Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/323830333a633263303a3a2f33322d3332203d3e20323634383336.roa
File:                     323830333a633263303a3a2f33322d3332203d3e20323634383336.roa (raw, json)
Hash identifier:          IcfD75CBr8IzHN85pIWtCP2dJglCx2vV6b+IDPrxbm0=
Subject key identifier:   BC:56:B1:BB:AC:27:0C:55:6A:F9:0B:72:63:5D:F1:10:EB:1F:BF:FD
Certificate issuer:       /CN=ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB
Certificate serial:       0250FC3BF5A21B62F82F6EC3274191CAC7BF0BDE
Authority key identifier: ED:7D:FA:AD:1D:3E:5D:84:3A:6F:4E:EB:CA:DE:20:3F:76:29:02:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/323830333a633263303a3a2f33322d3332203d3e20323634383336.roa
Signing time:             Tue 05 Mar 2024 18:19:31 +0000
ROA not before:           Tue 05 Mar 2024 18:14:31 +0000
ROA not after:            Tue 04 Mar 2025 18:19:31 +0000
asID:                     264836
IP address blocks:        2803:c2c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:50:fc:3b:f5:a2:1b:62:f8:2f:6e:c3:27:41:91:ca:c7:bf:0b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB
        Validity
            Not Before: Mar  5 18:14:31 2024 GMT
            Not After : Mar  4 18:19:31 2025 GMT
        Subject: CN=BC56B1BBAC270C556AF90B72635DF110EB1FBFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:91:ea:e1:e8:0b:12:32:8d:51:45:ec:95:
                    18:a4:b9:da:18:55:e1:ec:86:a7:36:f9:73:4e:f2:
                    76:ad:6c:fe:91:e9:4e:ec:07:56:cf:61:66:3c:00:
                    b4:4a:d4:19:02:fb:0c:86:7e:77:af:e2:9b:6a:3e:
                    ec:7f:31:e6:31:6d:47:39:e8:56:7c:6f:91:2e:2a:
                    9e:98:2a:fb:69:dd:dc:15:6e:ed:5a:b7:a2:ff:b0:
                    25:22:0d:17:6b:d9:b1:17:f3:71:c2:df:d3:34:e7:
                    56:73:35:8f:fe:29:8d:2b:29:7c:9d:6b:de:16:0e:
                    b3:52:21:32:03:da:09:02:e2:32:75:d7:a5:4d:f4:
                    d0:47:7d:4e:ec:d2:38:95:9f:5d:a1:c5:7d:bc:b9:
                    eb:96:a2:58:7d:8f:65:32:75:2a:7f:57:a3:01:f8:
                    eb:9a:36:63:3b:df:b8:b1:d5:f0:a1:97:f6:9f:fd:
                    98:00:46:05:48:9b:aa:f9:d8:26:77:65:ea:c0:98:
                    06:5e:4b:97:75:c8:06:a6:fc:54:46:c9:86:b4:cd:
                    1c:64:19:25:28:3e:70:53:65:f5:12:d6:99:22:77:
                    d4:8a:1c:00:be:a9:01:cd:18:f0:3d:dd:b2:78:57:
                    2b:28:df:65:42:c4:7c:1f:13:a9:7a:7f:c9:1f:2a:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:56:B1:BB:AC:27:0C:55:6A:F9:0B:72:63:5D:F1:10:EB:1F:BF:FD
            X509v3 Authority Key Identifier:
                keyid:ED:7D:FA:AD:1D:3E:5D:84:3A:6F:4E:EB:CA:DE:20:3F:76:29:02:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED7DFAAD1D3E5D843A6F4EEBCADE203F762902DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4C2108036B6A615478D2784E03AA4415F8C1921FFDA308203F8659E54709118/0/323830333a633263303a3a2f33322d3332203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:96:05:72:5d:0f:51:f5:e3:5b:9b:66:8e:80:ee:2f:78:6c:
         32:13:5d:2a:15:81:db:7e:73:ac:51:4b:64:f2:09:4c:97:32:
         62:13:2d:e0:d3:6e:f0:dc:ae:61:81:6e:6b:e5:77:e0:68:3f:
         84:9b:cb:8d:d5:a7:1d:b1:fa:bc:8b:18:e3:3f:9d:1a:ce:f0:
         59:92:5b:b7:12:75:82:85:c9:48:d0:5b:0b:c5:29:5f:0c:27:
         37:68:82:98:4b:12:0c:11:99:eb:79:83:27:77:f2:0c:ca:2c:
         58:1c:3f:ef:b9:15:02:f1:5d:4a:4f:8a:68:b0:db:e8:e7:3d:
         06:01:18:fb:57:b9:4d:55:db:8e:31:f1:29:33:80:7b:6c:8b:
         74:c2:6b:24:fd:f3:16:0e:13:e3:c4:cc:35:7a:66:ee:6f:4a:
         1e:19:c5:44:06:ae:5f:d7:ee:14:0a:20:3f:38:3d:44:c8:5b:
         5a:a7:27:3e:e1:38:83:e1:9d:d6:e6:38:8c:6f:c9:10:b3:e3:
         6b:61:f4:ca:be:e1:71:95:33:93:b3:5a:ea:b2:5b:fb:96:dc:
         2c:b9:6b:fa:43:de:68:83:a7:33:32:1b:a8:47:e9:ba:96:72:
         bc:d3:66:6e:77:a3:c5:e4:f0:12:69:1f:b6:53:c7:c2:2a:8e:
         4e:b3:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----