Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/323830333a346565303a3a2f33322d3438203d3e20323639393831.roa
File:                     323830333a346565303a3a2f33322d3438203d3e20323639393831.roa (raw, json)
Hash identifier:          ewnlzCZE4FHI3dRs3PZVzNOv2ZhkmHc6bTdnSL6xJZU=
Subject key identifier:   47:5F:66:E3:4C:EE:55:12:1F:6D:95:1F:6C:5A:7E:FD:0D:13:F6:24
Certificate issuer:       /CN=9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487
Certificate serial:       44D1D6C9118EAA68AED89128035A59843CC523E9
Authority key identifier: 9C:1B:E4:94:43:F8:D1:EC:B7:AC:8A:8E:6C:57:9C:54:80:C1:74:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/323830333a346565303a3a2f33322d3438203d3e20323639393831.roa
Signing time:             Fri 05 Jul 2024 20:10:00 +0000
ROA not before:           Fri 05 Jul 2024 20:05:00 +0000
ROA not after:            Fri 04 Jul 2025 20:10:00 +0000
asID:                     269981
IP address blocks:        2803:4ee0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d1:d6:c9:11:8e:aa:68:ae:d8:91:28:03:5a:59:84:3c:c5:23:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487
        Validity
            Not Before: Jul  5 20:05:00 2024 GMT
            Not After : Jul  4 20:10:00 2025 GMT
        Subject: CN=475F66E34CEE55121F6D951F6C5A7EFD0D13F624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:fa:88:ce:1c:b9:76:84:76:6a:b9:a9:21:
                    84:c4:e4:ec:ee:8a:76:ed:c8:9e:f8:ee:d9:38:02:
                    3f:20:b1:6b:0e:f8:3d:af:1b:4d:68:fc:d6:38:b9:
                    fe:fd:0c:d2:41:b8:85:5f:29:ee:99:d7:1b:d5:ba:
                    b2:68:6c:bb:71:2e:37:1f:5b:1b:f7:e0:a1:fd:73:
                    20:d3:e8:7f:d6:08:6d:61:85:b7:61:a8:ce:32:8f:
                    66:9d:08:7c:34:ba:96:2c:9b:f2:e2:e1:e3:ca:a7:
                    c7:cc:de:d3:36:77:a5:3b:3e:99:59:57:dc:49:b8:
                    c7:d1:93:cd:35:3b:e7:74:5d:b3:2c:11:45:c8:60:
                    ad:e0:5c:f7:36:05:f7:4e:b3:da:4e:4a:36:34:a2:
                    98:dc:85:ea:af:15:4c:f9:fb:bf:a0:35:d8:fe:34:
                    a8:23:b3:0c:1a:39:8a:74:0a:40:e3:f4:0d:c1:2a:
                    a5:5e:ee:3e:31:8f:31:01:0d:dd:7a:ea:76:66:2b:
                    68:c7:f1:cc:87:b7:96:8c:bb:c7:c8:76:4a:73:d0:
                    8e:9f:ad:51:64:ca:78:f9:23:44:35:4a:ee:75:d3:
                    65:2f:7b:d6:1e:fe:ef:32:21:cb:de:0c:91:21:ec:
                    93:f5:02:93:c5:59:1f:8b:15:33:e6:c7:32:d4:e3:
                    d7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5F:66:E3:4C:EE:55:12:1F:6D:95:1F:6C:5A:7E:FD:0D:13:F6:24
            X509v3 Authority Key Identifier:
                keyid:9C:1B:E4:94:43:F8:D1:EC:B7:AC:8A:8E:6C:57:9C:54:80:C1:74:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/323830333a346565303a3a2f33322d3438203d3e20323639393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:40:39:85:a1:93:65:4c:d7:06:d2:75:45:41:12:2b:68:a6:
         4d:41:30:10:8b:89:8d:8b:cd:a4:4d:da:5a:b6:b6:97:db:29:
         e6:01:c0:0e:11:8d:ea:52:17:2a:22:05:30:0c:af:17:a3:83:
         9e:d1:2b:37:a1:6d:89:e8:49:64:aa:97:3f:83:44:66:ea:19:
         ce:1b:4c:17:ff:79:d7:46:7b:78:3f:e3:86:2e:a6:04:95:20:
         e2:c2:e3:d9:24:d2:fa:3b:61:3a:72:99:b5:8a:db:d9:44:fe:
         6d:bb:63:53:2e:6c:e1:01:51:75:6d:aa:6a:ec:b0:84:88:cf:
         5d:99:0b:72:f6:af:c3:04:31:46:97:1c:2b:81:1b:01:39:84:
         1e:b3:33:b8:42:71:00:bf:51:d4:ca:0f:cf:2f:29:23:f7:ca:
         04:46:94:6e:5a:75:c1:89:62:4e:f3:31:09:ce:64:45:69:2e:
         1a:58:7c:85:c6:bb:62:b3:86:8e:5c:73:3b:47:40:15:a0:c9:
         11:b2:52:a1:c6:76:e5:d2:5c:2f:2b:18:01:ba:aa:0b:b1:24:
         3a:e4:5a:d3:f3:94:15:e7:5d:dd:0b:11:5f:30:37:12:bd:d1:
         e0:03:65:21:71:b9:6d:67:ff:90:53:15:d9:b7:b2:87:52:2a:
         36:28:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----