Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/323830333a316436303a3a2f33322d3332203d3e20323639373835.roa
File:                     323830333a316436303a3a2f33322d3332203d3e20323639373835.roa (raw, json)
Hash identifier:          gaQBb7iXl2tyLWpmo1Z2PP0QnKmEhf8EfJkSZ++3rKo=
Subject key identifier:   C4:79:FB:26:61:84:D3:98:A4:93:E8:F7:1A:45:64:C2:E9:9D:F3:82
Certificate issuer:       /CN=C73F4086487CA38B0D5EEE670B20804A270AA478
Certificate serial:       486D2E69555DDDFD5882D76F510E7505C63E9570
Authority key identifier: C7:3F:40:86:48:7C:A3:8B:0D:5E:EE:67:0B:20:80:4A:27:0A:A4:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/323830333a316436303a3a2f33322d3332203d3e20323639373835.roa
Signing time:             Tue 05 Mar 2024 17:45:06 +0000
ROA not before:           Tue 05 Mar 2024 17:40:06 +0000
ROA not after:            Tue 04 Mar 2025 17:45:06 +0000
asID:                     269785
IP address blocks:        2803:1d60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6d:2e:69:55:5d:dd:fd:58:82:d7:6f:51:0e:75:05:c6:3e:95:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73F4086487CA38B0D5EEE670B20804A270AA478
        Validity
            Not Before: Mar  5 17:40:06 2024 GMT
            Not After : Mar  4 17:45:06 2025 GMT
        Subject: CN=C479FB266184D398A493E8F71A4564C2E99DF382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:0c:53:e1:43:f2:d8:29:58:0e:c2:4b:88:
                    5b:e7:e0:f4:11:3a:e3:68:ab:f8:40:76:02:4f:e6:
                    64:d0:7b:91:87:6b:72:71:03:e7:3b:80:34:b2:e2:
                    8d:cd:a4:40:58:bd:6d:c5:64:18:04:c6:8d:cc:b1:
                    8c:ef:44:83:e1:99:b9:09:fd:97:7f:50:3f:cb:85:
                    cf:c3:94:d3:bb:98:15:7e:79:57:70:94:bc:3e:49:
                    f8:d1:86:e2:4c:dc:1d:c8:a2:2d:5f:2c:46:35:32:
                    eb:92:76:d3:0d:00:36:fc:7d:52:07:49:e6:8d:79:
                    21:55:cb:50:c2:05:d0:45:e0:62:03:02:3d:33:ef:
                    7b:4e:95:df:e6:d7:7b:77:6d:41:04:22:86:24:db:
                    47:19:c0:0f:78:a3:0d:25:77:ff:ed:5c:63:3f:21:
                    b7:e2:58:e9:3c:81:c0:d3:70:a0:0c:83:d6:d7:6e:
                    6d:ce:62:d0:78:44:2b:a4:73:b9:58:fb:c0:93:0b:
                    fc:ed:20:28:9f:4b:f7:e9:24:7f:79:0a:df:6f:de:
                    59:2f:1e:93:58:bc:74:1b:20:0e:9a:06:d7:3b:a8:
                    d1:cc:f8:71:da:5e:09:11:80:3c:3f:54:72:05:10:
                    0f:21:b4:c8:dc:84:70:aa:2f:b0:2e:b9:82:29:9d:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:79:FB:26:61:84:D3:98:A4:93:E8:F7:1A:45:64:C2:E9:9D:F3:82
            X509v3 Authority Key Identifier:
                keyid:C7:3F:40:86:48:7C:A3:8B:0D:5E:EE:67:0B:20:80:4A:27:0A:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/C73F4086487CA38B0D5EEE670B20804A270AA478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/323830333a316436303a3a2f33322d3332203d3e20323639373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:36:6c:f8:b8:1f:82:5c:59:7d:3d:6a:cf:19:c1:eb:da:fe:
         3d:80:39:14:85:15:6e:7a:b8:3d:60:78:cb:2c:f4:2b:a8:8a:
         bf:1d:0e:d2:04:f5:ae:3e:98:06:09:56:94:03:47:98:e5:b0:
         28:b2:94:a2:22:c8:9a:46:39:74:ed:f0:ce:83:4d:b6:57:5e:
         9c:f6:fe:3b:b0:85:8f:5b:05:95:4f:1c:fe:f5:c5:f6:88:5d:
         f0:46:2b:d0:ca:2d:7e:4f:9f:1d:de:dc:a6:b2:78:e8:17:ba:
         43:3f:49:e9:8d:8c:75:a0:9b:1f:2b:0f:95:8c:ae:ad:dc:ab:
         ef:0f:b1:36:7a:98:89:79:29:4f:bf:4a:ee:46:65:27:77:06:
         d4:81:96:d3:e7:94:3d:47:95:11:0a:75:5b:1d:24:d2:65:04:
         20:e9:3a:8e:af:6c:12:36:bd:87:d7:11:7c:98:fe:fb:30:c4:
         d9:f5:5d:db:a4:f9:29:5f:99:f1:ae:5a:aa:ae:41:af:47:5f:
         72:53:d9:50:47:05:12:9e:c1:1a:73:36:ad:e1:d2:4c:08:70:
         9c:3c:4c:43:5e:3f:de:a3:89:84:ed:25:65:e6:87:95:d1:5e:
         e9:17:b1:24:c3:a9:52:1c:83:11:6c:0d:fa:8e:75:fa:64:5e:
         eb:e5:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----