f0:07:55:be:c1:7d:02:dd:00:
         f1:ef:da:b4:f6:54:65:e5:55:e7:8a:d5:5d:d0:a8:ac:14:f9:
         1f:73:e0:a9:7d:0a:c7:a4:5b:8c:66:cf:d5:04:3b:10:f2:c3:
         fa:bc:7d:87:b3:a3:97:f8:47:88:99:30:62:c8:7d:5f:88:1f:
         c5:ef:90:b7:8a:d0:3d:ea:5f:d5:6f:46:b8:c9:7e:5e:8d:24:
         3f:74:9e:2a:cb:42:37:57:ff:74:52:f3:74:9f:9d:55:d4:b2:
         d5:4d:9b:e0:41:31:61:a2:c3:8f:07:8f:c4:75:1a:c3:78:d3:
         62:90:f0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----