Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a3a2f33322d3332203d3e2036373632.roa
File:                     323830303a3837303a3a2f33322d3332203d3e2036373632.roa (raw, json)
Hash identifier:          nyMARaUpM7heC0+TP6YACetxH5E3nzOnmX7Ezetfj2I=
Subject key identifier:   10:30:B5:4A:35:02:CC:C8:05:DF:77:91:FC:2B:B3:FF:67:45:85:CF
Certificate issuer:       /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial:       478FA766E59B8919D2A3ED8216F96180ECF3E96F
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a3a2f33322d3332203d3e2036373632.roa
Signing time:             Tue 05 Mar 2024 18:07:42 +0000
ROA not before:           Tue 05 Mar 2024 18:02:42 +0000
ROA not after:            Tue 04 Mar 2025 18:07:42 +0000
asID:                     6762
IP address blocks:        2800:870::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8f:a7:66:e5:9b:89:19:d2:a3:ed:82:16:f9:61:80:ec:f3:e9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
        Validity
            Not Before: Mar  5 18:02:42 2024 GMT
            Not After : Mar  4 18:07:42 2025 GMT
        Subject: CN=1030B54A3502CCC805DF7791FC2BB3FF674585CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:51:4a:eb:68:87:2a:55:d7:63:1a:6a:2b:
                    94:02:7a:db:30:47:c7:5d:b2:4b:f0:18:fc:7f:61:
                    bb:e3:d3:6f:44:fa:ba:4f:2d:6a:12:e9:9c:b8:30:
                    71:db:52:c6:44:5e:1d:ec:80:8f:f5:a5:c4:3a:a8:
                    c6:e4:8c:32:dd:13:1c:5a:08:b0:1e:45:c8:55:1c:
                    dc:cd:04:a2:0a:a1:5d:a3:41:6a:22:50:63:4f:9c:
                    3c:27:80:5f:f9:4b:4d:ad:42:3c:31:45:f8:f3:97:
                    cf:7a:88:15:4f:dd:fb:ae:f9:e3:08:a7:77:af:f6:
                    cb:06:53:9a:a1:cb:b5:07:91:f0:5b:11:99:4d:15:
                    9c:e2:c4:c4:18:da:90:28:c2:14:62:b7:34:af:b9:
                    63:84:ec:97:cc:fc:3c:49:b5:ce:04:77:7b:48:2d:
                    89:fa:af:94:d4:2a:c4:da:fb:20:8e:fc:06:f8:24:
                    33:92:1c:12:11:34:e1:0b:91:e0:57:2b:8a:be:33:
                    57:71:e0:42:7c:65:6d:51:13:e8:45:89:d3:3b:64:
                    c3:41:b9:be:10:37:06:88:c9:81:97:46:b9:e9:86:
                    9f:60:b5:a3:f5:c3:e9:a3:ee:d1:64:7b:2e:7c:49:
                    e8:79:a1:04:ce:5f:17:6b:40:c8:10:89:c7:8d:26:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:30:B5:4A:35:02:CC:C8:05:DF:77:91:FC:2B:B3:FF:67:45:85:CF
            X509v3 Authority Key Identifier:
                keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/323830303a3837303a3a2f33322d3332203d3e2036373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:870::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:f3:4f:0e:72:81:86:67:76:29:45:bc:a2:79:f3:62:85:83:
         a7:e8:05:a2:33:e7:54:aa:81:8a:38:09:6d:49:21:69:48:85:
         a8:11:50:fc:fc:7b:a2:4d:7b:51:7a:19:58:85:a4:7f:b6:fd:
         35:fd:fd:9e:dd:d7:8e:0e:9b:6d:3f:52:b8:fe:2d:1a:a6:30:
         cf:2d:d4:38:d8:de:cc:37:f9:7f:5b:19:f7:7b:d5:3d:77:dc:
         c4:60:7d:60:4c:a0:82:e2:f0:84:d9:bb:07:8b:27:a3:03:29:
         0e:d0:06:ac:20:0b:83:d0:f5:76:da:fa:25:86:5b:3c:05:d5:
         38:44:88:fe:70:4a:2d:ce:ae:8a:95:ad:9b:de:42:45:f8:e7:
         ee:12:41:46:b5:2e:e1:a0:c1:39:63:d8:f0:aa:04:aa:e7:c6:
         92:3e:9c:82:46:72:de:e2:52:b7:98:af:2f:37:3c:77:ef:c3:
         95:ba:b3:fe:f1:0a:7f:19:24:75:41:83:ae:b3:97:a4:9d:40:
         0b:3c:96:c0:bd:5f:26:3c:c0:5a:e3:ef:76:36:30:03:33:fb:
         0a:36:6b:41:c7:79:7b:34:c7:d5:31:fc:6c:ff:59:cf:e9:cb:
         b0:3a:04:fc:c1:8e:d3:8e:c1:60:0c:38:28:a7:c0:d4:94:36:
         c5:93:ee:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----