Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3438203d3e20333934363834.roa
File:                     323830333a363334303a3a2f33322d3438203d3e20333934363834.roa (raw, json)
Hash identifier:          1HNNLNo+T7o3Mm+4mCau26k4AYQtMw3LN987rxxqPIU=
Subject key identifier:   01:89:D8:DE:A8:37:2D:C1:F3:B0:61:07:64:34:84:D1:16:F9:70:3C
Certificate issuer:       /CN=3D8CF3696583CC1AFB700F202360AEB49355D862
Certificate serial:       3C3115A13FB0DDB54B2026042C71859F05E9C42E
Authority key identifier: 3D:8C:F3:69:65:83:CC:1A:FB:70:0F:20:23:60:AE:B4:93:55:D8:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D8CF3696583CC1AFB700F202360AEB49355D862.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3438203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 18:20:24 +0000
ROA not before:           Tue 05 Mar 2024 18:15:24 +0000
ROA not after:            Tue 04 Mar 2025 18:20:24 +0000
asID:                     394684
IP address blocks:        2803:6340::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:31:15:a1:3f:b0:dd:b5:4b:20:26:04:2c:71:85:9f:05:e9:c4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D8CF3696583CC1AFB700F202360AEB49355D862
        Validity
            Not Before: Mar  5 18:15:24 2024 GMT
            Not After : Mar  4 18:20:24 2025 GMT
        Subject: CN=0189D8DEA8372DC1F3B06107643484D116F9703C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:73:fc:5c:06:d5:db:90:06:78:05:ed:15:
                    a5:d8:e5:b0:2a:38:9d:d8:74:c3:8d:5b:49:28:7e:
                    f9:2c:1b:37:3f:1c:ef:fa:63:ff:44:b0:95:90:02:
                    54:38:e1:15:e9:c2:7c:36:64:c9:cf:75:11:7d:24:
                    79:40:f8:e2:34:12:59:2b:c0:30:f4:ba:99:4f:a5:
                    75:c9:c0:4a:0c:21:4d:b4:b8:79:05:15:89:9e:e5:
                    da:6d:1c:1f:2f:87:31:45:11:d6:de:1f:55:4b:51:
                    7b:eb:7a:b7:2c:81:a8:b5:32:f7:e4:66:34:ff:9e:
                    4c:ff:07:7e:97:0e:5f:e8:ad:41:c4:4d:6c:4d:95:
                    23:70:8b:46:cf:9b:e8:c4:d8:56:cd:e4:40:d8:f4:
                    16:a5:64:c8:0a:ca:c6:6b:ae:03:99:7b:90:67:6a:
                    23:b1:a9:0d:c0:a8:0f:34:c0:fe:60:04:50:0b:6c:
                    0c:eb:b3:4f:72:58:fc:f8:0c:1a:ad:7b:74:e1:0c:
                    c5:f4:6c:ea:28:13:04:51:6a:90:59:5a:1e:52:d2:
                    bf:87:98:60:28:93:0f:90:97:70:b3:38:a8:a3:33:
                    d1:0d:b8:9e:60:24:6a:5f:c7:82:92:08:1a:9d:27:
                    d2:58:36:55:3f:7e:44:99:98:2d:ee:f4:0a:24:a4:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:89:D8:DE:A8:37:2D:C1:F3:B0:61:07:64:34:84:D1:16:F9:70:3C
            X509v3 Authority Key Identifier:
                keyid:3D:8C:F3:69:65:83:CC:1A:FB:70:0F:20:23:60:AE:B4:93:55:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/3D8CF3696583CC1AFB700F202360AEB49355D862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D8CF3696583CC1AFB700F202360AEB49355D862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3438203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6340::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:2a:41:b2:35:86:8b:74:cb:39:67:10:ee:b2:a3:6c:14:de:
