Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/323830333a3936303a3a2f33322d3438203d3e20323639373335.roa
File:                     323830333a3936303a3a2f33322d3438203d3e20323639373335.roa (raw, json)
Hash identifier:          +I43egJXIP+0u186daXJ9TiH7rjoucMq3mi23Q5wm0o=
Subject key identifier:   83:4B:EC:AF:C2:5C:3D:4A:BE:88:9D:AF:92:BF:42:B1:C7:4E:72:B8
Certificate issuer:       /CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
Certificate serial:       618452D73B23CEB4ACA165C6B0C38B3A2BF3FCB6
Authority key identifier: 6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/323830333a3936303a3a2f33322d3438203d3e20323639373335.roa
Signing time:             Tue 05 Mar 2024 17:48:02 +0000
ROA not before:           Tue 05 Mar 2024 17:43:02 +0000
ROA not after:            Tue 04 Mar 2025 17:48:02 +0000
asID:                     269735
IP address blocks:        2803:960::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:84:52:d7:3b:23:ce:b4:ac:a1:65:c6:b0:c3:8b:3a:2b:f3:fc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
        Validity
            Not Before: Mar  5 17:43:02 2024 GMT
            Not After : Mar  4 17:48:02 2025 GMT
        Subject: CN=834BECAFC25C3D4ABE889DAF92BF42B1C74E72B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:3f:82:99:1d:82:49:bf:97:6a:f7:1b:5e:
                    d1:b5:b9:04:ea:a0:ff:9b:bc:5c:b0:f1:59:80:21:
                    e4:88:c0:87:66:51:66:66:de:ed:75:c5:13:72:d9:
                    6b:69:c7:fc:9e:39:80:4e:c7:69:a6:52:c6:d1:9f:
                    c7:44:7f:1c:78:55:81:33:de:d3:1f:0f:5b:e3:fb:
                    9b:03:ad:5d:fe:8c:9b:1a:91:df:3c:cb:82:64:f4:
                    1b:d0:c0:2a:45:73:ba:6a:30:5f:03:61:77:a3:8b:
                    6c:b5:fa:10:eb:ac:58:2a:dc:4b:05:ff:d7:8e:42:
                    db:03:29:f9:85:1c:99:8e:f5:c5:30:1c:70:93:17:
                    da:af:50:5b:4c:bd:fd:04:b8:0c:44:e6:8c:61:72:
                    19:10:6b:d4:fd:be:68:f9:0c:40:bb:7e:25:a5:9a:
                    dc:54:78:e1:b5:2c:36:77:62:42:bf:38:42:94:31:
                    1f:c3:d9:09:14:07:da:6a:83:ef:47:a3:dc:17:00:
                    9b:bb:54:bd:db:de:68:07:95:df:db:98:87:9d:0e:
                    20:37:e4:45:c8:67:43:cf:63:3f:28:30:46:e9:23:
                    bb:0e:78:31:21:d3:ff:27:61:97:08:a3:19:8b:a2:
                    41:ca:49:47:e8:06:a2:19:66:94:0d:70:7b:8b:ee:
                    32:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4B:EC:AF:C2:5C:3D:4A:BE:88:9D:AF:92:BF:42:B1:C7:4E:72:B8
            X509v3 Authority Key Identifier:
                keyid:6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/323830333a3936303a3a2f33322d3438203d3e20323639373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:960::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:48:02:6a:d3:29:33:76:fa:81:b2:08:c9:ae:eb:78:f4:ea:
         2c:2d:45:f8:d4:35:77:36:5f:7a:1b:fa:27:d8:04:fe:0f:d6:
         e8:e1:fb:d6:4d:80:fd:d1:5c:23:69:e1:ee:11:e1:5e:15:a3:
         08:e1:e3:b1:73:a3:0d:3d:03:16:b6:c5:ac:7b:b4:00:77:78:
         9d:3a:2e:1e:c9:a1:9a:a4:05:29:ce:26:d3:9a:ca:ce:d7:ef:
         27:38:5d:5c:c3:29:bd:1c:85:61:f1:db:c6:83:7f:5d:d6:d1:
         67:fc:38:62:d0:b4:bd:98:02:a1:aa:ad:e7:87:f1:6c:fb:71:
         95:b2:17:0c:bc:9b:f6:70:fe:c7:10:26:5b:3e:d6:fc:ed:c8:
         b9:67:73:0c:9d:6e:3d:68:86:9b:90:9b:ab:4e:10:6b:ff:a7:
         67:5d:96:14:aa:1f:ec:82:78:04:51:43:63:ef:9e:a9:f3:98:
         1c:3e:40:c3:e2:b9:bc:29:6b:41:26:f1:5b:6b:e0:85:8a:51:
         c7:a3:70:30:1b:06:2c:a9:cd:d9:6d:4e:78:2d:7d:5e:96:5f:
         7d:f5:4b:af:41:0c:68:88:fb:a4:cb:9f:c2:72:71:d3:3b:bd:
         ef:fb:8c:d1:3a:00:fa:4c:48:2c:d6:47:02:86:b8:d5:0d:38:
         1a:8b:42:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----