Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/323830333a636435303a3a2f33322d3332203d3e20323634383338.roa
File:                     323830333a636435303a3a2f33322d3332203d3e20323634383338.roa (raw, json)
Hash identifier:          piAoegSdaQ3lFHKHDW8EFh1ycLqJF1LPLw7PVF7esAY=
Subject key identifier:   9E:9E:EF:81:D2:B5:20:53:74:36:3D:49:34:1E:38:63:3D:2C:3E:36
Certificate issuer:       /CN=B243FA1E3B6F9E73B680DC1ADBB375AE28A45254
Certificate serial:       4B77637AFAB3CF9FF3BF73A70B41193D1F78E05D
Authority key identifier: B2:43:FA:1E:3B:6F:9E:73:B6:80:DC:1A:DB:B3:75:AE:28:A4:52:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B243FA1E3B6F9E73B680DC1ADBB375AE28A45254.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/323830333a636435303a3a2f33322d3332203d3e20323634383338.roa
Signing time:             Mon 16 Sep 2024 21:20:00 +0000
ROA not before:           Mon 16 Sep 2024 21:15:00 +0000
ROA not after:            Mon 15 Sep 2025 21:20:00 +0000
asID:                     264838
IP address blocks:        2803:cd50::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:77:63:7a:fa:b3:cf:9f:f3:bf:73:a7:0b:41:19:3d:1f:78:e0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B243FA1E3B6F9E73B680DC1ADBB375AE28A45254
        Validity
            Not Before: Sep 16 21:15:00 2024 GMT
            Not After : Sep 15 21:20:00 2025 GMT
        Subject: CN=9E9EEF81D2B5205374363D49341E38633D2C3E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:56:c3:a5:86:72:c4:ef:f3:65:86:9d:29:
                    5b:89:f0:e0:24:ae:c4:b1:26:c0:6c:b5:a9:ca:97:
                    ee:18:02:0c:d6:f3:7d:dd:31:d7:51:2b:c8:72:cd:
                    47:2e:b0:31:1d:e4:97:72:7f:0a:fb:c5:2c:57:15:
                    cf:05:f8:ac:0f:a6:ed:64:0b:19:31:c5:af:08:05:
                    2e:80:07:9a:24:64:90:3c:78:99:83:c3:7f:96:68:
                    aa:3d:9e:8b:99:be:7c:6f:c9:21:2a:01:ee:c4:74:
                    7a:e9:43:c6:49:31:80:ae:1b:d0:cd:d0:cb:90:46:
                    c1:6c:1b:28:17:ae:de:18:45:fc:50:6f:09:8a:0b:
                    53:b5:4c:e7:95:b7:25:da:12:c0:56:5e:6f:63:cb:
                    18:14:05:89:fd:7d:78:06:8d:e5:e5:5c:30:a1:8a:
                    85:a7:57:cb:7a:40:b6:5c:1a:c8:7b:08:dc:1c:2a:
                    31:ab:cb:c5:1a:13:b8:2e:f7:7e:65:36:07:b0:02:
                    fc:76:db:61:16:e8:2c:63:28:38:1d:9a:8a:0a:c7:
                    84:a7:5d:d4:6f:7f:69:45:f4:7c:48:a0:76:54:ed:
                    8d:fa:ad:eb:3d:27:34:3d:0c:48:0d:12:1e:93:9d:
                    2d:9f:94:6b:7e:3c:38:72:de:16:8e:31:e1:3a:37:
                    6c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9E:EF:81:D2:B5:20:53:74:36:3D:49:34:1E:38:63:3D:2C:3E:36
            X509v3 Authority Key Identifier:
                keyid:B2:43:FA:1E:3B:6F:9E:73:B6:80:DC:1A:DB:B3:75:AE:28:A4:52:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/B243FA1E3B6F9E73B680DC1ADBB375AE28A45254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B243FA1E3B6F9E73B680DC1ADBB375AE28A45254.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/323830333a636435303a3a2f33322d3332203d3e20323634383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd50::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:61:09:cf:d2:f6:48:f0:b9:0f:bc:56:5e:b4:60:a2:3d:da:
         3a:d9:e1:90:48:2e:27:7d:60:71:8f:96:93:9e:4d:fc:5d:f4:
         69:1d:96:08:69:ac:6a:e5:0c:d6:03:e8:af:92:f5:89:c7:d1:
         85:38:f3:c8:77:e9:6c:f5:cc:63:91:4c:d4:c1:fa:a6:51:61:
         7e:1a:c9:03:5f:9f:33:e1:13:63:d2:a1:9d:de:f4:a9:23:1e:
         6a:ee:85:80:f0:aa:df:a6:0b:d7:32:9d:1d:6f:79:8d:03:44:
         8d:d1:32:d0:c8:9c:e0:61:87:f8:e7:e5:e0:80:f1:da:eb:ce:
         7a:43:15:13:29:27:03:cc:d6:62:d0:da:ce:87:7a:7a:8c:df:
         e1:f4:4c:a3:13:b4:c0:db:ed:14:39:c0:90:f6:c7:63:c4:e7:
         df:4e:1c:29:25:b7:df:d4:f6:5e:0e:57:c8:f8:a2:dc:3a:61:
         64:8c:5b:e0:54:9d:df:14:27:f5:ed:a8:80:1b:54:39:44:a2:
         da:97:44:27:df:a0:bc:19:23:88:63:44:64:06:b3:e7:e4:fc:
         77:4d:ad:ea:de:1b:9d:17:2b:66:0b:dc:32:0d:03:3f:98:99:
         5d:fc:c4:fb:23:79:c1:b0:4f:7b:2e:f3:21:45:22:fe:34:b4:
         84:f4:ff:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----