Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3930303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3930303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          Te7FOvmCwpGR1rrMd4r2oqd8QctygrkK01j6OIyOAH8=
Subject key identifier:   1E:73:E6:F0:21:59:1E:54:4D:38:74:84:AC:40:0F:EE:CE:EF:3D:B4
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       0A0BBF448A0FA747F2803FB1B7CACBDF011CC01D
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3930303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 05 Mar 2024 17:53:24 +0000
ROA not before:           Tue 05 Mar 2024 17:48:24 +0000
ROA not after:            Tue 04 Mar 2025 17:53:24 +0000
asID:                     272939
IP address blocks:        2803:b190:900::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0b:bf:44:8a:0f:a7:47:f2:80:3f:b1:b7:ca:cb:df:01:1c:c0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Mar  5 17:48:24 2024 GMT
            Not After : Mar  4 17:53:24 2025 GMT
        Subject: CN=1E73E6F021591E544D387484AC400FEECEEF3DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1a:f3:70:92:33:7c:5b:3d:6f:f5:2e:79:45:
                    9c:ef:45:c6:43:7c:6c:9e:ce:b8:c1:fc:f4:02:ad:
                    af:46:c6:d6:78:1a:22:2f:5f:d0:21:6c:83:58:de:
                    4d:66:ec:cf:81:2d:7b:c3:56:29:22:25:d3:37:47:
                    02:f7:24:e7:a5:79:6d:e7:0b:ed:95:cd:ed:3e:62:
                    1d:5c:65:4c:86:a8:3f:30:9e:70:2f:8e:5d:98:23:
                    b7:b4:85:f6:f2:2b:ef:8c:fe:6d:41:3e:b4:d1:4f:
                    6b:cb:01:7a:1f:9f:cd:90:c7:99:26:63:ef:01:85:
                    30:53:13:ce:d7:d2:6b:b0:4b:db:08:4c:07:fe:74:
                    44:f8:89:8e:ba:a1:53:f4:e7:3b:ce:60:0c:e5:cb:
                    22:b8:d1:c6:74:cc:a2:fa:b2:0c:37:4a:ab:d6:d0:
                    38:7e:0b:e1:3d:e9:e8:15:7a:82:64:13:13:30:5c:
                    84:f7:96:29:48:0a:11:86:f4:b7:28:fc:0c:0d:19:
                    26:6f:09:9a:28:cf:c5:57:86:04:79:1b:36:81:ae:
                    e7:ae:4e:14:69:4e:48:67:d7:d2:d9:4c:b3:3f:b6:
                    02:35:2c:13:e3:9c:0b:39:1f:2d:e6:35:a2:42:f3:
                    1f:06:87:5c:5a:5d:c1:b4:5f:f4:a0:71:b8:66:f9:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:E6:F0:21:59:1E:54:4D:38:74:84:AC:40:0F:EE:CE:EF:3D:B4
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3930303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:3b:23:b5:d2:33:ee:b2:b3:8e:68:61:92:c7:8c:75:95:56:
         eb:74:17:29:1c:6a:94:be:48:f8:b1:2e:08:19:31:28:94:ae:
         77:b3:30:24:43:62:04:c8:57:90:1d:ac:78:55:e3:5f:23:70:
         b8:57:3d:fa:0c:01:d0:3d:dc:eb:9a:39:fc:e3:dd:97:00:6c:
         4c:01:15:9a:b8:2f:56:e3:fc:8b:26:60:1b:fe:14:4d:6c:5c:
         7d:e5:b2:4a:d3:c8:db:ed:c3:f0:89:b0:84:ec:1b:b6:ed:27:
         64:af:ff:ae:56:f4:ae:15:37:84:08:a1:28:62:eb:01:70:bc:
         a2:0f:f9:fc:f6:33:ba:af:7c:50:2d:9b:3b:46:de:8a:64:fc:
         b8:e5:42:ef:f2:ee:ea:d1:1f:a0:bf:d9:31:a7:76:e4:d9:a0:
         17:36:fd:25:e6:c5:a0:9f:7d:e9:49:89:4e:1b:04:e9:19:84:
         a6:dd:77:25:4b:5e:87:f8:59:0f:7e:cb:ec:15:3b:82:84:0d:
         a0:69:05:8b:4f:64:1a:42:e4:ee:a6:f2:3c:52:96:42:6c:f1:
         d9:08:28:de:5f:03:6c:00:81:7b:21:18:dd:5c:a9:16:ec:1d:
         69:62:26:87:ca:21:cd:1a:95:c7:0a:82:c2:3b:3d:d9:72:b5:
         11:5f:a7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----