Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e203230323939.roa
File:                     323830303a3836303a3a2f33322d3634203d3e203230323939.roa (raw, json)
Hash identifier:          eYmBttYY3N4oL4MUhaESkT18kBhRZsWG2q4SPpUC+TY=
Subject key identifier:   53:97:58:F4:80:3A:29:AF:82:F2:82:DB:63:86:E7:0E:39:BE:1F:82
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       1E074BD568F68BD6E117D3A53D4ABBEC27F62F6C
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:00:01 +0000
ROA not before:           Tue 05 Mar 2024 17:55:01 +0000
ROA not after:            Tue 04 Mar 2025 18:00:01 +0000
asID:                     20299
IP address blocks:        2800:860::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:07:4b:d5:68:f6:8b:d6:e1:17:d3:a5:3d:4a:bb:ec:27:f6:2f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:55:01 2024 GMT
            Not After : Mar  4 18:00:01 2025 GMT
        Subject: CN=539758F4803A29AF82F282DB6386E70E39BE1F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b8:16:5d:aa:4f:67:0b:c6:5a:03:d7:ef:3a:
                    b9:8a:3e:ac:98:44:f9:54:01:1b:3d:4f:66:07:1b:
                    2f:b4:81:8e:e6:0c:5f:a7:7c:22:da:94:17:30:d7:
                    c4:cd:0e:4b:f3:d9:17:4e:98:ae:29:a3:6e:28:62:
                    24:15:98:44:c9:a7:19:27:2c:9d:f1:0d:09:2b:7b:
                    ba:6c:d1:ed:7b:ff:49:80:b0:d8:e8:b1:96:35:8d:
                    ee:11:c1:2e:01:15:d8:de:66:b7:9c:f6:76:8d:6f:
                    a6:9c:66:6a:ea:b2:71:50:a2:9f:ef:c1:fd:d6:51:
                    ca:81:db:a8:9b:08:bf:17:b3:c5:70:56:a2:40:b9:
                    f9:04:12:9d:35:22:b0:b3:4b:29:c1:3f:ee:3e:5a:
                    8c:81:ee:96:d7:bf:63:5a:40:37:53:0b:dd:0f:97:
                    87:c5:a3:fc:01:82:86:fb:07:c9:b3:9b:d1:a5:96:
                    ec:2f:dc:50:51:26:30:d8:a6:20:0a:23:4b:7c:9b:
                    75:07:36:8f:e4:51:76:d7:04:b9:0d:15:59:ca:a4:
                    ee:17:0c:2a:8d:95:d8:9f:6c:e8:19:a6:37:10:6e:
                    8f:3a:cd:37:03:ed:1d:01:9f:14:a2:48:0c:e1:bb:
                    f7:62:55:fe:89:e6:78:58:7b:06:1e:68:86:d0:ce:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:97:58:F4:80:3A:29:AF:82:F2:82:DB:63:86:E7:0E:39:BE:1F:82
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/323830303a3836303a3a2f33322d3634203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:12:53:3d:57:b0:ef:c3:1f:65:0f:4c:b0:c2:b0:26:b1:82:
         c0:7f:83:52:99:2f:88:8c:b2:14:95:f4:2e:82:70:bf:3a:f8:
         32:06:17:4d:3b:e2:cd:1d:bc:9e:bf:dc:1b:70:bf:51:d5:22:
         af:d0:dd:27:13:d9:a6:f3:f9:00:94:b8:8c:78:f7:5c:82:0c:
         a0:8e:0c:db:52:7f:e6:f4:0e:fc:d6:6a:9b:b3:af:d9:60:6b:
         0e:21:72:bd:28:0f:f2:7e:0e:65:a6:b4:e5:b6:49:d8:28:45:
         53:4f:36:b0:d7:82:b2:f8:53:4e:19:5e:6f:5d:4f:6c:e5:a0:
         6e:27:b1:f3:35:ba:a1:e1:66:56:9d:f0:49:c2:4e:ac:66:c0:
         d2:72:06:12:4f:af:cf:95:c1:76:77:7b:b5:b1:33:3a:fb:78:
         e4:f8:22:98:bb:5d:84:6b:50:9c:dc:1d:51:f4:1e:03:90:18:
         6d:7c:bd:2b:94:5b:09:77:d1:d3:8b:c6:a3:73:70:f6:c3:d5:
         f3:f9:91:3d:55:cf:38:88:84:cc:d2:85:3f:d8:30:89:a7:a1:
         bb:61:b6:cd:fd:cd:52:05:82:b6:5c:da:12:8c:c5:d7:d8:af:
         3f:ef:7e:bc:4f:c0:e6:28:b0:2f:44:73:58:bf:e0:37:65:36:
         6e:50:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----