Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/323830333a366665303a3a2f33322d3634203d3e20323731373739.roa
File:                     323830333a366665303a3a2f33322d3634203d3e20323731373739.roa (raw, json)
Hash identifier:          srlle0J36A+gmZ636E237TD5JQVpoY2wyjE399D7mpA=
Subject key identifier:   00:9B:EC:12:B7:E9:96:27:29:0A:A2:A7:CA:FA:2F:FF:AF:97:43:7F
Certificate issuer:       /CN=6947D5FD9ADEAB385611F86AE68248A0E982D6D5
Certificate serial:       102A95EEB0D4E5E0A9CC14C6350195F708DBCBBD
Authority key identifier: 69:47:D5:FD:9A:DE:AB:38:56:11:F8:6A:E6:82:48:A0:E9:82:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/323830333a366665303a3a2f33322d3634203d3e20323731373739.roa
Signing time:             Tue 05 Mar 2024 17:43:39 +0000
ROA not before:           Tue 05 Mar 2024 17:38:39 +0000
ROA not after:            Tue 04 Mar 2025 17:43:39 +0000
asID:                     271779
IP address blocks:        2803:6fe0::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2a:95:ee:b0:d4:e5:e0:a9:cc:14:c6:35:01:95:f7:08:db:cb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6947D5FD9ADEAB385611F86AE68248A0E982D6D5
        Validity
            Not Before: Mar  5 17:38:39 2024 GMT
            Not After : Mar  4 17:43:39 2025 GMT
        Subject: CN=009BEC12B7E99627290AA2A7CAFA2FFFAF97437F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fc:20:c7:b4:a0:62:9a:e1:c3:24:6b:25:8b:
                    2e:f9:fe:2b:58:a7:24:3a:17:0f:d7:67:c4:5b:41:
                    cd:b0:3f:8f:14:dc:da:cf:2d:93:6b:b6:c7:60:a6:
                    86:f3:5a:85:cc:24:f0:0e:1f:a9:d0:bb:9b:ad:bb:
                    a3:d1:63:53:6e:2b:fa:b6:e9:4c:bf:7b:6a:73:80:
                    4b:ba:48:61:fc:aa:4c:76:01:d6:d6:29:f3:92:64:
                    fd:f5:7a:1a:44:55:98:c7:1f:58:88:93:ff:ab:ec:
                    30:43:7e:3f:45:a4:41:7a:6d:78:62:f2:ec:05:78:
                    72:1b:84:60:fb:41:6e:ae:1e:b9:0f:3c:6e:c2:97:
                    c2:ae:7f:33:ed:eb:4f:90:b2:44:19:69:d5:d5:06:
                    99:44:72:26:8e:72:67:7d:1a:67:7d:e4:ac:7f:5f:
                    fe:8d:92:c9:89:f1:58:ca:8c:78:a4:3e:87:44:24:
                    8e:63:2d:e0:5a:f6:d7:fa:b0:83:15:7d:57:86:e6:
                    88:d0:a6:f3:64:fe:05:7b:24:62:a6:d0:bd:1a:a5:
                    dd:0b:a6:cd:9a:ff:13:4d:c9:6a:dd:8b:8a:bf:cb:
                    66:de:5e:26:7a:91:d7:83:94:f6:6a:9c:e1:6e:83:
                    f5:0b:0d:60:2f:db:0d:a5:c9:d6:3f:82:68:18:40:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9B:EC:12:B7:E9:96:27:29:0A:A2:A7:CA:FA:2F:FF:AF:97:43:7F
            X509v3 Authority Key Identifier:
                keyid:69:47:D5:FD:9A:DE:AB:38:56:11:F8:6A:E6:82:48:A0:E9:82:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6947D5FD9ADEAB385611F86AE68248A0E982D6D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D879A81743CEA7853AE47393DC1C20614AE29205215430AB8C0942A28CD1C64E/0/323830333a366665303a3a2f33322d3634203d3e20323731373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:5c:c1:f1:b7:9d:f9:96:e9:b8:c7:93:74:a8:c8:3d:8a:4b:
         b6:01:2b:51:3a:11:7c:75:f8:e2:34:1a:10:97:eb:c8:6b:c1:
         c0:99:42:0c:47:21:5e:bc:06:65:fd:d0:c6:a1:16:77:af:b0:
         9f:12:fa:64:c5:0a:da:c3:22:a4:53:6c:72:2b:90:1e:40:d4:
         eb:7c:5a:07:58:3f:5c:53:7e:2d:7d:b2:80:04:e3:04:bf:71:
         13:8e:e0:16:f6:4e:72:79:5f:f0:bb:bb:8e:e7:b4:dc:a8:fb:
         30:96:d3:97:4d:e1:5c:4f:9d:46:75:b7:ca:9a:dd:a5:0e:72:
         22:5b:eb:de:48:82:5d:66:ca:21:fb:c3:fe:6b:20:b8:32:77:
         cd:2c:5b:54:0e:ff:72:57:ab:bb:aa:7f:9f:74:05:0e:a1:c6:
         a2:38:a1:f7:69:24:6c:df:70:48:54:07:74:df:82:0d:2a:8d:
         3a:3c:5c:1d:d2:73:6b:60:8f:06:e9:f0:a2:4a:09:c3:e4:8c:
         06:27:0e:3c:f4:ea:df:43:2a:32:e7:cf:38:5a:3e:b3:1b:e1:
         fe:81:8e:47:98:68:3e:ed:0a:d6:c5:67:5c:44:d4:b3:8e:37:
         59:d2:a8:b9:e0:32:9d:4a:20:82:25:31:33:a0:47:dc:0e:e8:
         fb:a1:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----