Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/323830333a653831303a3a2f33322d313238203d3e2037333033.roa
File:                     323830333a653831303a3a2f33322d313238203d3e2037333033.roa (raw, json)
Hash identifier:          izpyKl4lJNTQaNo3KRHaIYj0J38P9hbMfwXEWt0KecU=
Subject key identifier:   30:D0:8A:5A:2A:9E:98:42:B7:F6:ED:E4:4B:71:F1:A4:6F:87:A0:FD
Certificate issuer:       /CN=4FE355D6E74DE1A2FA766D8FF30C5494F8C19809
Certificate serial:       0D43BC11699B3B1266ED673FFDBBF165892273C4
Authority key identifier: 4F:E3:55:D6:E7:4D:E1:A2:FA:76:6D:8F:F3:0C:54:94:F8:C1:98:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/323830333a653831303a3a2f33322d313238203d3e2037333033.roa
Signing time:             Tue 05 Mar 2024 18:03:42 +0000
ROA not before:           Tue 05 Mar 2024 17:58:42 +0000
ROA not after:            Tue 04 Mar 2025 18:03:42 +0000
asID:                     7303
IP address blocks:        2803:e810::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:43:bc:11:69:9b:3b:12:66:ed:67:3f:fd:bb:f1:65:89:22:73:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE355D6E74DE1A2FA766D8FF30C5494F8C19809
        Validity
            Not Before: Mar  5 17:58:42 2024 GMT
            Not After : Mar  4 18:03:42 2025 GMT
        Subject: CN=30D08A5A2A9E9842B7F6EDE44B71F1A46F87A0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0d:37:b9:39:f2:23:17:68:3d:fd:9f:f2:aa:
                    4d:30:20:66:d3:16:30:4e:7c:98:47:84:31:5c:a7:
                    10:f6:5c:dc:7e:7a:a8:c4:5a:ca:1c:d5:f9:e3:27:
                    e3:86:c4:9c:ca:bf:31:17:f5:a9:7f:31:ce:57:8a:
                    af:44:f3:f0:de:b5:1e:2f:b2:e2:22:55:e0:ac:e4:
                    52:9c:93:f4:f7:f3:fb:0e:0e:67:74:7f:80:ef:12:
                    ee:95:56:94:73:6e:a0:3f:59:9a:c1:ea:0b:7f:cd:
                    0b:63:0b:89:d6:f2:f3:e8:fb:c8:ef:0e:a5:ef:a3:
                    9c:95:5d:6b:00:13:0a:a8:6d:f3:b7:03:76:67:09:
                    6b:c1:8a:fe:75:b6:1c:1f:2e:c7:6b:57:ec:ec:4a:
                    6f:28:79:aa:27:ca:fa:48:17:e5:2f:ab:70:66:11:
                    70:82:d2:3a:2f:b5:e8:bd:77:8a:7e:27:15:89:36:
                    b5:21:76:98:11:cd:60:a0:29:72:fe:e0:99:0d:2a:
                    69:38:e8:5f:d7:fa:ca:c4:fc:d8:ed:7f:9c:4d:13:
                    00:37:bc:27:98:37:9c:35:7d:30:23:62:ff:b9:b4:
                    54:69:5c:44:44:46:f4:c7:92:c5:91:22:be:dd:b7:
                    94:17:55:e7:18:67:57:d7:77:ca:4e:19:e4:4d:85:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D0:8A:5A:2A:9E:98:42:B7:F6:ED:E4:4B:71:F1:A4:6F:87:A0:FD
            X509v3 Authority Key Identifier:
                keyid:4F:E3:55:D6:E7:4D:E1:A2:FA:76:6D:8F:F3:0C:54:94:F8:C1:98:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/323830333a653831303a3a2f33322d313238203d3e2037333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e810::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:2e:ef:08:75:e7:fc:9b:1a:df:56:4b:ed:01:39:bf:22:
         79:ee:5b:0b:5d:aa:58:0b:06:8a:62:35:21:1f:c9:dd:73:34:
         40:f3:a7:36:62:d4:40:d0:59:ff:95:e9:98:51:bd:08:3c:99:
         37:5d:3a:d6:2e:66:0e:a4:1c:81:57:70:79:10:45:09:20:8d:
         f8:67:e8:64:13:02:83:bf:77:bc:28:34:9c:d1:8c:14:8e:1f:
         68:ff:40:cc:5f:36:9a:60:93:5f:2c:35:53:59:e8:f4:8f:8b:
         ab:cb:85:f3:30:8a:e6:ec:e1:0f:1a:96:bc:d8:99:d7:07:62:
         b5:6d:13:a8:05:dd:99:62:f4:61:6e:ee:cc:4b:c9:42:75:b1:
         e2:8c:0e:ad:da:3c:5c:fb:df:6f:c7:6e:ed:14:ed:f5:d8:32:
         d5:e4:ff:ab:77:c4:72:ea:44:51:08:57:d6:4c:01:d5:38:4a:
         ef:a7:6b:36:08:85:0e:54:1a:8a:69:25:33:98:10:87:10:81:
         c0:d0:a2:d7:b3:27:98:34:48:b3:54:63:3b:8b:9a:55:20:54:
         f2:17:79:ee:39:20:68:e0:79:3b:7d:1f:6a:83:17:fa:14:11:
         89:1d:ce:5c:5f:0e:ad:74:21:ed:5d:32:73:77:ac:96:a6:9a:
         3c:d8:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----