Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/323830333a336661303a3a2f33322d3332203d3e20323637373938.roa
File:                     323830333a336661303a3a2f33322d3332203d3e20323637373938.roa (raw, json)
Hash identifier:          grc6yJeaHf/wlA+y17WAbjcBpEqlDJs8yEFRVgzt9AU=
Subject key identifier:   6D:4C:CA:A0:B8:85:51:79:2A:ED:99:F7:7D:B3:76:EF:A7:01:09:37
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       4DE253EF8134464A10F2256431B70C5DBDA7BE66
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/323830333a336661303a3a2f33322d3332203d3e20323637373938.roa
Signing time:             Tue 05 Mar 2024 18:14:12 +0000
ROA not before:           Tue 05 Mar 2024 18:09:12 +0000
ROA not after:            Tue 04 Mar 2025 18:14:12 +0000
asID:                     267798
IP address blocks:        2803:3fa0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e2:53:ef:81:34:46:4a:10:f2:25:64:31:b7:0c:5d:bd:a7:be:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Mar  5 18:09:12 2024 GMT
            Not After : Mar  4 18:14:12 2025 GMT
        Subject: CN=6D4CCAA0B88551792AED99F77DB376EFA7010937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:c4:c7:c2:84:b7:84:d9:24:5d:14:d8:de:
                    59:bf:5b:a9:1a:74:11:9e:3d:d5:a0:9f:dc:e2:ff:
                    1a:15:a6:91:b2:f0:22:4b:7e:fd:66:a7:a3:1a:8b:
                    1e:ef:26:81:d5:8a:18:ea:9c:43:29:d0:e0:1d:8f:
                    36:8f:70:db:5a:a1:dd:44:a0:2f:5a:19:4b:2e:88:
                    40:33:1a:19:c4:14:26:6f:e5:4f:db:30:89:ba:14:
                    d9:76:d5:12:b7:25:31:c5:b5:da:e6:b5:e2:79:f6:
                    09:da:1b:77:db:97:ec:a1:04:1b:c7:ca:5c:47:2b:
                    24:25:d9:db:7b:cc:fc:1e:bc:92:1a:9d:67:b2:5d:
                    18:01:11:ae:0a:b6:73:f0:5d:7e:76:33:68:8b:9a:
                    b6:34:30:4d:aa:bb:9b:a8:e0:4d:71:3a:01:4c:7e:
                    1c:9f:48:54:7c:66:c8:04:b3:44:de:c9:0f:48:44:
                    6f:e1:65:38:90:47:de:51:d3:80:19:53:2d:5c:3e:
                    b8:b5:3a:44:53:f6:03:db:8c:ff:0e:15:cc:7a:b3:
                    5c:b2:0d:00:1e:77:0b:ba:dc:51:14:03:0c:ff:26:
                    f3:9e:8a:92:f4:f2:d4:aa:c6:8b:98:cd:3d:21:f6:
                    24:00:4d:e7:57:ae:37:2c:11:7d:e3:40:57:a5:49:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4C:CA:A0:B8:85:51:79:2A:ED:99:F7:7D:B3:76:EF:A7:01:09:37
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/323830333a336661303a3a2f33322d3332203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:3c:1b:7e:01:f7:ef:da:00:fc:b3:fb:88:7d:f8:c5:65:06:
         8a:76:32:fb:d1:d6:ac:ab:d8:72:e3:1a:df:e2:f4:82:09:5c:
         a7:6f:b7:cc:5b:61:cf:de:62:67:3e:47:ef:05:ca:d6:a7:a3:
         74:eb:27:50:0b:e6:da:6a:f2:db:40:50:f9:ff:4d:e6:10:e6:
         1b:75:bc:f3:05:3f:7d:93:74:39:63:23:7a:07:88:e2:92:3a:
         cc:8e:ee:f2:16:9d:f9:fd:be:ae:f5:dd:5f:c6:6d:a4:e7:2f:
         80:b9:bb:d2:ac:2a:b9:6c:1a:63:8f:98:4b:0d:40:f9:2f:21:
         54:12:ba:b6:df:34:ee:da:c7:c0:58:03:14:38:43:5d:39:28:
         a8:cf:e2:0b:57:c1:d3:ac:a4:3b:a5:52:1f:5d:c5:da:59:96:
         0d:b4:da:71:63:cd:c3:34:bc:75:ad:1c:72:a5:a9:b5:78:73:
         68:d2:d4:6c:a1:2c:dd:db:86:31:6e:f3:c6:f0:5c:06:df:cc:
         90:e8:89:91:79:67:0b:b8:a2:76:c3:b2:3a:f5:b1:3d:fe:5f:
         98:c2:0d:db:47:48:4d:b5:cd:29:24:c1:ab:25:da:13:41:51:
         f9:aa:a5:66:0b:3f:34:0d:8a:77:c2:76:33:ac:04:e0:86:d4:
         e1:62:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----