Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/323830333a3730303a3a2f33322d3336203d3e203237393736.roa
File:                     323830333a3730303a3a2f33322d3336203d3e203237393736.roa (raw, json)
Hash identifier:          z8UgO2QM7WptJPcP9RkhB7zUcwXbM+iSwZnoi4liQ60=
Subject key identifier:   7B:1E:98:79:FD:6A:AF:D7:E7:9C:98:ED:10:7A:43:05:BC:E3:3A:F6
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       2C0A818A5A876167A34ADCBE7B6CC79CED1BE1FF
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/323830333a3730303a3a2f33322d3336203d3e203237393736.roa
Signing time:             Wed 27 Nov 2024 16:45:01 +0000
ROA not before:           Wed 27 Nov 2024 16:40:01 +0000
ROA not after:            Wed 26 Nov 2025 16:45:01 +0000
asID:                     27976
IP address blocks:        2803:700::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0a:81:8a:5a:87:61:67:a3:4a:dc:be:7b:6c:c7:9c:ed:1b:e1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Nov 27 16:40:01 2024 GMT
            Not After : Nov 26 16:45:01 2025 GMT
        Subject: CN=7B1E9879FD6AAFD7E79C98ED107A4305BCE33AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:07:d3:ae:a3:ec:96:d3:f1:55:3a:0b:9f:
                    6e:d7:fe:5a:99:d0:ce:ed:d8:f5:03:0a:81:f6:43:
                    2b:58:ba:dd:6f:da:7f:ef:69:b4:37:e5:9a:60:c6:
                    c9:04:7d:85:ee:d6:f8:74:89:89:9a:56:eb:68:8c:
                    3e:0d:a3:36:22:04:d2:a7:bc:ab:83:74:39:32:80:
                    44:8f:b0:bc:b5:81:96:1b:4b:96:fa:f2:13:63:9c:
                    28:f3:cb:33:85:93:0e:79:d4:38:aa:0a:53:62:16:
                    a8:ae:5d:40:b5:a1:3a:2b:7f:96:a0:1b:41:b3:11:
                    e9:ae:65:0e:1a:c7:13:4a:3d:42:f4:67:c5:61:2f:
                    3f:fb:6f:88:53:cf:e1:1d:56:2d:21:7e:96:d4:34:
                    ad:e7:1d:62:bc:cb:33:bf:fa:a8:9e:47:e3:2a:c4:
                    1e:53:4b:bf:90:83:a4:da:8c:c4:10:90:1b:21:52:
                    d9:27:6e:45:31:4e:4d:c4:79:8a:69:eb:9d:e3:64:
                    4a:07:82:f4:7b:bf:19:33:36:96:40:1e:12:89:bd:
                    7a:b1:52:ec:43:2c:5e:a6:e2:9b:51:a7:85:5b:a1:
                    b1:28:f1:c4:8a:49:b9:76:ea:0c:e9:c9:25:f2:5c:
                    f1:72:e6:35:c9:32:26:c7:1c:8f:ba:fa:0a:86:38:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1E:98:79:FD:6A:AF:D7:E7:9C:98:ED:10:7A:43:05:BC:E3:3A:F6
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/323830333a3730303a3a2f33322d3336203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:700::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:b1:91:76:2e:c5:fd:78:46:3d:b9:c2:4e:fc:74:ba:60:0b:
         2b:c6:ee:61:30:ae:cf:50:40:40:5f:1a:ed:46:c7:ed:51:8c:
         2e:04:79:fe:e3:c2:0d:30:50:8b:d2:b7:66:27:11:83:48:cb:
         a8:50:84:8c:a1:9b:ea:29:75:64:df:e4:3a:0f:45:8f:1c:1e:
         6b:ce:f2:b7:c3:a5:b8:86:fd:24:18:61:0e:54:42:08:60:e7:
         cd:15:2b:5c:33:78:d5:77:8a:91:35:75:d9:42:9e:58:97:78:
         aa:14:b4:b6:00:57:a7:91:42:61:43:6e:0c:da:d3:bc:bb:55:
         cb:18:9f:fb:df:7f:2b:c1:46:d9:a1:41:1b:69:b7:16:6d:96:
         be:8d:e5:65:a9:f8:d8:59:d4:c4:d3:6c:24:2d:5b:17:39:41:
         0a:fa:49:fd:45:64:5d:aa:9c:07:9c:4d:57:a5:ca:cc:22:97:
         f0:6e:5c:a4:8d:f5:75:10:f0:9f:0b:4d:16:11:d6:41:88:2e:
         5b:9c:28:e2:2b:fc:9c:8a:77:18:96:e0:4e:c5:5c:29:48:49:
         ba:4b:91:3a:1b:0f:60:ee:9c:b6:60:8e:34:57:d3:ec:85:08:
         85:b5:d3:af:f6:5a:d1:2a:b4:9c:e4:95:0b:93:90:54:60:55:
         bf:90:4a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----