Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3430303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3430303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          pHfYF+rOxH01i37VZtYRI9E+SasI180lXCpVviDb2Yw=
Subject key identifier:   AF:06:22:04:43:10:2B:2D:C1:EC:86:72:A4:48:C9:D9:FE:7E:8D:F3
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       50E2E42AC9A1BABB7774C7C79F8D6257F7942731
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3430303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 05 Mar 2024 18:02:24 +0000
ROA not before:           Tue 05 Mar 2024 17:57:24 +0000
ROA not after:            Tue 04 Mar 2025 18:02:24 +0000
asID:                     266894
IP address blocks:        2803:56a0:400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e2:e4:2a:c9:a1:ba:bb:77:74:c7:c7:9f:8d:62:57:f7:94:27:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Mar  5 17:57:24 2024 GMT
            Not After : Mar  4 18:02:24 2025 GMT
        Subject: CN=AF06220443102B2DC1EC8672A448C9D9FE7E8DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:11:de:d4:8f:6e:aa:c2:b1:41:13:43:1d:
                    be:c9:82:1c:50:c0:15:84:d7:46:d5:64:8b:01:2e:
                    79:01:13:c5:6e:d7:c1:f0:15:c1:0e:86:50:38:2b:
                    db:ed:98:ed:c3:1d:15:76:77:eb:30:6f:7d:ff:1c:
                    14:b7:86:70:b4:98:88:7d:b3:08:97:6f:ea:9f:6e:
                    7a:65:9b:61:58:e5:9e:74:2f:60:eb:56:9a:2c:28:
                    75:78:27:44:24:18:a0:79:88:c4:9e:82:65:12:33:
                    e1:df:98:ee:a0:a1:a1:bb:bc:5e:52:5b:45:1d:d3:
                    2c:8a:9e:34:a7:f9:92:0e:4a:c7:fe:dd:6a:a0:2e:
                    00:f2:32:27:ac:96:cc:e8:90:d8:9a:ba:fe:2c:a9:
                    ab:39:b2:65:ba:a5:58:eb:09:e6:b1:b4:1d:15:74:
                    46:ad:5c:8c:e9:66:df:c3:ac:b5:d0:d1:06:cb:95:
                    72:dd:b7:aa:2b:9a:57:c4:46:5e:91:c4:06:93:a4:
                    f6:34:3d:61:33:b4:79:3c:1e:db:07:fa:92:3e:4a:
                    99:d7:ce:11:5b:17:f9:ae:97:22:6c:6d:c8:7d:b2:
                    66:54:3e:7e:c8:48:16:e8:f1:b9:d7:70:eb:d7:4d:
                    5c:f9:6b:84:c8:12:d2:06:a2:e6:17:ce:62:f1:3a:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:06:22:04:43:10:2B:2D:C1:EC:86:72:A4:48:C9:D9:FE:7E:8D:F3
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3430303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:00:91:ea:81:17:7f:ba:63:ed:01:01:49:b6:2c:a8:9f:f9:
         18:11:d8:a7:57:25:91:a0:b9:7b:49:f0:51:19:d4:6a:94:ea:
         57:bd:55:89:88:c0:b5:6b:c6:56:bd:10:18:24:36:45:3a:9c:
         c6:ee:19:53:47:ee:0b:da:8c:f3:37:84:25:a7:b1:6b:54:dd:
         97:1f:d2:be:24:0b:b7:3e:7c:22:fb:2c:8f:ca:38:71:3b:70:
         03:0a:f3:11:2f:1e:c6:d7:4b:f6:1e:0b:80:55:38:16:84:98:
         6f:26:94:e0:12:39:5f:ba:07:59:56:7a:06:d2:60:40:66:16:
         f0:4c:09:aa:fc:07:03:59:06:12:b4:32:3e:b3:6a:cd:97:71:
         ba:fe:de:18:f9:5c:ad:f4:e2:a4:14:ea:06:da:1f:42:78:09:
         70:1a:f0:7b:93:84:29:23:65:4c:5a:66:86:a8:32:7d:0e:ae:
         c2:f2:78:58:ff:1b:63:93:1b:98:37:75:59:2d:d5:01:d0:1c:
         82:a9:d8:99:2c:23:1f:91:9b:07:08:1d:52:b7:9b:8c:33:2c:
         45:d7:6c:00:d1:af:db:0a:9b:e4:e9:c8:dd:b2:ce:12:09:30:
         b6:81:2d:63:41:89:8a:25:84:1f:de:8f:5e:9e:df:e2:df:fd:
         8a:16:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----