Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3332203d3e203236363139.roa
File:                     323830333a636230303a3a2f33322d3332203d3e203236363139.roa (raw, json)
Hash identifier:          NUMMzrFDekH9s00+xEfnlqataoCqjFLtWwOK4MB5TOc=
Subject key identifier:   13:1A:EB:2B:55:DE:F1:0D:A6:4D:41:00:F4:C1:7A:89:30:1A:C3:03
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       6315F919AB549998D934B0CAFF115F540BB38A2D
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3332203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:40 +0000
ROA not before:           Tue 05 Mar 2024 17:51:40 +0000
ROA not after:            Tue 04 Mar 2025 17:56:40 +0000
asID:                     26619
IP address blocks:        2803:cb00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:15:f9:19:ab:54:99:98:d9:34:b0:ca:ff:11:5f:54:0b:b3:8a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:40 2024 GMT
            Not After : Mar  4 17:56:40 2025 GMT
        Subject: CN=131AEB2B55DEF10DA64D4100F4C17A89301AC303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:f5:fd:63:07:01:b9:f3:86:5d:1a:2a:93:
                    b5:14:44:cb:9b:fb:43:42:e0:67:05:11:e4:0f:41:
                    0a:5c:eb:5d:ae:dc:f6:07:4c:9e:56:c5:8b:89:b9:
                    43:72:80:11:f9:4a:92:f5:29:01:64:67:01:10:85:
                    d2:67:6c:29:9e:72:57:0a:fb:c1:60:36:d4:fd:6a:
                    ba:ce:f5:ce:b9:fb:3c:52:0c:e2:78:86:56:7e:63:
                    34:8f:a0:95:a9:60:7d:be:72:44:70:39:c0:5b:76:
                    b8:52:91:d6:23:8e:e0:f2:13:83:90:46:cb:18:a9:
                    17:ba:af:05:07:7b:7e:0a:8b:08:eb:6b:17:0c:86:
                    05:63:b2:6a:f7:18:74:68:e0:22:54:94:1e:ac:17:
                    da:92:f4:c2:1f:21:d7:2a:50:2f:bd:9f:7f:64:ca:
                    6f:23:ca:9c:8f:15:6e:92:32:6c:59:1b:bc:fc:e5:
                    da:65:63:85:ba:85:5d:fe:82:cc:e6:32:78:70:2a:
                    ef:9c:73:51:63:96:2c:75:01:f1:45:27:6c:f8:1c:
                    40:34:d9:ff:44:60:ae:0d:21:a6:a9:92:b2:e2:4f:
                    9b:7f:d1:f5:e8:7f:c5:8a:88:6b:6d:56:b7:7b:89:
                    51:12:c4:09:7e:fa:23:a0:a2:bd:5f:94:2b:90:f2:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1A:EB:2B:55:DE:F1:0D:A6:4D:41:00:F4:C1:7A:89:30:1A:C3:03
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3332203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb00::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:28:78:7d:1b:af:7d:a5:91:d7:80:4c:0e:1b:7f:0d:cf:3e:
         f5:66:77:86:00:e1:70:16:f3:4d:a1:2b:5b:f1:3b:dc:99:75:
         78:ea:ae:98:ed:17:32:dd:a8:54:46:f6:af:c1:97:e2:2b:eb:
         c9:02:a5:54:10:fa:aa:61:d5:4f:bc:39:6c:19:b4:21:a6:98:
         08:89:ff:48:03:a2:95:ca:21:ac:41:bc:44:2f:e4:2e:29:09:
         d9:87:18:a2:6d:e0:b6:cc:49:15:80:5d:72:ef:97:c0:55:d4:
         7e:8d:f3:38:7f:ae:30:8a:22:52:bd:7d:47:f0:26:91:e3:0e:
         17:d4:0a:82:52:49:6f:ce:99:74:d0:92:c9:9c:99:38:4d:05:
         e6:0a:eb:be:c8:ab:dd:9b:06:05:56:e0:26:97:5a:72:3d:22:
         00:4f:39:a1:63:b4:c4:a7:c7:58:d3:13:56:70:a0:2d:3f:c0:
         7a:58:b9:46:7c:52:5f:06:c7:30:4c:57:91:ae:60:4c:59:3e:
         a1:d9:74:84:63:58:74:19:50:50:ba:bb:a5:ed:2a:c8:a7:06:
         ad:9c:cb:27:ce:8a:ba:0a:5e:ae:36:b2:65:68:2d:11:21:03:
         b1:ea:4b:8f:d1:e2:95:13:12:3c:c3:d4:19:00:c9:da:c2:33:
         0c:0b:16:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----