         8a:ee:fb:0c:a2:ea:ea:2d:99:de:14:75:e0:f6:59:d9:cd:3c:
         03:11:2f:7e:c0:39:8b:de:7f:99:ac:58:eb:90:91:0a:0d:c5:
         1d:cc:7d:7c:ed:3c:bc:3b:19:ab:61:f2:c2:22:8c:5f:dc:eb:
         47:ff:93:a8:08:bb:a2:04:55:ce:20:bf:9b:e1:af:1c:ca:ee:
         26:23:32:1e:87:f0:5d:94:c5:fc:71:1a:f3:d0:02:ba:fc:f7:
         08:25:8d:ba:ce:aa:d6:3a:ac:10:25:cd:27:4d:3e:b9:74:1e:
         55:c9:0c:e6:c8:a5:2d:da:55:a5:de:3e:0f:4a:e6:3d:14:ba:
         9a:1c:c5:80:d2:4f:96:e4:38:6c:80:ab:11:bd:34:35:aa:e0:
         01:78:3f:da:67:0b:62:a1:40:c2:b8:76:ae:e5:fc:c4:22:b5:
         b7:cf:25:bb:76:ad:69:fb:87:f0:c6:69:2d:45:aa:69:af:4f:
         78:12:a1:8e:4e:ed:35:1f:8a:f1:87:5c:b2:57:ac:37:5c:63:
         f1:4b:cc:36:2a:0b:77:19:03:93:9d:b9:df:7c:9b:67:e5:61:
         6f:17:1f:99:dc:47:4c:4d:24:fb:8a:18:69:86:bb:db:d5:ce:
         85:db:33:4a
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUPDEVoT+w3bVLICYELHGFnwXpxC4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q4Q0YzNjk2NTgzQ0MxQUZCNzAwRjIwMjM2MEFFQjQ5
MzU1RDg2MjAeFw0yNDAzMDUxODE1MjRaFw0yNTAzMDQxODIwMjRaMDMxMTAvBgNV
BAMTKDAxODlEOERFQTgzNzJEQzFGM0IwNjEwNzY0MzQ4NEQxMTZGOTcwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMP3P8XAbV25AGeAXtFaXY5bAq
OJ3YdMONW0kofvksGzc/HO/6Y/9EsJWQAlQ44RXpwnw2ZMnPdRF9JHlA+OI0Elkr
wDD0uplPpXXJwEoMIU20uHkFFYme5dptHB8vhzFFEdbeH1VLUXvrercsgai1Mvfk
ZjT/nkz/B36XDl/orUHETWxNlSNwi0bPm+jE2FbN5EDY9BalZMgKysZrrgOZe5Bn
aiOxqQ3AqA80wP5gBFALbAzrs09yWPz4DBqte3ThDMX0bOooEwRRapBZWh5S0r+H
mGAokw+Ql3CzOKijM9ENuJ5gJGpfx4KSCBqdJ9JYNlU/fkSZmC3u9AokpAE3AgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUAYnY3qg3LcHzsGEHZDSE0Rb5cDwwHwYDVR0j
BBgwFoAUPYzzaWWDzBr7cA8gI2CutJNV2GIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNTc5QkY4RDVFNDgyNzVCNkYxMUFCMTc4RDA1QkI1NkIw
N0I2N0Q1MjJCQTQ0N0M4MTE0MDY0RjlGQzc3Q0E1LzAvM0Q4Q0YzNjk2NTgzQ0Mx
QUZCNzAwRjIwMjM2MEFFQjQ5MzU1RDg2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRDhDRjM2OTY1ODNDQzFBRkI3
MDBGMjAyMzYwQUVCNDkzNTVEODYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTU3OUJGOEQ1RTQ4Mjc1QjZGMTFBQjE3OEQwNUJCNTZCMDdCNjdENTIy
QkE0NDdDODExNDA2NEY5RkM3N0NBNS8wLzMyMzgzMDMzM2EzNjMzMzQzMDNhM2Ey
ZjMzMzIyZDM0MzgyMDNkM2UyMDMzMzkzNDM2MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDY0Aw
DQYJKoZIhvcNAQELBQADggEBAGwqQbI1hot0yzlnEO6yo2wU3oru+wyi6uotmd4U
deD2WdnNPAMRL37AOYvef5msWOuQkQoNxR3MfXztPLw7Gath8sIijF/c60f/k6gI
u6IEVc4gv5vhrxzK7iYjMh6H8F2UxfxxGvPQArr89wgljbrOqtY6rBAlzSdNPrl0
HlXJDObIpS3aVaXePg9K5j0UupocxYDST5bkOGyAqxG9NDWq4AF4P9pnC2KhQMK4
dq7l/MQitbfPJbt2rWn7h/DGaS1FqmmvT3gSoY5O7TUfivGHXLJXrDdcY/FLzDYq
C3cZA5Odud98m2flYW8XH5ncR0xNJPuKGGmGu9vVzoXbM0o=
-----END CERTIFICATE-----