Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/323830333a393436303a3a2f33322d3332203d3e20323637383432.roa
File:                     323830333a393436303a3a2f33322d3332203d3e20323637383432.roa (raw, json)
Hash identifier:          hXONtW8O3s0FIYKgopKUFkvN3U4IKZEuDeihbIqLKcA=
Subject key identifier:   A1:79:27:91:F3:11:03:C5:C3:89:26:F0:94:83:2C:A6:4F:84:74:3F
Certificate issuer:       /CN=F7ED49FE4FBD19C88175FC1E05555233C66F53CB
Certificate serial:       34363E832CAD79D984F02C633552ED76EFCFB43C
Authority key identifier: F7:ED:49:FE:4F:BD:19:C8:81:75:FC:1E:05:55:52:33:C6:6F:53:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/323830333a393436303a3a2f33322d3332203d3e20323637383432.roa
Signing time:             Tue 05 Mar 2024 17:43:46 +0000
ROA not before:           Tue 05 Mar 2024 17:38:46 +0000
ROA not after:            Tue 04 Mar 2025 17:43:46 +0000
asID:                     267842
IP address blocks:        2803:9460::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:36:3e:83:2c:ad:79:d9:84:f0:2c:63:35:52:ed:76:ef:cf:b4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7ED49FE4FBD19C88175FC1E05555233C66F53CB
        Validity
            Not Before: Mar  5 17:38:46 2024 GMT
            Not After : Mar  4 17:43:46 2025 GMT
        Subject: CN=A1792791F31103C5C38926F094832CA64F84743F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:cd:75:52:fd:db:9a:ae:20:cc:8b:f9:b5:
                    dc:60:77:71:df:09:c5:be:df:83:2f:ef:9e:ae:27:
                    83:ff:73:28:17:b3:00:ce:e1:de:b4:7c:c4:64:9e:
                    9e:ed:aa:d8:47:0a:44:4e:04:8f:ba:72:99:6e:05:
                    69:8c:8b:c4:aa:ea:66:ad:cb:d1:92:e8:aa:f2:5c:
                    2b:4e:bb:e4:2b:80:69:d8:46:6b:1c:03:6b:92:87:
                    65:12:dc:83:1d:98:c7:36:7f:65:09:3f:b7:bc:ff:
                    d2:ab:c2:aa:65:ed:d7:c5:6f:56:23:da:b3:02:e2:
                    86:86:60:63:10:6a:45:aa:d8:6e:fd:d0:c0:71:b5:
                    7d:8c:fd:fc:c2:4c:a1:49:2b:e0:96:69:52:d3:31:
                    76:dd:76:8b:44:19:96:02:66:d6:14:15:82:8f:0b:
                    56:a1:e2:64:48:d4:24:1d:6a:27:c3:5e:c0:7d:4f:
                    6c:55:ba:10:dc:58:6f:07:bd:e4:3c:36:9a:b4:40:
                    c6:8e:77:b0:d8:52:18:8e:8f:a6:51:ee:54:5d:13:
                    55:dd:39:0f:e0:10:e7:9b:d5:64:d8:da:69:d9:85:
                    57:68:29:55:11:de:b3:6b:58:e4:3b:d0:fd:a2:29:
                    d3:0d:70:b3:09:42:3d:8d:9b:12:51:3b:a9:28:3b:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:79:27:91:F3:11:03:C5:C3:89:26:F0:94:83:2C:A6:4F:84:74:3F
            X509v3 Authority Key Identifier:
                keyid:F7:ED:49:FE:4F:BD:19:C8:81:75:FC:1E:05:55:52:33:C6:6F:53:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/323830333a393436303a3a2f33322d3332203d3e20323637383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9460::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:fd:3f:94:56:94:9f:b5:50:a6:92:be:0e:2c:89:59:ca:95:
         22:f3:ae:68:4e:eb:c9:60:72:8a:85:d9:3a:39:1e:e3:2c:e6:
         2c:fd:cf:80:1d:58:a8:11:92:fd:83:cf:9d:f8:4b:7c:9e:8d:
         c2:84:32:53:53:8b:94:ce:80:8d:c1:26:ac:a1:37:b5:90:51:
         67:9e:d8:55:8b:56:7e:76:7c:55:d8:42:14:a0:4f:44:e4:30:
         9a:29:40:4c:f7:a0:2a:61:7b:d2:d4:e5:39:e6:19:6b:67:d0:
         c3:f4:3d:a7:80:c4:74:db:0f:d9:a4:eb:2e:50:01:2d:b8:2c:
         01:34:de:29:c0:cd:0f:89:49:4a:8c:52:c0:e3:6b:ce:b0:3b:
         64:fc:b4:f9:6e:2d:32:cd:02:70:e4:c2:46:08:8c:85:47:0a:
         91:33:f5:99:97:cd:11:7a:97:e0:b7:b4:8a:c4:bd:85:0c:c7:
         6b:68:aa:5b:86:15:a8:87:72:f4:16:d1:69:9d:d9:e7:9b:eb:
         c7:e5:0e:ed:8f:45:f6:07:1c:14:74:0b:6d:ad:d7:5b:89:0a:
         f4:40:9b:49:fb:b2:2f:8f:41:cf:25:b4:0b:66:e1:05:9d:ac:
         5e:3b:11:7d:5c:39:12:bd:a4:f2:f4:3c:26:52:27:8c:cd:bf:
         b8:3f:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----