Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa
File:                     323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa (raw, json)
Hash identifier:          MmHsAj+q1N6dl/8Kq67xad9+HY8KWcEdxIitMOBcdkM=
Subject key identifier:   4F:22:CF:38:CE:06:D4:3E:4D:11:79:DD:F1:6C:78:E7:CA:BA:1B:FB
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       20FBB8A3A5F92F97051BB7C23E2DF57D1084AF2D
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa
Signing time:             Tue 05 Mar 2024 18:06:22 +0000
ROA not before:           Tue 05 Mar 2024 18:01:22 +0000
ROA not after:            Tue 04 Mar 2025 18:06:22 +0000
asID:                     262186
IP address blocks:        2803:6a60:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fb:b8:a3:a5:f9:2f:97:05:1b:b7:c2:3e:2d:f5:7d:10:84:af:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Mar  5 18:01:22 2024 GMT
            Not After : Mar  4 18:06:22 2025 GMT
        Subject: CN=4F22CF38CE06D43E4D1179DDF16C78E7CABA1BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:b4:61:1f:c9:ae:42:71:68:c8:91:63:c0:
                    88:cb:64:ec:79:73:09:94:22:37:76:3e:27:1f:f8:
                    db:17:52:ab:86:69:65:88:e3:d9:3c:ee:0b:94:14:
                    a0:3b:22:61:ce:60:df:70:7d:93:a8:35:f9:38:6c:
                    3a:71:37:d9:eb:62:b4:7f:97:26:79:94:8a:54:74:
                    52:93:54:32:f1:bd:89:c8:96:62:c1:c8:e4:bb:65:
                    4a:5e:d5:73:eb:03:b4:76:83:30:5f:f3:09:d4:68:
                    3a:98:74:58:b9:a7:95:b5:40:47:58:12:e3:78:7f:
                    8a:5a:7f:3b:b1:79:c0:23:28:0a:f1:56:98:44:d6:
                    9f:45:2c:13:43:04:d1:63:91:4d:a9:43:63:b2:50:
                    9d:bd:b9:cc:ec:6b:73:d8:9a:5e:07:1b:60:b4:d2:
                    0d:d1:47:6e:3d:8b:4f:61:8c:d8:42:f7:26:f3:e0:
                    6d:e7:e5:a2:03:58:1b:7c:a0:67:7a:f8:95:c7:c6:
                    12:aa:a3:b7:d3:99:52:8d:dc:9e:52:14:85:a3:00:
                    03:b6:ed:69:97:55:1a:70:4d:7e:ef:35:46:d9:dd:
                    12:54:f8:4d:27:80:f2:e2:df:39:75:40:9a:f2:97:
                    fc:e9:6f:c8:78:19:6e:b8:e9:00:9b:29:a8:35:1d:
                    fb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:22:CF:38:CE:06:D4:3E:4D:11:79:DD:F1:6C:78:E7:CA:BA:1B:FB
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a60:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:61:7c:8b:75:e2:e5:85:43:d4:9c:12:2e:f4:bb:fb:85:
         bf:f2:1c:59:6d:ec:ff:10:75:c2:50:e0:b5:2d:40:da:ef:06:
         2a:02:70:a4:20:78:d3:ac:e6:93:55:7b:df:35:f1:d6:f4:72:
         10:f1:2d:96:53:9b:57:b8:8b:bc:6f:d6:c7:2a:d0:ff:24:6d:
         d9:a8:72:77:ae:28:bd:e9:9c:0b:71:42:7d:02:f0:27:48:cc:
         d8:f6:cd:e6:fb:71:11:0b:7c:ea:aa:34:42:68:e9:fe:25:0e:
         79:ce:f7:64:d0:40:06:38:11:82:b4:fe:5e:85:f4:ae:5d:6b:
         5d:29:01:89:38:44:bf:24:d7:36:3f:e4:5d:90:14:9c:df:c2:
         ad:6a:34:c1:c1:ea:10:a4:d7:c5:03:b7:b1:1d:6c:a2:ad:d8:
         5e:69:94:95:44:6f:5c:b7:0d:8b:f1:2d:a3:54:1a:ef:8b:9e:
         fe:74:c9:0a:e3:4a:30:62:fd:34:b7:17:ea:fd:46:da:e4:0a:
         44:48:29:b1:a2:34:91:2c:28:b4:a3:4b:ab:d8:12:be:0f:7b:
         22:39:c1:bd:d8:d3:d9:99:1b:3d:a8:e9:9d:aa:12:88:e7:a4:
         34:3f:20:a6:8b:f6:82:4d:d9:f2:3c:9a:ed:2c:91:bb:8e:d6:
         a3:4a:f3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----