Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a313030303a3a2f34382d3634203d3e20323731393932.roa
File:                     323830333a393131303a313030303a3a2f34382d3634203d3e20323731393932.roa (raw, json)
Hash identifier:          kDP4A/gh6BDSvW274NW80ZVoJmJrdGVk4Sr4h6m1OVk=
Subject key identifier:   91:A4:CD:00:5F:2E:F2:06:85:53:3E:F6:EB:0B:6B:8D:C9:FF:15:0D
Certificate issuer:       /CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
Certificate serial:       187DED260FF474F8D3B826CAB5B7D6302BB214A4
Authority key identifier: B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a313030303a3a2f34382d3634203d3e20323731393932.roa
Signing time:             Tue 05 Mar 2024 17:51:08 +0000
ROA not before:           Tue 05 Mar 2024 17:46:08 +0000
ROA not after:            Tue 04 Mar 2025 17:51:08 +0000
asID:                     271992
IP address blocks:        2803:9110:1000::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7d:ed:26:0f:f4:74:f8:d3:b8:26:ca:b5:b7:d6:30:2b:b2:14:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B642ACFCC1420CD34E9E29BFDF84F709470FE998
        Validity
            Not Before: Mar  5 17:46:08 2024 GMT
            Not After : Mar  4 17:51:08 2025 GMT
        Subject: CN=91A4CD005F2EF20685533EF6EB0B6B8DC9FF150D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:e2:4e:e0:af:d7:08:ba:0a:41:09:d5:1d:
                    40:ab:41:f7:78:51:ab:9c:4a:42:6e:3e:71:fa:24:
                    ad:97:02:79:d7:54:ed:ec:57:53:cb:c7:e0:0f:72:
                    14:cb:b2:78:30:bc:5a:27:7b:fc:bd:57:f1:31:1c:
                    62:bc:99:0a:92:de:c6:64:ff:84:3e:e0:02:ed:a0:
                    a8:e1:af:9b:2b:c5:7c:87:8d:0e:7b:18:ed:c3:56:
                    f0:17:6a:88:44:63:6a:8d:f3:69:7e:a5:c9:35:f8:
                    0b:9d:49:91:3c:06:8c:22:2a:d8:9a:3b:45:5c:3c:
                    12:a3:78:fa:b7:48:68:6b:dc:e9:12:56:42:1b:39:
                    9a:f6:55:1e:f5:c7:a3:9d:ef:45:d1:9f:d6:5c:96:
                    fc:0b:b6:14:62:69:61:ac:a8:ec:56:eb:9d:eb:76:
                    64:9a:ed:2a:d1:d0:5b:f2:fd:38:2b:f1:98:a5:b2:
                    76:08:93:d2:48:ca:3a:95:e5:b8:42:35:2b:d2:fd:
                    fa:bc:22:14:b7:91:5c:58:3e:13:82:98:50:d6:a1:
                    ca:2f:97:f8:2d:bf:13:1c:3d:7b:92:b2:7a:ca:b6:
                    3e:7b:59:d5:c9:db:41:d2:6a:39:7f:b0:25:83:39:
                    19:79:65:2a:a5:1a:79:9a:40:e2:41:58:f6:84:ba:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A4:CD:00:5F:2E:F2:06:85:53:3E:F6:EB:0B:6B:8D:C9:FF:15:0D
            X509v3 Authority Key Identifier:
                keyid:B6:42:AC:FC:C1:42:0C:D3:4E:9E:29:BF:DF:84:F7:09:47:0F:E9:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B642ACFCC1420CD34E9E29BFDF84F709470FE998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61FC3343617D92E44F1435AE9777D7F4EB59FEAB5DFC1D4B4156173189CA6563/0/323830333a393131303a313030303a3a2f34382d3634203d3e20323731393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9110:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:9b:b6:84:95:f7:c9:e8:92:2e:c9:b5:47:8d:c5:76:1a:09:
         54:f8:10:1d:c2:6d:9f:2b:10:b5:53:79:86:2f:e0:c2:0e:cc:
         ae:32:60:5d:c2:64:78:b7:23:6c:1d:8a:c4:6d:53:83:a4:ca:
         10:ca:7a:44:71:03:9e:22:c7:13:f3:de:7e:ef:79:65:e1:f6:
         35:09:18:00:4f:ad:0f:18:bf:d7:a7:03:b1:d0:ee:df:9f:bf:
         73:f7:93:50:21:b1:99:ff:fa:cf:d5:32:da:57:18:4f:c9:d7:
         33:37:d1:52:47:1d:bb:f6:b6:b4:f9:aa:c1:b8:67:a9:6d:6d:
         8e:01:87:5a:e6:68:db:27:7b:33:6b:98:1a:58:d5:2b:d9:37:
         65:4f:ab:dc:20:ee:a6:17:41:53:8d:f1:e6:b7:78:f7:96:92:
         42:b4:7a:9d:58:6f:60:f6:38:66:52:66:46:33:03:01:16:56:
         9f:e8:19:f4:71:8c:39:7b:0d:29:d6:9f:f0:45:84:87:d9:ab:
         0c:8f:19:f7:a8:a4:b0:a2:da:13:c7:9b:de:be:cc:bb:12:9a:
         d1:84:7d:e7:43:b4:4e:7d:ef:3b:d3:9e:3c:2f:0b:ac:af:da:
         c7:26:41:06:58:28:77:27:af:c1:f4:e4:78:43:a0:c5:ad:2d:
         62:2e:bf:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----