Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3438203d3e203236363139.roa
File:                     323830333a636230303a3a2f33322d3438203d3e203236363139.roa (raw, json)
Hash identifier:          +Im1qsgMYCxJnprI4/JYiAonKMYh3lkbOl22tRMNESs=
Subject key identifier:   EE:3B:77:7A:06:44:2A:BC:59:27:37:9E:6B:B4:31:AC:DC:60:0B:DA
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       7CA215B56C237367A7D0975384691BC9D34D7120
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3438203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:43 +0000
ROA not before:           Tue 05 Mar 2024 17:51:43 +0000
ROA not after:            Tue 04 Mar 2025 17:56:43 +0000
asID:                     26619
IP address blocks:        2803:cb00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a2:15:b5:6c:23:73:67:a7:d0:97:53:84:69:1b:c9:d3:4d:71:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:43 2024 GMT
            Not After : Mar  4 17:56:43 2025 GMT
        Subject: CN=EE3B777A06442ABC5927379E6BB431ACDC600BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ef:b3:89:62:1e:4c:9c:d2:e9:d6:f1:4a:49:
                    20:51:8c:af:5a:f7:f5:4b:5c:63:85:30:5f:56:01:
                    f3:ff:5b:c8:2a:fe:3c:73:46:2c:b8:92:95:4f:ff:
                    89:45:0f:73:2b:57:39:d8:51:f9:c0:5d:5a:ee:d2:
                    2f:21:b7:e4:b5:e1:af:bb:8c:a7:78:83:69:d4:6d:
                    c7:55:6b:e4:ce:5e:0e:b6:db:a1:c5:db:44:07:ae:
                    1b:57:ba:d8:78:ba:cf:ba:84:43:d2:68:3e:b8:5b:
                    e7:f6:82:d0:0e:1a:f0:f8:b8:e1:95:03:aa:9a:86:
                    dd:90:5b:ea:55:29:9a:6a:90:4b:04:63:ff:64:7b:
                    ed:d0:37:bb:23:75:f4:1e:5d:0f:10:ef:8c:60:4c:
                    86:87:2e:e7:f7:6b:95:1d:58:d1:8d:69:8f:00:81:
                    f4:3d:c0:24:6d:4c:12:76:11:38:38:64:21:80:15:
                    2d:6b:2c:67:1b:a6:c8:d5:21:38:b6:dd:14:6b:40:
                    f0:9b:c2:dc:1a:42:df:3b:0c:94:32:7e:cb:bb:63:
                    ce:ac:90:5f:19:c0:98:c9:1b:3e:55:30:ea:54:f2:
                    e9:4d:fb:6c:c3:77:c1:fe:ef:f2:de:29:59:b9:b4:
                    53:43:57:ca:bd:e8:5b:6d:30:1c:f9:4e:69:d9:8f:
                    f8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3B:77:7A:06:44:2A:BC:59:27:37:9E:6B:B4:31:AC:DC:60:0B:DA
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/323830333a636230303a3a2f33322d3438203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb00::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:18:5e:cb:c9:2f:4d:37:ac:c9:4c:1c:0b:5c:eb:43:ec:
         95:86:30:a0:c6:dd:8d:da:31:5a:a0:69:87:e0:e9:38:0f:55:
         8b:71:0a:1f:c1:fa:58:8e:da:09:57:e6:71:8c:fa:15:9a:79:
         00:37:46:74:01:dc:4f:8e:f6:c9:7b:40:66:d9:58:3a:ff:69:
         f0:11:d5:ac:2f:0f:8a:65:46:84:59:eb:56:65:f6:4a:ac:3c:
         94:a5:6b:62:67:2c:c6:97:e8:c0:50:0e:bc:23:82:01:ed:0e:
         e9:30:f1:d6:95:ca:0f:88:d5:d9:1e:f9:79:f7:15:59:0c:40:
         d9:61:f9:71:d9:6c:eb:38:8b:a7:a7:a5:8c:f6:15:1a:6c:8f:
         5d:90:9c:4a:22:2c:0b:2c:ce:6b:3b:df:f2:f4:54:d2:0a:1e:
         1b:f7:29:b8:fe:d0:fd:22:1e:51:75:66:ba:d4:ef:f0:f2:64:
         c7:36:ce:5e:9f:cc:96:6d:ff:1e:1b:3e:a2:94:e9:1a:8b:2b:
         cc:5f:14:1d:96:12:e4:73:c5:99:e9:07:58:1c:ce:88:0a:93:
         aa:88:a7:ea:1e:48:9b:25:37:1e:13:8a:a2:e4:ba:b2:66:a3:
         1a:1c:3a:93:34:7f:3d:f9:a2:ed:22:51:77:ba:2b:05:cb:3a:
         1d:10:0e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----