Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BDD6600762D3B239C880EED7C3DF4599997D713092C69476B2B35CC502208F1/0/323830313a31393a3a2f34382d3438203d3e203532343432.roa
File:                     323830313a31393a3a2f34382d3438203d3e203532343432.roa (raw, json)
Hash identifier:          GxuZgNjMbgUjPBb0ke2wcBZFH6mAPuwSbGHV9CMTVIA=
Subject key identifier:   A9:72:8F:43:7B:55:A0:2E:26:07:32:89:E1:3C:67:15:09:B6:AD:97
Certificate issuer:       /CN=03996CD47718A115B48A83723963AF065C1AB554
Certificate serial:       78A27BB491F509B1F1C061A550D2399FD9F71139
Authority key identifier: 03:99:6C:D4:77:18:A1:15:B4:8A:83:72:39:63:AF:06:5C:1A:B5:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03996CD47718A115B48A83723963AF065C1AB554.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BDD6600762D3B239C880EED7C3DF4599997D713092C69476B2B35CC502208F1/0/323830313a31393a3a2f34382d3438203d3e203532343432.roa
Signing time:             Tue 05 Mar 2024 18:11:46 +0000
ROA not before:           Tue 05 Mar 2024 18:06:46 +0000
ROA not after:            Tue 04 Mar 2025 18:11:46 +0000
asID:                     52442
IP address blocks:        2801:19::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a2:7b:b4:91:f5:09:b1:f1:c0:61:a5:50:d2:39:9f:d9:f7:11:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03996CD47718A115B48A83723963AF065C1AB554
        Validity
            Not Before: Mar  5 18:06:46 2024 GMT
            Not After : Mar  4 18:11:46 2025 GMT
        Subject: CN=A9728F437B55A02E26073289E13C671509B6AD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:f3:e1:21:af:84:d8:6f:c9:2c:6a:04:cb:
                    f1:09:af:ab:67:fa:e5:54:68:16:42:1f:c6:27:5d:
                    ac:9e:22:e4:50:99:97:65:e4:77:da:50:ad:1d:25:
                    8c:d8:e9:5d:d0:17:2a:1a:99:50:f4:2d:14:a2:2d:
                    c8:38:26:c5:1a:35:05:38:13:f6:20:2a:41:72:c9:
                    0b:51:e2:3d:99:f1:5a:d4:18:a3:8d:06:31:4b:95:
                    38:1c:e5:73:56:3b:c8:cc:c3:d6:c4:d5:d3:e9:43:
                    d5:19:2c:d2:16:6a:7d:82:51:94:1d:6b:83:a2:24:
                    d2:7d:38:2e:a7:04:29:ae:87:e3:17:60:7d:50:6d:
                    e6:10:f6:9a:6a:e7:87:ce:9f:b4:b8:85:69:a5:b8:
                    81:53:8a:64:9d:12:49:1f:dd:bd:ed:3d:42:bb:b8:
                    3d:7f:2e:ac:d3:5b:d0:e3:2f:a4:27:1c:ce:18:b9:
                    36:c4:27:7d:6f:e6:15:2b:14:cd:24:be:50:ec:44:
                    3e:19:4f:e7:f2:c9:96:90:6a:7d:35:99:43:48:67:
                    a4:e0:84:48:c1:75:9d:37:38:46:e8:47:d9:cf:3f:
                    79:0f:2c:8b:09:36:c8:c9:bf:02:91:30:91:05:0e:
                    be:a8:5e:07:27:09:65:fb:8a:cf:d8:1e:ae:68:4a:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:72:8F:43:7B:55:A0:2E:26:07:32:89:E1:3C:67:15:09:B6:AD:97
            X509v3 Authority Key Identifier:
                keyid:03:99:6C:D4:77:18:A1:15:B4:8A:83:72:39:63:AF:06:5C:1A:B5:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BDD6600762D3B239C880EED7C3DF4599997D713092C69476B2B35CC502208F1/0/03996CD47718A115B48A83723963AF065C1AB554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03996CD47718A115B48A83723963AF065C1AB554.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BDD6600762D3B239C880EED7C3DF4599997D713092C69476B2B35CC502208F1/0/323830313a31393a3a2f34382d3438203d3e203532343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:c2:40:01:13:f4:eb:63:52:ed:64:dd:48:d3:34:b0:a1:2d:
         2e:92:00:0e:ca:13:78:c6:0f:3a:d4:b6:7c:b2:d3:e6:c3:37:
         da:09:0c:27:8e:b3:60:61:b7:a6:ca:00:a6:93:3f:96:8c:47:
         b0:b4:b9:63:01:04:cf:60:62:29:d4:e0:e0:d1:75:de:cd:25:
         99:02:1d:a3:6f:3a:bd:29:ee:2c:b0:75:21:5e:8a:01:53:19:
         a3:4e:cf:d9:fa:6a:26:04:f7:c2:e9:aa:33:ec:d2:8d:e0:32:
         9d:c6:8f:b9:32:fa:9f:36:aa:87:d5:e1:74:08:18:a6:0c:14:
         0b:07:f3:ac:e8:ee:d6:f0:f3:70:99:71:1d:c5:18:30:a4:85:
         b6:55:21:77:70:8c:09:da:c1:c0:88:d3:ce:90:34:ef:2c:70:
         f1:4c:17:4b:e4:59:c9:50:39:e7:34:e7:8c:08:ab:40:b8:68:
         6c:68:8e:af:fe:73:dd:00:de:16:7c:cd:97:6e:d0:a1:55:06:
         3c:9d:d5:aa:27:b1:c2:89:bb:e6:64:99:17:79:18:92:92:cd:
         50:04:cc:6a:70:1c:80:ec:78:bb:bc:35:88:6a:90:bc:c6:76:
         71:a9:ed:5d:aa:0b:ed:f2:1c:00:9e:99:74:00:7a:c1:4e:5a:
         71:c3:a4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----