Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a333030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a333030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          9rbP073NMT7JGLtd84h2sLknzy9yAQpmsR5iIYXyONE=
Subject key identifier:   5D:9A:88:61:9F:D7:49:DB:D8:26:C4:21:3C:61:1F:06:20:C6:30:24
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       4615CA6FEECB7EBE63A51713F5B43E5F49AE040C
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a333030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Wed 12 Jun 2024 17:00:00 +0000
ROA not before:           Wed 12 Jun 2024 16:55:00 +0000
ROA not after:            Wed 11 Jun 2025 17:00:00 +0000
asID:                     273142
IP address blocks:        2803:2c50:3000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:15:ca:6f:ee:cb:7e:be:63:a5:17:13:f5:b4:3e:5f:49:ae:04:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Jun 12 16:55:00 2024 GMT
            Not After : Jun 11 17:00:00 2025 GMT
        Subject: CN=5D9A88619FD749DBD826C4213C611F0620C63024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:6b:b1:fd:9c:85:66:2c:40:f6:05:4a:3a:
                    b1:fd:a0:e3:ad:b0:a1:b0:89:22:ed:36:41:bd:25:
                    36:8e:bc:75:21:2d:27:83:3e:46:40:f8:3b:e1:cf:
                    7e:69:48:d4:94:2d:65:aa:52:57:14:c5:4a:a9:55:
                    87:0c:06:8d:28:6b:f7:f7:03:8e:c0:9b:5b:b9:67:
                    34:3c:ab:95:12:4f:a0:0d:0f:df:f9:0b:3c:4d:ee:
                    93:83:8d:02:52:23:8e:15:af:13:a4:62:3b:ce:58:
                    55:f4:16:d2:37:93:3d:91:bb:d1:15:d5:7c:b4:f7:
                    0b:1e:e0:eb:1b:a5:98:c7:bd:3c:fe:30:82:90:87:
                    b1:8a:59:47:ad:8d:76:4b:fe:8f:40:d3:62:48:92:
                    f2:e0:3d:91:a3:31:37:9e:ed:16:3d:c0:b4:6c:79:
                    eb:b7:49:0b:d3:dd:12:99:a1:71:a9:3f:c2:e0:80:
                    3e:a3:57:40:77:6c:69:56:48:a0:4f:1b:96:f3:dd:
                    3c:9e:00:db:d7:ba:81:63:2d:d6:42:be:3d:e3:64:
                    0d:64:f3:a9:bc:f4:3e:90:d3:c4:43:71:7c:87:6d:
                    dd:2f:5f:86:c3:ab:b9:96:0c:0c:37:b7:e4:49:bb:
                    fe:cb:2e:66:c0:a3:13:7b:fd:ed:59:3b:bb:88:79:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:88:61:9F:D7:49:DB:D8:26:C4:21:3C:61:1F:06:20:C6:30:24
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a333030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:72:16:9a:85:38:dc:d9:8f:b1:ca:8f:7f:a7:21:65:23:91:
         c4:06:8d:d0:db:19:fe:49:f1:1d:57:1e:fa:c9:34:3b:e9:97:
         9b:18:71:fc:7f:8d:a7:70:f6:5d:59:7c:5c:b1:0d:35:97:59:
         56:eb:3e:8f:fe:c7:67:29:35:73:62:a3:67:d4:07:3f:0a:1a:
         7f:c4:2b:7f:06:70:85:4e:c7:32:99:ef:96:58:84:99:3b:a7:
         9e:34:a3:1b:6a:77:4b:3d:1c:f2:89:b8:42:ed:46:34:a0:12:
         ff:6e:92:90:81:4c:82:94:dc:e9:5e:df:1f:57:7b:c8:5a:b6:
         d2:bf:75:8b:06:1f:ea:23:cd:4a:bb:2a:34:7d:9a:ca:a5:e3:
         9b:11:1f:e4:12:93:c9:66:28:05:06:ae:e4:cf:04:65:26:06:
         c3:9f:f1:db:c4:9e:62:2b:5f:c6:c5:36:fe:73:79:b6:25:40:
         d3:07:64:44:be:04:22:aa:2c:6a:c9:f9:dd:dd:9a:b3:8c:43:
         88:d9:4c:4c:78:d2:57:93:68:d0:81:80:64:0f:0b:c7:91:74:
         50:57:e5:3a:e8:92:26:16:d5:33:18:e3:50:00:af:c8:b4:88:
         e2:cf:cf:95:7c:22:14:08:68:f1:a7:a4:e4:34:6e:e2:f7:e8:
         37:8a:0d:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----