Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a383a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a383a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          k59dOx+0UP3MV+lq/9YY6yz3x50bWPmisknRn4VgeYA=
Subject key identifier:   35:1D:B8:6B:C7:30:CC:82:EF:F3:33:69:BE:D8:52:44:8A:6B:62:3D
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       3423FB840FFEFA2CD9C488E20BF3E5D457C62EBA
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a383a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 05 Mar 2024 17:50:57 +0000
ROA not before:           Tue 05 Mar 2024 17:45:57 +0000
ROA not after:            Tue 04 Mar 2025 17:50:57 +0000
asID:                     271935
IP address blocks:        2803:7a10:8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:23:fb:84:0f:fe:fa:2c:d9:c4:88:e2:0b:f3:e5:d4:57:c6:2e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Mar  5 17:45:57 2024 GMT
            Not After : Mar  4 17:50:57 2025 GMT
        Subject: CN=351DB86BC730CC82EFF33369BED852448A6B623D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:88:4d:d6:11:0e:3d:90:35:9c:84:2f:77:
                    9b:2e:f6:0c:7d:f7:3f:8a:ca:2c:c6:c2:d0:9e:2c:
                    a0:09:cb:2a:43:4f:5e:e0:62:96:07:35:83:d6:8b:
                    8a:e3:bb:71:75:1e:5e:86:6b:0e:39:80:4b:8b:a2:
                    9c:c6:f2:20:8e:d0:9a:b4:69:fe:84:38:5c:b5:56:
                    ea:7e:86:39:c8:ff:a2:d8:2a:11:8b:d4:07:44:01:
                    32:45:79:5c:e0:6a:9a:11:3d:c2:5a:d6:18:64:81:
                    e7:fb:91:c6:f8:21:f2:35:a2:b1:e9:8b:e2:7b:03:
                    3d:ef:bb:6b:2f:ad:9d:3e:aa:b7:b7:b7:0e:5c:04:
                    da:07:7a:29:15:48:01:73:09:86:07:91:33:4e:8e:
                    a4:e5:15:d0:6f:28:91:a0:6f:d7:50:a2:70:63:c5:
                    82:df:1c:09:6d:59:db:97:b3:99:51:ee:76:45:72:
                    cd:43:5e:24:6e:8f:1d:58:01:a4:d5:e1:f4:78:65:
                    22:50:a6:ca:c5:da:85:6d:c9:f3:ed:3c:e9:c5:b6:
                    c6:07:af:7e:91:5e:c3:34:2f:1c:78:da:c3:e2:10:
                    89:2e:32:9b:f2:d3:a3:86:0d:4f:9f:bb:c2:86:90:
                    b3:3d:4e:38:9f:2c:0b:f0:a9:9f:6b:12:4a:8d:1e:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1D:B8:6B:C7:30:CC:82:EF:F3:33:69:BE:D8:52:44:8A:6B:62:3D
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a383a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:89:38:84:b7:b1:be:1d:d8:00:4c:97:32:90:62:af:0c:2d:
         95:3a:82:89:2a:39:4c:f0:bc:47:0b:a1:3c:fb:86:83:4e:72:
         64:06:b2:c0:12:da:dd:51:5d:e5:53:5c:77:aa:ba:42:11:ae:
         ea:c0:92:0e:b8:6f:43:55:6c:11:e3:ab:c8:40:9a:bd:23:f4:
         82:e0:0a:f8:bb:ad:66:11:31:f1:8f:d0:0d:ef:9d:02:eb:15:
         52:e3:3e:66:ed:6c:b0:1a:b6:ca:58:cb:d7:f3:7d:04:23:75:
         4a:14:86:08:7f:4e:bb:21:17:e8:19:5d:c6:67:55:09:53:64:
         3b:83:21:36:64:51:cc:88:c1:69:26:9a:c6:82:98:1f:0f:df:
         fa:63:e7:5e:90:e4:43:eb:69:8d:47:3c:74:4f:11:cd:a0:cb:
         6b:f3:36:d6:e9:e4:c2:60:12:2b:a2:14:49:62:39:6f:0c:9a:
         f7:87:00:d1:f6:20:e2:fa:a9:1e:ea:d6:9e:b4:77:e3:b8:93:
         d5:bf:de:e4:b5:79:f7:a3:cb:78:3a:f4:b8:7b:e3:3a:80:e9:
         e3:38:91:d3:48:e6:0e:a0:24:75:e1:c8:e8:68:07:fb:20:44:
         8f:0a:76:31:62:13:85:4d:7c:6b:58:cc:94:3d:ed:9e:50:54:
         bc:05:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----