Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/323830333a333635303a3a2f33322d3438203d3e20323733323038.roa
File:                     323830333a333635303a3a2f33322d3438203d3e20323733323038.roa (raw, json)
Hash identifier:          FtMIC3Lia5/XV3X0CtWjSgqg7hK0VhnNW533WRZmiHE=
Subject key identifier:   C4:21:F6:1F:A9:BC:F9:E5:BB:E4:FF:6A:C2:FE:03:68:16:4A:29:C1
Certificate issuer:       /CN=E911C03F2429072248609BBEB7F247CFA3D2404A
Certificate serial:       16377F8D373852756E19FD8F9331D82B167D039D
Authority key identifier: E9:11:C0:3F:24:29:07:22:48:60:9B:BE:B7:F2:47:CF:A3:D2:40:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E911C03F2429072248609BBEB7F247CFA3D2404A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/323830333a333635303a3a2f33322d3438203d3e20323733323038.roa
Signing time:             Thu 02 May 2024 18:20:00 +0000
ROA not before:           Thu 02 May 2024 18:15:00 +0000
ROA not after:            Thu 01 May 2025 18:20:00 +0000
asID:                     273208
IP address blocks:        2803:3650::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:37:7f:8d:37:38:52:75:6e:19:fd:8f:93:31:d8:2b:16:7d:03:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E911C03F2429072248609BBEB7F247CFA3D2404A
        Validity
            Not Before: May  2 18:15:00 2024 GMT
            Not After : May  1 18:20:00 2025 GMT
        Subject: CN=C421F61FA9BCF9E5BBE4FF6AC2FE0368164A29C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c1:85:7e:7a:61:c5:31:d6:e1:d4:ba:c8:88:
                    17:30:ce:6f:df:6b:a7:06:8f:fb:29:c6:66:9f:2e:
                    ec:28:ca:64:bc:7b:a0:71:00:be:1a:ce:1e:84:39:
                    ec:e4:07:40:11:04:a5:57:80:0d:28:cd:5c:1e:2b:
                    ad:c2:5a:de:2e:0a:be:3f:41:a2:ed:fa:0a:0c:39:
                    5d:70:8e:6c:78:ef:a9:85:cf:63:6b:d5:cf:a7:54:
                    03:bd:9a:bf:f6:b4:68:f1:3d:86:d8:95:9f:87:e5:
                    4d:68:26:ef:ba:a2:09:24:99:6e:f9:7b:c4:f2:b4:
                    3b:41:c0:3c:12:80:1a:30:aa:d8:2d:14:ce:59:47:
                    46:fb:58:03:89:55:17:1c:31:2c:81:72:f9:1d:af:
                    a9:21:54:7d:2a:e4:ad:69:95:eb:88:1a:df:d6:61:
                    ac:bf:06:f6:7a:02:06:4b:be:15:89:7e:f6:13:f6:
                    93:d4:85:b7:99:94:df:84:e3:7b:11:5a:83:7f:a1:
                    de:82:fb:90:a6:7c:8c:22:d1:8e:68:56:b4:db:91:
                    de:c5:b5:92:63:5c:ca:7d:ba:8c:97:97:8e:81:bb:
                    6e:6f:4b:70:1b:e3:fb:48:7e:26:3c:2a:cc:8c:9e:
                    60:c8:ba:33:46:0e:c8:9e:59:fe:34:76:41:d1:ee:
                    49:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:21:F6:1F:A9:BC:F9:E5:BB:E4:FF:6A:C2:FE:03:68:16:4A:29:C1
            X509v3 Authority Key Identifier:
                keyid:E9:11:C0:3F:24:29:07:22:48:60:9B:BE:B7:F2:47:CF:A3:D2:40:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/E911C03F2429072248609BBEB7F247CFA3D2404A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E911C03F2429072248609BBEB7F247CFA3D2404A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD9B70903CEAC3DC6B7E5F56726C3E4C1F114FC153EE5052D8360BCD1A587B7E/0/323830333a333635303a3a2f33322d3438203d3e20323733323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3650::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:95:d5:f3:50:13:dc:a3:7b:48:a2:1e:15:7b:b1:99:5b:77:
         14:8f:c8:0b:9a:ce:84:45:29:92:67:d4:c8:7a:35:d1:cb:ba:
         c6:d4:16:66:bb:13:53:28:ef:b2:61:ae:c6:92:5f:9c:cb:47:
         ea:f3:36:2d:8c:f5:1c:2b:1f:1c:93:70:55:8b:f9:c9:7c:0b:
         92:6b:78:ee:3e:72:92:af:4d:8e:c2:69:5d:ec:75:dc:24:f2:
         35:ee:3c:aa:cc:2e:2e:c7:52:ca:31:21:5b:b2:e5:9b:a7:70:
         0b:c2:37:59:40:b0:fb:d3:5a:61:be:66:64:7b:e4:d2:84:aa:
         6d:aa:12:d4:20:74:f1:39:cd:d5:39:c7:07:05:95:02:0c:21:
         dc:86:d2:0c:16:46:ac:77:85:cd:66:26:20:72:42:8f:70:b2:
         f9:22:55:99:a8:51:d2:24:8c:e3:0f:9e:ca:2f:5c:67:19:91:
         8a:67:60:7f:a3:72:f6:97:9f:78:11:8f:ae:80:8f:99:26:0e:
         62:ed:fd:a5:f3:65:33:ca:f7:ee:87:49:19:d3:14:e3:bf:ab:
         8c:45:93:a6:6f:22:13:28:09:c2:6c:e4:1d:e5:79:ac:cd:ea:
         33:92:6d:d9:1f:76:d6:c3:01:6a:83:4f:a2:8f:da:48:a8:65:
         23:4a:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----