Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3a2f33352d3335203d3e20323639383332.roa
File:                     323830333a6636303a3a2f33352d3335203d3e20323639383332.roa (raw, json)
Hash identifier:          m7F44VXLHokfvS772gDYFu8ZQJKyJ5OOkQ97IaH6jqw=
Subject key identifier:   9C:B6:9E:CB:BB:7F:54:2F:B7:39:94:60:40:CD:2C:82:8B:64:78:DC
Certificate issuer:       /CN=AF7A463B07CEB857877708A3350E33F01C46B579
Certificate serial:       5932FB14D04132E848F09D53948A6718EB5E02F6
Authority key identifier: AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3a2f33352d3335203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:57:30 +0000
ROA not before:           Tue 05 Mar 2024 17:52:30 +0000
ROA not after:            Tue 04 Mar 2025 17:57:30 +0000
asID:                     269832
IP address blocks:        2803:f60::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:32:fb:14:d0:41:32:e8:48:f0:9d:53:94:8a:67:18:eb:5e:02:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7A463B07CEB857877708A3350E33F01C46B579
        Validity
            Not Before: Mar  5 17:52:30 2024 GMT
            Not After : Mar  4 17:57:30 2025 GMT
        Subject: CN=9CB69ECBBB7F542FB739946040CD2C828B6478DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:2c:95:ff:ba:fb:f3:ca:17:14:fb:07:0d:
                    24:4d:25:3a:54:a8:74:fa:d0:ef:ec:30:67:e5:12:
                    81:df:fa:70:d7:84:63:be:ec:68:4e:58:67:35:ea:
                    8f:8f:ba:27:c4:e9:85:aa:1a:58:71:ad:50:35:55:
                    06:83:c5:75:8f:e4:19:f7:8c:c1:04:6b:62:06:5d:
                    e6:f2:db:82:a5:9a:8f:0b:61:e4:c8:90:f9:f9:81:
                    84:b9:c1:ad:55:0e:03:55:89:f2:26:23:02:3c:3f:
                    ee:cc:5e:c1:e6:6e:cf:f5:97:43:59:04:cd:ab:a6:
                    2e:f1:40:77:46:e1:a4:d4:df:11:b3:46:c6:17:c5:
                    71:18:5c:4e:62:0e:79:99:d8:92:88:f9:2a:8f:06:
                    a4:8a:f3:c5:c4:b3:4a:2b:c6:74:40:f7:b2:3d:02:
                    00:46:e1:49:91:64:56:6a:6c:8b:7e:62:d5:21:2e:
                    9c:1e:16:53:9d:52:f9:5a:d8:9d:f0:5f:3a:90:95:
                    fc:2b:92:99:3b:a1:e1:db:43:b5:e0:c6:56:23:21:
                    49:42:b7:2d:84:ba:bc:55:33:34:63:2c:e4:86:a0:
                    74:c0:37:9b:d7:e5:17:71:2e:9c:bd:ca:b4:6b:e6:
                    62:40:3c:fc:3d:34:1b:19:50:49:22:44:27:e7:e8:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B6:9E:CB:BB:7F:54:2F:B7:39:94:60:40:CD:2C:82:8B:64:78:DC
            X509v3 Authority Key Identifier:
                keyid:AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/323830333a6636303a3a2f33352d3335203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f60::/35

    Signature Algorithm: sha256WithRSAEncryption
         3e:cb:c7:b3:82:d5:e5:cd:95:08:46:59:35:ee:8d:25:33:b8:
         b2:77:0b:ec:b0:fd:41:b6:82:a7:2a:e4:0d:ec:f8:90:36:ae:
         e1:26:c4:df:1c:4e:16:17:e1:92:e1:72:9f:65:37:02:af:43:
         00:51:0f:6a:86:a6:1b:d8:23:2e:df:a5:ab:78:a4:4f:1a:ed:
         af:bd:cd:25:fd:d4:ad:ab:9a:e8:d2:39:3c:9a:0a:a4:c2:3b:
         d7:df:f4:c6:bb:3d:a3:b6:b3:95:44:83:a9:d9:d9:55:93:dd:
         30:8b:c7:2f:66:07:07:6a:78:b2:00:a0:68:9f:d6:a4:c1:a1:
         6a:0a:a7:b9:74:9e:fa:cb:f2:c5:ce:c4:53:1d:5b:30:06:15:
         94:3b:e0:94:3c:34:94:a5:f5:9f:40:e0:4f:90:a3:d1:e9:6d:
         4a:e7:3d:d2:b5:b1:09:6f:d6:3b:4e:d5:c3:e1:41:a7:b0:ac:
         94:79:e4:7b:41:48:dd:9e:40:1d:34:c5:64:5b:a2:cb:0f:af:
         08:3a:5c:d9:c2:de:5d:0b:37:99:c3:8a:41:2b:0d:f9:48:35:
         72:6b:a5:94:09:c9:f0:6c:9f:b6:ce:44:e1:50:e0:13:71:14:
         36:b3:8d:8c:d1:2e:fe:a8:fd:46:f1:46:49:6a:6b:70:27:9f:
         ec:aa:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----