Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a343a3a2f34382d3438203d3e20323732383735.roa
File:                     323830333a346139303a343a3a2f34382d3438203d3e20323732383735.roa (raw, json)
Hash identifier:          LF5Pf8UN9uFpHdR4Q5ZRtNMFlBSh79gKhK6Kb3h+wKw=
Subject key identifier:   1B:03:EC:6E:F3:88:6C:77:4D:85:99:F6:3B:0C:8F:D3:80:72:05:C2
Certificate issuer:       /CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
Certificate serial:       038266E4BB9E7E45C9977B5AD6C5B790D3057E9F
Authority key identifier: 3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a343a3a2f34382d3438203d3e20323732383735.roa
Signing time:             Tue 05 Mar 2024 17:43:35 +0000
ROA not before:           Tue 05 Mar 2024 17:38:35 +0000
ROA not after:            Tue 04 Mar 2025 17:43:35 +0000
asID:                     272875
IP address blocks:        2803:4a90:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:82:66:e4:bb:9e:7e:45:c9:97:7b:5a:d6:c5:b7:90:d3:05:7e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F
        Validity
            Not Before: Mar  5 17:38:35 2024 GMT
            Not After : Mar  4 17:43:35 2025 GMT
        Subject: CN=1B03EC6EF3886C774D8599F63B0C8FD3807205C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:59:91:d1:cf:e6:12:d9:34:51:00:26:90:
                    da:81:f8:2e:7f:bd:c1:66:f6:01:bc:e4:ea:dd:88:
                    83:7b:38:4e:92:cc:0f:44:e3:dc:64:2c:db:dc:b3:
                    1c:74:c6:eb:ec:6d:2d:a0:1a:8c:47:09:b6:10:07:
                    76:dd:fd:50:a4:53:e3:c0:a9:a4:19:ab:b7:ce:c9:
                    5f:55:3f:45:ed:d5:96:13:bf:4a:52:93:af:55:c2:
                    32:59:7e:0e:48:c4:96:f6:e6:ac:74:0b:01:aa:1b:
                    89:a3:63:11:14:ba:75:32:e3:58:7b:cf:c0:ca:56:
                    05:e8:f8:27:43:9c:e2:b6:2f:62:29:ad:2f:7a:91:
                    3e:d5:ba:d3:0e:ee:d4:59:4d:42:5f:17:01:2b:1f:
                    45:c1:cf:0d:53:a3:0a:7a:bd:9e:d6:9b:c0:43:1a:
                    d6:68:a8:37:85:06:cb:3c:85:d3:35:3a:24:09:dc:
                    c6:57:91:0e:96:f8:1d:de:b7:48:fc:07:82:8b:c8:
                    2d:3e:89:4d:ac:58:22:19:b9:8c:7b:31:f4:39:f3:
                    1d:84:90:73:a4:19:cb:9d:a1:7a:fe:c7:fa:fe:3f:
                    99:29:44:c4:4f:a1:2b:28:aa:0f:87:fc:f3:78:b1:
                    b8:62:ad:56:3d:9d:aa:8a:16:8f:6a:29:91:e8:1d:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:03:EC:6E:F3:88:6C:77:4D:85:99:F6:3B:0C:8F:D3:80:72:05:C2
            X509v3 Authority Key Identifier:
                keyid:3C:CA:FF:3C:26:A3:8C:5E:E9:BF:02:C4:98:48:A1:3D:82:DF:E8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CCAFF3C26A38C5EE9BF02C49848A13D82DFE81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E50B11115C084D6BA8197C0580CAAFEFDFD546F917BF6C3FCE3125AD581653/0/323830333a346139303a343a3a2f34382d3438203d3e20323732383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:b9:8e:c9:e5:2d:d4:c9:c6:93:f3:de:0e:d5:a5:d2:f4:c3:
         58:03:74:14:08:17:f8:b5:91:a0:b0:b1:14:9e:cf:8f:38:e6:
         11:12:d6:d7:66:46:04:23:8f:e0:45:2d:4d:4e:7f:7e:49:fc:
         ea:c5:f9:4a:3d:68:43:13:e5:b8:fe:c5:f6:8c:e9:65:3f:f4:
         1b:67:3c:62:06:92:48:37:8b:af:da:20:7d:c1:98:b9:a8:27:
         77:2e:33:34:5e:d0:fc:0e:d5:3c:ec:4a:b2:91:0e:33:ff:7e:
         92:a5:15:79:be:fa:13:f7:6a:63:74:df:36:7b:19:35:0a:01:
         9c:4e:c2:11:e7:a7:95:63:fd:bf:2d:df:9a:a5:6e:c3:29:91:
         7e:a9:c8:c3:d1:f7:b6:31:9d:29:16:44:ca:70:c5:54:6f:ee:
         3a:15:eb:a8:12:f6:ff:00:fc:d9:fe:a8:74:db:ad:51:51:2e:
         f3:df:82:7f:42:56:3a:ba:c4:08:78:b6:24:36:e6:0c:a6:71:
         4b:7f:30:64:e4:29:6e:38:f1:ce:b6:2d:9e:e6:ef:7c:9d:aa:
         67:10:17:7c:f6:bc:80:7c:d1:6b:29:97:ac:d3:d1:b2:65:b1:
         29:12:9e:51:27:1d:b8:27:44:2d:95:8f:44:56:9e:ff:e6:e9:
         c9:03:ab:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----