Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a343a3a2f34362d3438203d3e20323731393432.roa
File:                     323830333a323631303a343a3a2f34362d3438203d3e20323731393432.roa (raw, json)
Hash identifier:          ppqm6BILS5byEJoFj90XvmATDFRMMT0o3LEFnCf3qcQ=
Subject key identifier:   76:7F:A4:6E:EE:1E:0D:1E:E2:05:5C:53:03:EE:F7:B5:3E:D4:12:8C
Certificate issuer:       /CN=B6403C53F9B05EDE5B902522724143F306D488E7
Certificate serial:       2FE3D8FEB0618EE04B7B08696CAB792EE91DB6E0
Authority key identifier: B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a343a3a2f34362d3438203d3e20323731393432.roa
Signing time:             Tue 05 Mar 2024 17:58:30 +0000
ROA not before:           Tue 05 Mar 2024 17:53:30 +0000
ROA not after:            Tue 04 Mar 2025 17:58:30 +0000
asID:                     271942
IP address blocks:        2803:2610:4::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e3:d8:fe:b0:61:8e:e0:4b:7b:08:69:6c:ab:79:2e:e9:1d:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6403C53F9B05EDE5B902522724143F306D488E7
        Validity
            Not Before: Mar  5 17:53:30 2024 GMT
            Not After : Mar  4 17:58:30 2025 GMT
        Subject: CN=767FA46EEE1E0D1EE2055C5303EEF7B53ED4128C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:e3:ce:82:15:dd:29:fc:05:5e:50:43:67:
                    72:7c:3f:98:26:29:4a:b7:05:de:78:e6:82:78:8d:
                    ae:66:28:c3:85:13:11:83:6e:5a:8e:ba:6e:41:b2:
                    e5:84:bb:1a:78:0a:d7:a3:5c:a3:83:d8:76:54:3b:
                    bd:f1:bb:fe:aa:b5:18:5e:45:f9:7e:4d:7e:3a:4c:
                    5c:12:67:70:18:8b:02:1c:40:bc:e8:75:2e:32:97:
                    8e:2a:56:67:9e:d6:88:10:ea:b7:fe:73:8a:77:a0:
                    32:44:52:3b:a1:75:5b:96:e4:2a:dd:ef:1c:bc:73:
                    24:43:1c:27:3b:8c:fa:d5:0c:25:82:95:6e:dc:07:
                    d2:0c:cd:09:a7:f6:a9:c8:fe:58:2c:b1:ca:4f:2c:
                    40:cd:ca:48:04:f7:11:7a:af:b6:b0:6e:d9:4d:20:
                    b5:a5:db:f4:5c:61:2f:31:f8:2a:a4:03:88:7c:03:
                    02:44:e1:d3:8f:03:04:7a:04:c4:fb:5e:f0:fb:a2:
                    55:45:71:0f:23:b7:af:43:b0:c2:91:da:f1:d8:12:
                    59:a9:3b:ca:0d:3f:12:8b:b1:8f:94:d5:67:e9:5a:
                    3b:de:69:8f:8c:70:4b:21:e3:04:c3:6e:83:12:06:
                    eb:27:7b:e4:0e:15:b3:6f:c0:af:d1:c9:62:15:9c:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7F:A4:6E:EE:1E:0D:1E:E2:05:5C:53:03:EE:F7:B5:3E:D4:12:8C
            X509v3 Authority Key Identifier:
                keyid:B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a343a3a2f34362d3438203d3e20323731393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2610:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         8e:52:1e:9d:e6:fb:32:a6:20:8f:bc:8c:ce:db:ae:b5:2a:d2:
         73:f0:0a:68:60:ad:39:eb:cb:4e:35:dd:38:99:58:5c:2f:4c:
         71:c0:a9:7f:f5:ce:59:98:13:16:8d:ea:cc:55:bc:67:6d:16:
         60:b8:31:3a:95:02:23:cd:90:83:a1:ff:9f:57:2f:81:46:c6:
         dd:57:8a:f8:3f:2d:dd:0b:15:f9:31:72:9a:ab:9f:63:fa:e1:
         d6:21:69:64:8a:53:7b:4e:90:be:8b:55:77:be:26:94:ee:dd:
         6f:2d:76:f3:c7:8c:6c:20:53:f7:52:3c:9b:2c:c4:6a:35:89:
         ac:38:2a:92:e1:ee:b3:b5:48:1a:c7:b3:34:b5:74:0d:37:67:
         b1:7a:e5:a3:8c:56:3e:fa:54:7b:44:ad:b4:f1:51:fe:30:2d:
         74:c7:1e:a0:69:6b:b4:ed:d7:29:e6:e2:58:d0:12:88:07:10:
         ca:4e:01:12:d2:5f:01:d8:c9:ce:ea:36:0e:b8:6e:2e:2f:a5:
         36:6a:47:6f:1d:3f:6e:66:d7:b3:8d:a5:05:e0:50:00:18:4e:
         e0:fb:59:cc:3f:4e:b9:9a:a3:d5:73:80:4a:5b:3d:74:f0:42:
         76:71:39:49:63:4a:e5:da:f8:c1:c8:a8:9f:86:c4:3a:93:75:
         ca:1a:33:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----