Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a643030323a3a2f34382d3634203d3e203233303331.roa
File:                     323030313a313362303a643030323a3a2f34382d3634203d3e203233303331.roa (raw, json)
Hash identifier:          sUCRlJKCNbWkzdRgDhxNAufC4e5k1eV7/LqXuooAc8c=
Subject key identifier:   94:2E:A5:94:18:B0:25:3C:BB:25:3C:1F:04:E1:86:94:BC:C4:C5:A2
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       5093482A963D14BA500061DA0224C4D7A1AE4538
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a643030323a3a2f34382d3634203d3e203233303331.roa
Signing time:             Tue 05 Mar 2024 18:00:37 +0000
ROA not before:           Tue 05 Mar 2024 17:55:37 +0000
ROA not after:            Tue 04 Mar 2025 18:00:37 +0000
asID:                     23031
IP address blocks:        2001:13b0:d002::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:93:48:2a:96:3d:14:ba:50:00:61:da:02:24:c4:d7:a1:ae:45:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Mar  5 17:55:37 2024 GMT
            Not After : Mar  4 18:00:37 2025 GMT
        Subject: CN=942EA59418B0253CBB253C1F04E18694BCC4C5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:20:50:7e:99:22:56:63:8d:5c:7b:28:d2:
                    e5:9d:9e:c9:af:09:5f:ea:c3:66:8d:0d:d0:1d:d5:
                    67:91:8a:08:a1:73:fb:6f:3e:12:da:66:e4:c1:9a:
                    4c:cc:ff:c5:89:de:2c:50:bd:86:3b:32:c8:c3:3f:
                    59:74:1e:1e:3b:e8:bd:d8:0a:a9:8a:a9:a4:e5:f8:
                    f9:79:5c:f6:16:46:ff:34:db:a2:c1:6d:09:9f:af:
                    c5:4e:f6:ae:a0:75:fc:54:7a:c4:50:bf:06:ab:bd:
                    14:c1:33:16:c2:bb:31:54:d1:58:77:a2:64:04:13:
                    e2:5b:87:6d:10:76:59:81:c1:ee:3b:56:e7:fb:77:
                    8f:4b:dd:17:a9:39:e9:40:9a:e5:35:97:2f:81:c0:
                    a8:4b:55:73:84:1d:4b:f4:de:d5:9d:14:14:72:a3:
                    64:aa:b1:05:c6:ab:c3:50:51:33:4b:d3:ee:b4:f6:
                    b4:40:f2:33:d0:9f:28:08:15:84:21:a3:3f:da:a6:
                    ae:33:98:ef:94:2f:1a:e0:95:df:3c:00:88:2a:a2:
                    01:0a:47:95:86:3b:b7:8e:d9:21:cd:01:6c:74:47:
                    59:b0:2e:dd:8f:f0:07:3f:b4:23:5d:8e:0f:7a:ef:
                    49:f5:52:99:04:24:c3:29:57:2c:5d:90:b5:b6:eb:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2E:A5:94:18:B0:25:3C:BB:25:3C:1F:04:E1:86:94:BC:C4:C5:A2
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/323030313a313362303a643030323a3a2f34382d3634203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:d002::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:5c:dd:e7:1f:1a:67:5b:72:72:ce:2f:88:11:eb:3a:d4:f7:
         1b:77:7a:e6:e1:99:26:b3:4e:6b:ef:9c:fe:90:dc:5f:42:ae:
         d0:80:f9:72:1b:f2:89:a7:9f:d8:36:73:9a:f9:d0:9e:1c:5c:
         1b:3d:c5:55:10:24:16:ef:2b:fb:41:50:2d:df:a4:4b:4f:8a:
         eb:1b:a8:78:ee:ec:ab:88:19:8c:71:88:13:03:cb:68:2c:96:
         77:70:f0:67:30:d8:1f:c6:84:5a:6c:89:ce:31:15:12:db:d6:
         a4:73:5f:48:f3:62:56:ec:ad:65:21:51:d6:83:07:07:73:dd:
         83:b2:95:85:b4:7b:99:5a:de:28:90:1d:5b:a2:ba:d2:d5:d8:
         1b:48:71:10:7d:b4:25:c9:24:e9:1b:7f:7f:1b:d2:ed:87:30:
         48:31:f5:cc:bd:58:1b:3d:d7:b3:ce:c3:20:df:fa:b9:6d:60:
         47:82:75:f2:af:16:7e:fe:59:34:4f:72:6f:8c:22:73:8b:40:
         51:46:bf:03:c8:36:88:5d:19:9f:a9:40:0f:f0:58:ff:1b:1d:
         3f:e4:16:a5:9d:9b:22:ba:30:02:4a:fc:31:6b:a4:c1:93:2c:
         5d:7f:76:73:37:91:45:49:ed:a4:e1:29:5c:a9:3a:24:a1:c1:
         f3:85:cf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----