Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/323830333a396461303a3a2f33322d3438203d3e20323637373431.roa
File:                     323830333a396461303a3a2f33322d3438203d3e20323637373431.roa (raw, json)
Hash identifier:          djOYGiSqXulZsLyJ+Wid0mIqnr048u9z+fnYpQd5F/4=
Subject key identifier:   3C:9C:48:78:81:04:CC:94:24:49:57:93:7C:4E:5C:68:32:ED:19:7E
Certificate issuer:       /CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F
Certificate serial:       0489E6A20D3310C0C2678A07446BA2FB6335DC17
Authority key identifier: 34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/323830333a396461303a3a2f33322d3438203d3e20323637373431.roa
Signing time:             Tue 05 Mar 2024 18:11:23 +0000
ROA not before:           Tue 05 Mar 2024 18:06:23 +0000
ROA not after:            Tue 04 Mar 2025 18:11:23 +0000
asID:                     267741
IP address blocks:        2803:9da0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:89:e6:a2:0d:33:10:c0:c2:67:8a:07:44:6b:a2:fb:63:35:dc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F
        Validity
            Not Before: Mar  5 18:06:23 2024 GMT
            Not After : Mar  4 18:11:23 2025 GMT
        Subject: CN=3C9C48788104CC94244957937C4E5C6832ED197E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:4d:bf:66:e9:4d:e6:57:5a:5e:57:8e:0d:
                    2d:56:a6:6a:55:23:40:62:ef:d2:32:8d:47:ed:ec:
                    27:c9:66:c5:d5:fb:49:41:15:e2:8b:54:27:7c:73:
                    f5:d2:ef:03:74:c1:a0:3a:e9:f5:fc:0e:fa:bf:77:
                    d8:2c:a5:ca:85:12:a9:5d:79:ee:de:0e:ad:e0:05:
                    59:0b:2a:e0:fc:9d:8f:23:aa:a8:ed:64:bc:ae:b8:
                    21:87:5f:ef:6d:05:cf:95:9d:90:7c:dc:35:72:6e:
                    22:08:8b:cf:fb:aa:1f:b3:74:f0:e1:e1:3f:df:cb:
                    b5:76:20:07:ce:02:03:3c:bd:60:2c:7e:e8:05:e8:
                    b8:61:56:15:5f:a1:5b:19:4e:d4:f2:a5:d1:49:55:
                    2f:24:52:26:8b:07:2a:a7:00:11:d2:03:59:42:20:
                    24:0f:7a:4d:e1:ee:24:2c:5c:ac:d3:96:35:25:98:
                    48:9a:f8:f3:a3:a7:e6:0d:a4:fb:56:05:74:09:db:
                    35:f2:1e:fa:1c:0c:5e:46:ec:f0:de:c6:58:97:8d:
                    a7:18:51:bf:35:a6:c4:4b:8a:84:36:14:9d:4a:0f:
                    16:d5:13:6f:67:2f:c3:d2:7b:75:03:03:52:af:69:
                    d0:83:74:56:fc:20:48:60:80:5f:9b:44:39:a1:02:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9C:48:78:81:04:CC:94:24:49:57:93:7C:4E:5C:68:32:ED:19:7E
            X509v3 Authority Key Identifier:
                keyid:34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/323830333a396461303a3a2f33322d3438203d3e20323637373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:3a:02:45:98:b6:a8:dc:b8:a6:73:01:62:76:e1:c1:d8:b4:
         76:98:c9:02:5f:bc:67:f9:72:c4:db:2b:31:08:8c:b0:99:61:
         cd:94:8c:ed:8a:ed:5a:92:d8:fd:a2:14:bc:87:82:0e:7c:a2:
         d8:a7:9e:29:4f:eb:f7:a9:af:bb:dc:d5:86:06:88:49:45:6b:
         43:88:63:c0:31:4d:80:69:d0:73:ff:a1:bb:d6:57:7d:47:05:
         18:a1:5a:d3:9a:94:af:fe:e5:2a:05:86:e1:8b:3e:3f:79:53:
         41:53:05:6c:b5:26:4d:6d:a0:7d:89:b3:3a:79:25:17:c4:bf:
         f9:2d:92:f9:17:88:9a:9a:9c:40:71:a5:72:e7:a4:09:0b:d2:
         84:23:d6:d8:e7:05:8b:fa:a8:c7:ec:85:bb:2b:84:42:e8:95:
         be:24:bd:cc:7e:dc:7f:ba:ec:9b:10:c7:39:3c:d0:01:24:87:
         29:2e:a4:ab:95:5d:3e:d0:ed:35:3e:8a:e8:a7:93:33:3f:9d:
         ef:5c:bb:7a:12:51:d4:ac:87:ee:f5:ab:7c:27:62:1b:9c:9a:
         d7:a4:72:95:3f:35:2a:1e:82:0f:7d:5b:0f:5c:a6:83:69:6e:
         20:e4:fc:83:7b:0a:0e:e0:e2:fb:cb:ce:d3:69:ac:f7:c2:b5:
         57:36:0f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----