Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/323830333a613831303a3430363a3a2f34382d3438203d3e203134303830.roa
File:                     323830333a613831303a3430363a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          QIx352Cj8L2o69hLNlO5Uol1laPXjgmc68mceWCOkok=
Subject key identifier:   B1:1E:45:17:60:D4:6B:8C:F5:31:58:4E:38:26:90:3C:87:85:93:CC
Certificate issuer:       /CN=E3981097C6AD233FEB99DF81E5FA8E3CE87579C3
Certificate serial:       3FD488ED86C96960455245E74B21271720C1625E
Authority key identifier: E3:98:10:97:C6:AD:23:3F:EB:99:DF:81:E5:FA:8E:3C:E8:75:79:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/323830333a613831303a3430363a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 05 Mar 2024 17:46:29 +0000
ROA not before:           Tue 05 Mar 2024 17:41:29 +0000
ROA not after:            Tue 04 Mar 2025 17:46:29 +0000
asID:                     14080
IP address blocks:        2803:a810:406::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d4:88:ed:86:c9:69:60:45:52:45:e7:4b:21:27:17:20:c1:62:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3981097C6AD233FEB99DF81E5FA8E3CE87579C3
        Validity
            Not Before: Mar  5 17:41:29 2024 GMT
            Not After : Mar  4 17:46:29 2025 GMT
        Subject: CN=B11E451760D46B8CF531584E3826903C878593CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:8b:44:91:40:c0:ef:35:83:89:d3:22:7a:
                    82:a3:67:9a:f2:cd:72:d6:a2:12:5a:1c:25:7f:49:
                    69:08:1a:1d:65:04:6e:81:d6:a4:38:d6:2b:1b:be:
                    a9:4a:af:f5:0e:ea:bd:c5:16:de:36:23:37:41:c2:
                    72:3e:bf:f3:8f:62:24:5b:f6:01:66:f9:1a:72:95:
                    94:0d:70:01:f1:38:81:ff:91:aa:4c:00:e4:9a:8d:
                    bb:80:39:63:da:0e:cb:1f:8a:68:a0:7f:04:94:0b:
                    f4:56:4e:e1:39:f6:ae:8e:fb:ac:c5:74:da:9a:6c:
                    92:05:8d:e6:d0:f3:f6:7e:17:56:91:22:4f:39:0b:
                    df:87:56:3f:52:3a:88:0f:40:5b:04:5f:db:42:2e:
                    a0:95:9c:dd:5a:75:b2:96:d2:30:9a:a9:e0:3e:89:
                    57:94:18:03:70:29:4f:9f:cc:94:2e:66:39:55:59:
                    15:8e:99:86:56:35:93:45:97:e3:dc:f9:17:3e:cd:
                    61:68:dc:ee:8d:97:39:72:14:4e:9e:cd:d7:12:1b:
                    6d:80:9a:f7:57:a5:11:05:35:d4:9f:9f:10:61:6f:
                    6b:6e:f9:a5:3e:a3:61:5d:7b:5d:b7:9d:24:97:62:
                    8e:53:22:35:e5:37:d0:74:b9:e3:d1:a0:22:40:30:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1E:45:17:60:D4:6B:8C:F5:31:58:4E:38:26:90:3C:87:85:93:CC
            X509v3 Authority Key Identifier:
                keyid:E3:98:10:97:C6:AD:23:3F:EB:99:DF:81:E5:FA:8E:3C:E8:75:79:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3981097C6AD233FEB99DF81E5FA8E3CE87579C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/844CF21EA113232501F8F196B3ECF23BBBBCE063BC19D65BA0E16A3EEF5CAB9F/0/323830333a613831303a3430363a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a810:406::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:77:30:2c:0a:4f:0d:55:16:2f:69:37:dd:33:97:70:22:34:
         de:0c:7a:1a:1c:27:7b:89:12:28:63:59:51:34:b6:35:47:18:
         8a:97:ae:32:af:38:fc:d3:80:b3:4f:1d:bd:12:dc:ef:b8:3b:
         27:e9:bd:13:7a:a9:f2:f8:37:30:bc:a9:48:65:69:ce:9f:98:
         81:d0:d6:12:5d:4a:12:54:d9:1c:73:aa:1b:b1:26:29:15:f8:
         c8:c0:3b:2a:9c:36:64:aa:05:59:4b:3e:f5:e8:c1:61:c0:ae:
         75:7b:8d:33:89:43:04:cb:18:30:86:0b:14:92:c2:1c:47:7d:
         bd:f2:3e:9e:a1:43:64:64:d6:47:4a:d4:68:06:09:2c:69:33:
         f9:99:21:64:9e:e0:3b:67:b1:51:01:42:29:f7:28:33:77:19:
         88:76:20:45:f2:e5:e1:ee:19:ef:10:b0:8c:52:39:e3:37:e1:
         e1:ed:d5:38:de:81:7a:25:7a:5f:9f:49:2a:c9:1d:0c:77:99:
         ab:53:58:3c:25:6a:dc:47:bd:f1:d3:6e:a2:6e:bc:d1:a7:f2:
         e0:e2:1b:25:22:15:a9:b1:61:d7:42:23:54:cc:11:4f:0b:78:
         57:d3:64:92:02:52:96:b5:32:51:a4:fc:9c:92:bd:98:d4:77:
         47:bd:16:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----