Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/323830333a3431303a3a2f33322d3438203d3e20323731383436.roa
File:                     323830333a3431303a3a2f33322d3438203d3e20323731383436.roa (raw, json)
Hash identifier:          Y2epcgxasDpqdagL39qdQ8wXehcdWC69cIs0MaaqGmc=
Subject key identifier:   2D:A1:85:62:F9:25:79:B5:F1:D9:5D:77:4E:DD:02:32:6A:50:1B:45
Certificate issuer:       /CN=D69D719244579050CE56AAA81D512523E96439A5
Certificate serial:       0A3AB9AF42511E35B5EC783B255541DF2547574D
Authority key identifier: D6:9D:71:92:44:57:90:50:CE:56:AA:A8:1D:51:25:23:E9:64:39:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69D719244579050CE56AAA81D512523E96439A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/323830333a3431303a3a2f33322d3438203d3e20323731383436.roa
Signing time:             Tue 05 Mar 2024 18:06:50 +0000
ROA not before:           Tue 05 Mar 2024 18:01:50 +0000
ROA not after:            Tue 04 Mar 2025 18:06:50 +0000
asID:                     271846
IP address blocks:        2803:410::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3a:b9:af:42:51:1e:35:b5:ec:78:3b:25:55:41:df:25:47:57:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69D719244579050CE56AAA81D512523E96439A5
        Validity
            Not Before: Mar  5 18:01:50 2024 GMT
            Not After : Mar  4 18:06:50 2025 GMT
        Subject: CN=2DA18562F92579B5F1D95D774EDD02326A501B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b8:79:c7:8a:73:d0:35:c7:56:5b:cb:3d:8b:
                    5a:b4:58:42:e3:ac:d0:4b:37:78:54:76:e1:07:5a:
                    f3:49:1e:59:b6:2d:94:84:aa:c9:a3:16:fe:34:e0:
                    71:67:e2:c8:01:e2:b0:67:78:00:10:32:e8:49:61:
                    5b:3b:34:7e:fc:00:33:45:6d:26:6d:45:a4:a2:05:
                    59:c9:c1:24:c4:08:bc:cb:04:f4:9f:5b:da:ea:31:
                    cb:33:53:78:90:6c:26:b1:33:43:ec:aa:44:06:c1:
                    9a:9d:83:61:71:2b:59:c6:97:f7:f1:02:95:3a:5a:
                    68:bb:f0:85:ad:61:95:13:fd:f5:9d:ce:94:1c:bb:
                    c0:3d:e5:e9:01:e6:58:4d:3d:53:de:76:24:61:9e:
                    51:02:b0:27:58:07:60:79:dd:dc:49:a5:7c:a4:7c:
                    67:bc:59:94:a7:b8:2c:90:9c:c9:bf:5a:da:25:75:
                    8d:da:d2:02:c0:22:4c:5e:89:a4:a5:ff:dc:0c:5c:
                    92:50:5d:9c:87:95:28:2f:2e:a4:f8:58:80:f6:5a:
                    c2:80:88:ab:03:3d:e5:e5:ca:6d:76:95:2e:6c:c3:
                    05:c9:a5:d0:d7:f4:01:55:a2:73:82:bf:10:1a:ff:
                    7c:b7:e7:fe:a8:47:de:6b:03:e3:26:42:19:02:b5:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A1:85:62:F9:25:79:B5:F1:D9:5D:77:4E:DD:02:32:6A:50:1B:45
            X509v3 Authority Key Identifier:
                keyid:D6:9D:71:92:44:57:90:50:CE:56:AA:A8:1D:51:25:23:E9:64:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/D69D719244579050CE56AAA81D512523E96439A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69D719244579050CE56AAA81D512523E96439A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C6893F40CD802E42882ADF9040AE745B2899D3B7D8FECFB6B63DF4DCCFF273/0/323830333a3431303a3a2f33322d3438203d3e20323731383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:410::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:8b:43:88:5b:59:3f:ed:91:ab:59:c5:62:fe:34:d6:f1:52:
         35:6d:b6:21:03:b0:0d:74:dc:0e:af:ca:60:d1:66:ad:c9:71:
         7d:51:71:83:0d:a6:c2:7e:93:dd:e1:7f:e5:0e:89:30:35:d2:
         b5:71:0e:1b:d0:d2:5d:c7:51:ab:61:6e:70:f9:07:8d:6b:76:
         06:f7:4d:44:2d:6e:3f:c6:b6:9d:23:96:ec:3b:51:08:be:23:
         e5:08:09:ba:f4:d7:3a:e3:a1:60:27:66:fb:ab:91:4e:50:cf:
         93:fc:33:98:6a:ec:89:c3:3b:8f:86:cf:51:64:34:c2:17:88:
         e4:b6:cc:20:66:a2:2f:da:cb:f2:47:e1:36:7f:f6:1b:81:44:
         ad:eb:d6:40:42:ec:26:14:57:12:3b:18:12:18:ff:fc:8b:55:
         d2:94:d9:71:05:a2:d2:99:70:47:96:e4:d7:ec:54:8d:30:95:
         b8:ee:b1:50:a6:8e:11:2e:fd:89:07:50:ef:b5:a6:fd:04:5a:
         0a:2f:a2:eb:76:d1:a5:e3:48:c2:c6:58:b7:37:07:51:d0:1c:
         63:eb:94:fa:cc:51:b8:5a:23:93:e7:48:6a:78:d6:55:41:bb:
         4f:2d:5e:ed:8a:8f:cb:4f:50:42:29:50:4e:58:e2:d3:e2:36:
         8b:89:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----