Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/323830303a3236303a3a2f32382d3332203d3e203139343239.roa
File:                     323830303a3236303a3a2f32382d3332203d3e203139343239.roa (raw, json)
Hash identifier:          CxyKZAFN9/fYGfDPaCA5UpWlSIc6oa3HZKOmM6CwJoQ=
Subject key identifier:   AA:8D:AA:7A:CE:AC:9E:F6:0F:C6:BA:BE:A8:FA:8D:90:E6:46:A5:C3
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       1D4DE5E86192BFD6EEC679880311151AED8812BA
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/323830303a3236303a3a2f32382d3332203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:15:11 +0000
ROA not before:           Tue 05 Mar 2024 18:10:11 +0000
ROA not after:            Tue 04 Mar 2025 18:15:11 +0000
asID:                     19429
IP address blocks:        2800:260::/28 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4d:e5:e8:61:92:bf:d6:ee:c6:79:88:03:11:15:1a:ed:88:12:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Mar  5 18:10:11 2024 GMT
            Not After : Mar  4 18:15:11 2025 GMT
        Subject: CN=AA8DAA7ACEAC9EF60FC6BABEA8FA8D90E646A5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:f4:62:bb:2b:5c:40:cf:c5:16:01:99:16:
                    17:fe:3d:80:69:f6:04:a2:24:be:ae:2c:fd:51:91:
                    64:1e:ca:ff:0b:cf:8a:5c:63:10:8c:45:07:a6:d4:
                    df:52:a5:16:e4:5e:54:21:35:cc:03:8e:37:45:f8:
                    62:31:84:f0:33:2e:c5:d2:60:b4:d5:3f:e2:26:19:
                    c1:a7:58:4e:4b:09:d1:77:88:db:a2:a9:a2:dc:30:
                    a2:91:ab:f1:15:ca:6a:99:19:a9:db:41:0c:b1:db:
                    c7:4a:07:6a:6a:f4:a2:1c:60:43:23:93:27:a2:13:
                    b1:c9:f2:80:09:d7:2d:bf:31:5c:94:3a:70:ca:b4:
                    13:c5:a8:88:b1:4e:7e:7b:8c:96:82:1f:8d:e4:da:
                    63:e3:78:ec:5d:2c:e3:6d:22:03:34:e0:ad:da:e8:
                    bf:bd:1b:ec:62:e5:b6:26:99:4d:df:98:82:f1:71:
                    ec:96:35:5c:ac:d8:f0:c2:e5:5c:e8:47:ed:a7:da:
                    21:a4:21:7c:0e:8c:68:1b:a7:2d:15:03:2c:b0:92:
                    b6:6a:ed:28:f6:1b:53:2e:88:2b:26:7a:98:8f:05:
                    30:7a:85:86:7a:76:28:9c:be:ba:64:ae:79:9b:ea:
                    f3:ef:41:71:38:c4:b2:f6:86:a5:bb:98:93:95:5a:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8D:AA:7A:CE:AC:9E:F6:0F:C6:BA:BE:A8:FA:8D:90:E6:46:A5:C3
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/323830303a3236303a3a2f32382d3332203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:260::/28

    Signature Algorithm: sha256WithRSAEncryption
         3a:72:8e:9d:31:21:0b:bc:81:77:dc:48:eb:52:23:84:cc:12:
         cb:d9:0b:51:2a:56:96:ec:24:60:a1:91:aa:71:74:61:b0:e0:
         18:e6:6f:b6:e5:31:cc:a2:aa:fc:ba:38:ca:7f:5a:53:6f:a2:
         a6:9d:dd:56:99:ca:3e:0a:1b:1b:ec:05:e1:a8:17:17:16:76:
         e6:2a:bb:8f:46:65:7e:34:30:53:cb:5c:61:c9:74:71:04:78:
         b1:92:70:46:bc:3b:ba:c8:1e:df:45:eb:67:42:50:3b:57:03:
         da:0e:8c:b7:85:fa:e4:91:ed:71:5c:31:ff:91:4c:bb:23:b6:
         87:27:51:c5:2c:25:10:f3:c5:be:57:0b:74:31:ce:93:97:c4:
         f8:ea:61:fd:41:48:9a:f6:45:54:b0:98:8b:31:7f:6a:8d:9f:
         c1:95:c1:90:e5:d4:8a:6d:2b:83:99:3d:03:e1:b1:cc:e6:c0:
         b6:2a:d7:b9:95:8c:83:e3:04:47:24:46:18:03:1d:62:7e:34:
         13:f5:f5:70:02:9c:b6:0b:1c:78:4d:ec:94:2d:10:d5:44:19:
         0a:e1:03:f9:84:f5:42:81:b2:bf:b5:4d:73:d0:99:16:d7:84:
         92:6a:40:41:6e:e7:36:fc:d6:79:0a:26:8e:8d:0f:2a:6e:af:
         5d:89:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----