Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a363030303a3a2f33352d3335203d3e20323639383332.roa
File:                     323830333a6636303a363030303a3a2f33352d3335203d3e20323639383332.roa (raw, json)
Hash identifier:          bGeJCRVX5/uv/aBkTmjbW1Biyc+d48QNztuihPxZ+js=
Subject key identifier:   35:FC:05:C1:3B:20:09:76:09:73:4C:7C:C4:8A:00:0E:4F:D6:CF:1B
Certificate issuer:       /CN=AF7A463B07CEB857877708A3350E33F01C46B579
Certificate serial:       0341112A5373D17CDD226AA4D13CE82CCB107676
Authority key identifier: AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a363030303a3a2f33352d3335203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:57:32 +0000
ROA not before:           Tue 05 Mar 2024 17:52:32 +0000
ROA not after:            Tue 04 Mar 2025 17:57:32 +0000
asID:                     269832
IP address blocks:        2803:f60:6000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:41:11:2a:53:73:d1:7c:dd:22:6a:a4:d1:3c:e8:2c:cb:10:76:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7A463B07CEB857877708A3350E33F01C46B579
        Validity
            Not Before: Mar  5 17:52:32 2024 GMT
            Not After : Mar  4 17:57:32 2025 GMT
        Subject: CN=35FC05C13B20097609734C7CC48A000E4FD6CF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:64:4f:fa:42:34:5a:c4:89:ae:69:87:b8:
                    69:68:2c:4d:bc:62:86:87:e4:bd:b1:df:ea:be:a2:
                    ad:e0:84:bb:0c:92:44:50:e5:9d:ca:60:ec:34:f4:
                    aa:11:bc:e8:95:c6:7c:f5:b7:c2:c4:08:b9:0b:c0:
                    be:bf:c9:e4:e2:e5:ff:c3:20:bb:95:74:84:e9:09:
                    8d:ba:72:47:ad:0c:85:51:2b:f5:f6:8d:1c:5e:ed:
                    15:c5:47:94:6f:d6:5a:88:e6:90:f1:f2:a1:a1:d2:
                    2d:b8:ca:b7:94:49:63:24:6c:30:12:ff:e3:20:1c:
                    5d:77:69:34:93:90:76:c8:8b:69:e4:62:e4:79:b3:
                    59:76:9b:ed:52:65:93:f5:2b:1c:a0:58:14:61:1e:
                    1d:b4:5c:ee:33:0f:25:c0:82:7a:77:88:16:60:e4:
                    45:4a:47:be:14:d6:1e:16:c0:5f:17:8a:52:53:4f:
                    f1:fe:e8:58:35:c8:93:cc:38:a0:eb:b7:09:89:a9:
                    53:be:08:c5:10:fc:aa:3f:8b:18:7e:87:2e:c2:85:
                    33:9a:14:17:ed:f5:2e:17:68:cc:12:33:c0:f5:b6:
                    ed:2a:41:01:99:52:fd:00:d5:d9:00:ad:c0:6f:64:
                    08:f0:5c:11:74:e5:00:f2:3f:cf:b0:55:c2:43:2a:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FC:05:C1:3B:20:09:76:09:73:4C:7C:C4:8A:00:0E:4F:D6:CF:1B
            X509v3 Authority Key Identifier:
                keyid:AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a363030303a3a2f33352d3335203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f60:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         5d:df:f2:7c:37:c9:00:c2:15:47:b7:de:6c:f3:a4:60:cc:44:
         35:ff:ff:b9:7e:8a:9c:6d:91:b9:61:71:10:8e:33:1b:78:93:
         89:13:85:73:26:40:65:36:b5:8c:0b:5f:7a:c9:3d:c0:e5:4d:
         59:22:d3:4f:37:bc:2c:d8:88:a9:2c:54:74:2a:24:57:f4:f6:
         70:45:67:6f:ae:b3:df:26:06:ec:9a:7a:e4:d0:b6:f5:dd:f5:
         d4:52:b2:ef:09:00:52:77:f0:ea:bb:37:b9:aa:d7:8c:ff:8a:
         fd:84:e6:1b:07:41:bb:db:9a:5e:63:83:19:d2:dd:b8:fe:51:
         be:11:6b:61:e4:11:13:5d:d0:90:6b:5f:28:de:7b:f1:25:a4:
         b6:32:d0:26:f4:83:00:1c:43:36:3c:40:2e:b5:5d:42:c2:85:
         cd:de:ec:1c:73:3b:f8:91:78:b8:4a:20:75:b6:16:8a:05:e3:
         ec:fe:39:a9:3f:86:56:00:a1:17:e3:c0:d7:b8:f9:ea:14:26:
         8f:9f:cf:a1:81:5a:1f:77:8e:c3:aa:1f:6b:74:97:88:c5:d9:
         5c:17:4f:d7:d9:9c:d9:be:50:a4:07:0c:58:f7:42:75:6f:41:
         b3:a8:c1:1a:17:9f:0c:cf:84:db:89:d5:32:75:d8:77:1f:fa:
         bd:93:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----