Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3130303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3130303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          3J4zSpmx/fHPrWWOc5tlmmUCE0Wv3Jwqc0Aj+ppLONY=
Subject key identifier:   C9:5A:11:EA:ED:43:82:5B:72:6E:25:F8:6D:0E:6A:87:25:BF:FC:48
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       31018A9919D3C2418C88302D273453CF3950B36B
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3130303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 05 Mar 2024 18:02:23 +0000
ROA not before:           Tue 05 Mar 2024 17:57:23 +0000
ROA not after:            Tue 04 Mar 2025 18:02:23 +0000
asID:                     266894
IP address blocks:        2803:56a0:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:01:8a:99:19:d3:c2:41:8c:88:30:2d:27:34:53:cf:39:50:b3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Mar  5 17:57:23 2024 GMT
            Not After : Mar  4 18:02:23 2025 GMT
        Subject: CN=C95A11EAED43825B726E25F86D0E6A8725BFFC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:54:f4:a3:62:cc:ab:d0:b8:95:01:ee:32:
                    12:ef:b0:c0:2d:32:e8:fd:36:bc:00:e3:16:11:02:
                    e3:c5:5b:74:e5:7f:8f:3d:23:c8:28:56:85:6e:72:
                    bd:65:af:c6:bc:47:18:89:1e:9d:93:49:e5:81:c1:
                    66:b8:11:cc:69:5b:91:27:c5:46:c3:ac:18:03:80:
                    a6:74:e7:31:2e:34:a8:8a:d2:a9:71:fd:63:7a:b8:
                    d0:5b:eb:cd:cf:26:b1:8c:4f:db:56:e5:24:37:b4:
                    07:c0:a5:9f:2d:d1:98:4a:77:2d:76:4f:0f:f1:f8:
                    a8:2b:ed:03:0a:c9:ec:19:24:91:5b:86:d1:a3:cd:
                    17:d6:05:68:19:ae:3d:7d:eb:e0:68:b2:e3:18:39:
                    3a:4c:3b:ec:c7:66:b1:a5:11:8a:0c:97:d4:40:52:
                    bf:57:31:f9:20:98:68:73:64:5c:33:42:70:04:76:
                    72:b4:e3:18:b5:87:81:2f:9f:5e:d7:91:ee:7c:93:
                    56:0c:3b:5f:d3:ea:d2:fb:3b:12:53:50:fe:31:46:
                    67:ea:0b:80:c3:5d:f9:d7:a8:b7:0f:62:4e:5a:24:
                    de:95:ed:0c:b5:3a:55:8a:7e:03:47:31:71:5c:39:
                    98:a7:99:97:42:76:2e:12:17:77:e3:11:04:12:44:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5A:11:EA:ED:43:82:5B:72:6E:25:F8:6D:0E:6A:87:25:BF:FC:48
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3130303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:bf:08:70:b2:49:5d:19:cc:fd:48:3a:a0:dc:c7:5b:7a:ca:
         ae:6d:9c:b9:86:3b:d4:ae:2e:b9:4b:c8:5b:ce:3a:3c:9f:dd:
         d4:0c:86:9c:7b:67:d0:3f:9d:f2:06:3f:6c:5c:8e:d6:b3:56:
         b6:29:76:bd:80:cb:ab:ef:6f:3c:48:8c:9b:f9:ce:ba:7d:d0:
         cc:32:b0:53:31:40:91:0b:ce:a2:64:42:1d:eb:21:40:ab:ab:
         08:6c:9c:c6:aa:81:9c:a7:07:8f:bc:52:d9:40:0b:40:ca:b1:
         8d:25:d0:67:ef:4b:f0:12:30:8d:a3:cb:22:84:c3:c0:97:ca:
         76:b9:5f:13:8d:13:ef:a9:f1:6e:02:db:7a:a8:33:0f:f5:8c:
         12:bc:1f:c2:02:2e:50:d9:5a:a1:c5:96:5c:32:99:cb:5b:b6:
         0f:27:0f:6e:09:ca:a7:96:57:eb:02:2c:a4:b7:a4:6a:d3:e1:
         2c:50:10:bb:ec:31:3e:07:57:12:dd:19:46:5d:be:29:a2:a0:
         9f:43:23:c1:0e:ba:ad:86:95:17:36:d4:a0:9f:49:77:9b:c1:
         fc:ce:af:d3:37:9b:23:ad:bb:e8:f4:e5:db:d1:a0:39:b2:4c:
         69:ec:da:af:44:06:f2:92:63:76:32:4b:c3:1b:19:2a:a8:22:
         d3:ac:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----