Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/323830333a653831303a3a2f33322d3332203d3e20323731383332.roa
File:                     323830333a653831303a3a2f33322d3332203d3e20323731383332.roa (raw, json)
Hash identifier:          Tloal/KjYZn4oY5uT5dG9UyfMvQu5n2cF1OmC23hdBo=
Subject key identifier:   79:0D:3D:D8:FA:D5:64:16:0B:95:12:83:5A:61:7F:E6:EB:FF:EA:BC
Certificate issuer:       /CN=4FE355D6E74DE1A2FA766D8FF30C5494F8C19809
Certificate serial:       2B09B0B463FFF5835B45B5E68AC3322B40EA0529
Authority key identifier: 4F:E3:55:D6:E7:4D:E1:A2:FA:76:6D:8F:F3:0C:54:94:F8:C1:98:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/323830333a653831303a3a2f33322d3332203d3e20323731383332.roa
Signing time:             Tue 05 Mar 2024 18:03:42 +0000
ROA not before:           Tue 05 Mar 2024 17:58:42 +0000
ROA not after:            Tue 04 Mar 2025 18:03:42 +0000
asID:                     271832
IP address blocks:        2803:e810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:09:b0:b4:63:ff:f5:83:5b:45:b5:e6:8a:c3:32:2b:40:ea:05:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE355D6E74DE1A2FA766D8FF30C5494F8C19809
        Validity
            Not Before: Mar  5 17:58:42 2024 GMT
            Not After : Mar  4 18:03:42 2025 GMT
        Subject: CN=790D3DD8FAD564160B9512835A617FE6EBFFEABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:af:69:bb:0f:1f:66:84:49:57:d5:df:33:
                    c3:7c:db:1a:44:af:54:5d:ab:fa:48:59:40:40:27:
                    c8:ff:71:ef:91:22:02:f5:84:c0:76:fe:5a:20:b3:
                    3e:2e:b7:73:6c:bd:b5:11:7c:1d:49:fa:a9:11:e7:
                    5b:01:e3:0e:8b:42:fd:38:9e:b9:4c:15:67:55:ed:
                    96:42:97:d9:9e:07:74:a8:aa:c0:ae:4d:9d:38:61:
                    23:a4:85:da:cc:82:c8:8f:9b:84:8b:66:a5:3e:22:
                    d2:3e:35:eb:12:31:92:4c:48:95:6a:88:7f:2d:c1:
                    5b:c8:45:0a:5a:ec:35:31:64:a1:44:3f:1f:1a:a3:
                    96:29:f5:1b:9c:23:03:39:9c:6c:83:24:8a:d1:56:
                    cb:f9:2a:be:99:ce:dd:75:53:a7:60:e9:bd:f2:ba:
                    41:6a:21:0c:24:ea:0c:a5:71:8c:43:e2:7e:c0:c8:
                    51:84:8e:01:6a:eb:0b:3b:da:a8:16:d6:1f:24:d3:
                    1e:4f:27:09:82:49:46:96:cc:a0:49:94:d2:2c:a2:
                    0f:a2:d0:ad:78:3d:b1:b9:11:39:bc:de:00:59:35:
                    ad:a2:e7:9e:d5:5b:85:3a:c9:cb:87:e5:57:0e:af:
                    47:35:64:4a:ba:70:73:b6:0b:b8:09:36:b6:14:b1:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0D:3D:D8:FA:D5:64:16:0B:95:12:83:5A:61:7F:E6:EB:FF:EA:BC
            X509v3 Authority Key Identifier:
                keyid:4F:E3:55:D6:E7:4D:E1:A2:FA:76:6D:8F:F3:0C:54:94:F8:C1:98:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4FE355D6E74DE1A2FA766D8FF30C5494F8C19809.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4FB7C46D9EA2361775604C0E336031B90DAF493FAAF72C60ECDD4DCBA23FAFD/0/323830333a653831303a3a2f33322d3332203d3e20323731383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e810::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:be:07:79:42:f4:4b:0b:57:e7:c0:88:86:4b:70:79:b7:3f:
         8b:2e:2a:3f:8b:00:f0:83:dc:32:17:61:17:e4:7f:72:0e:b3:
         71:e8:db:89:5f:36:0a:47:0b:d9:a7:0a:6e:31:e4:15:70:5c:
         6a:68:4c:cf:39:1c:b3:1e:2e:4e:9f:67:4f:6e:57:2a:e7:d3:
         c6:6a:2e:dc:9a:a7:c5:78:b1:b7:69:dc:50:c7:86:7b:c3:46:
         f3:a5:32:b7:28:c0:65:24:6a:65:53:db:75:77:4d:4f:af:9d:
         a9:72:a5:c0:95:9c:8f:87:ec:1f:fc:76:bc:de:fd:90:f5:75:
         7e:e8:f5:80:d4:99:cc:7a:37:66:45:76:6f:2a:fb:63:ba:3c:
         3f:b6:dc:e4:f4:64:7d:99:92:6d:b2:20:8d:04:71:7b:04:f8:
         6b:d8:4f:39:7c:16:2b:db:59:8d:26:69:91:e1:71:6b:84:f1:
         77:fb:a6:50:1e:86:bd:58:76:fb:52:c3:b9:cb:36:d5:2c:3e:
         11:f2:bb:0d:25:5c:c6:a9:b4:88:0b:6b:d7:be:88:ee:04:8e:
         10:57:56:27:fb:44:70:1d:c8:28:76:46:7b:04:7f:f7:e5:92:
         a9:a2:ae:43:e5:78:f7:ee:4d:1f:49:5c:f0:f5:72:28:37:d8:
         14:d7:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----