Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/323830333a396636303a3a2f33322d3332203d3e20323730303730.roa
File:                     323830333a396636303a3a2f33322d3332203d3e20323730303730.roa (raw, json)
Hash identifier:          N71O+/6QcPu/ImkHyBEDC0NzZHKVcmNa3G5QbAex85s=
Subject key identifier:   E5:0F:DB:44:D6:8D:A0:75:B4:30:F4:7D:77:80:AB:F6:A3:A9:7E:30
Certificate issuer:       /CN=C3210E1056A6F03E5EBAE928296A603EC46256F1
Certificate serial:       41A81B0DF0ABC03EA9E3783489EE616D3DD273F8
Authority key identifier: C3:21:0E:10:56:A6:F0:3E:5E:BA:E9:28:29:6A:60:3E:C4:62:56:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/323830333a396636303a3a2f33322d3332203d3e20323730303730.roa
Signing time:             Tue 05 Mar 2024 17:58:59 +0000
ROA not before:           Tue 05 Mar 2024 17:53:59 +0000
ROA not after:            Tue 04 Mar 2025 17:58:59 +0000
asID:                     270070
IP address blocks:        2803:9f60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a8:1b:0d:f0:ab:c0:3e:a9:e3:78:34:89:ee:61:6d:3d:d2:73:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3210E1056A6F03E5EBAE928296A603EC46256F1
        Validity
            Not Before: Mar  5 17:53:59 2024 GMT
            Not After : Mar  4 17:58:59 2025 GMT
        Subject: CN=E50FDB44D68DA075B430F47D7780ABF6A3A97E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:35:4a:83:fe:3c:3a:e5:ce:c0:51:a5:b9:
                    14:f4:5b:2e:34:4c:d4:73:b2:21:e5:bb:b3:b7:2f:
                    7b:a4:93:63:26:cd:b4:92:73:e3:79:9e:94:03:88:
                    d2:6f:c5:99:4e:26:9b:f5:40:c1:81:66:22:28:55:
                    82:77:a2:c2:be:24:fc:8e:5b:1c:4a:92:5a:9e:1a:
                    ba:e2:de:fb:c6:3c:6d:29:9a:cb:e8:55:9c:ff:e0:
                    17:40:2b:79:e9:e0:e1:fc:bb:01:80:38:7f:64:37:
                    5a:ba:fe:ec:ad:ac:61:63:cd:0b:0b:45:2b:55:a1:
                    94:f4:26:0b:78:ac:44:d4:48:79:94:b5:ef:7b:73:
                    9a:ac:e7:81:bf:5e:b9:9a:0f:25:52:09:9d:99:26:
                    83:0a:c9:c9:67:36:7c:97:f2:83:7d:32:79:4d:fd:
                    05:db:b3:4d:ec:34:f0:6e:82:21:13:66:ad:5e:38:
                    58:4f:f1:e6:7a:a5:30:2e:ae:cb:4b:5d:be:31:9d:
                    2f:f3:88:3c:6d:9d:12:3b:b9:c2:76:91:f0:3f:a1:
                    de:cb:3f:c1:f6:fb:9f:30:9f:a6:57:7b:2f:a3:ab:
                    b9:2d:fc:dc:9d:e3:37:58:f7:86:5d:ec:96:f8:b0:
                    0c:58:b6:f0:7b:eb:40:88:ed:d6:f3:f0:79:2b:d3:
                    56:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0F:DB:44:D6:8D:A0:75:B4:30:F4:7D:77:80:AB:F6:A3:A9:7E:30
            X509v3 Authority Key Identifier:
                keyid:C3:21:0E:10:56:A6:F0:3E:5E:BA:E9:28:29:6A:60:3E:C4:62:56:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3210E1056A6F03E5EBAE928296A603EC46256F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A358D15C9C04C39F2DBACFCAE6F246B097F2BFD84896DEE45E8AB1805294C71F/0/323830333a396636303a3a2f33322d3332203d3e20323730303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:45:31:23:40:cb:93:55:30:09:fa:71:4c:c6:a5:b7:d3:
         48:67:29:e1:94:7c:1c:04:20:0f:c4:16:93:50:8a:dd:fc:74:
         8b:68:73:0c:be:18:b3:24:92:0b:87:fd:fb:f0:f9:fe:23:b5:
         9c:8d:23:85:25:95:d2:65:c7:43:3c:cd:fb:09:58:5d:5f:5a:
         c0:53:e3:de:e6:d5:02:07:0a:9a:26:74:19:fe:76:02:59:49:
         fb:73:87:3f:2e:54:bc:b9:2f:2d:25:f5:58:0a:ee:85:0b:11:
         ac:38:84:47:70:42:66:9c:7f:29:91:fe:95:f2:ea:88:77:5a:
         67:eb:b4:a2:51:6c:e5:f0:1b:bc:76:2d:61:8c:b2:42:49:ab:
         6e:d4:aa:c8:f7:a3:aa:69:73:06:94:49:67:22:98:60:36:70:
         c0:78:03:d1:39:7e:74:cf:c8:43:45:6a:fa:72:37:17:b0:56:
         a5:33:bc:10:9b:52:4e:21:c5:ed:f3:16:a1:93:d4:bf:17:14:
         0a:37:84:25:f6:e8:aa:22:4f:3d:44:29:c5:b5:06:81:f1:52:
         8d:57:45:55:3c:13:9f:c0:53:4a:7d:5c:2a:e4:69:ab:fa:22:
         6c:ef:ba:a5:f1:3f:6a:61:0b:6c:56:e2:9d:78:87:23:ea:34:
         d3:aa:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----