Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3136653a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          BT6a6/umL7mJeRa6U08xQ4fwORSDdda1BDIb321TV2M=
Subject key identifier:   8C:26:1E:26:14:8E:31:14:14:92:23:DF:AF:6F:3A:4E:DE:A9:EE:53
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       324AF933EE4523D5D1EE8D26C2B2AA87AEE18816
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:13:00 +0000
ROA not before:           Tue 05 Mar 2024 18:08:00 +0000
ROA not after:            Tue 04 Mar 2025 18:13:00 +0000
asID:                     19429
IP address blocks:        2801:16e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4a:f9:33:ee:45:23:d5:d1:ee:8d:26:c2:b2:aa:87:ae:e1:88:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Mar  5 18:08:00 2024 GMT
            Not After : Mar  4 18:13:00 2025 GMT
        Subject: CN=8C261E26148E3114149223DFAF6F3A4EDEA9EE53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:ce:34:2b:68:47:fd:79:7e:e3:60:db:76:
                    c0:a7:ce:54:85:2b:d8:94:0a:34:f5:61:79:3d:c9:
                    05:a4:cf:3f:90:11:a2:58:61:59:d6:71:a1:6e:34:
                    c1:28:51:ee:60:35:74:12:90:0c:3d:98:d8:02:d7:
                    71:12:a6:7d:31:43:59:d1:c9:98:3e:1f:5d:35:bd:
                    82:e3:09:4c:38:5e:30:bb:22:cc:0f:ec:1f:a8:e9:
                    21:24:38:6e:f1:f1:0c:78:7f:5c:87:5d:ba:d1:5a:
                    95:4f:ca:bb:88:d9:fa:87:44:99:0b:42:b8:12:28:
                    ef:a6:7b:c4:36:fb:81:d4:92:44:bd:32:02:8d:00:
                    11:35:80:b5:b5:fa:f9:59:9a:53:30:41:ee:58:c3:
                    7d:a5:36:69:96:8a:a1:2b:7f:52:8b:38:61:2b:26:
                    c8:9b:24:c3:f8:b0:16:88:b4:f2:dc:e0:ff:ab:8c:
                    64:9a:8d:f2:28:c3:78:e7:e8:1e:33:a4:e8:0c:d8:
                    8c:79:df:94:9b:5e:85:ac:43:e6:9b:29:53:68:5a:
                    d7:3d:fb:16:56:56:c4:dd:43:20:5e:84:a7:81:4c:
                    7a:36:5f:c6:dc:d8:db:49:70:0d:e9:f0:7a:ac:e8:
                    f4:b8:9d:d0:10:40:c5:f6:52:96:ad:e8:32:8c:8b:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:26:1E:26:14:8E:31:14:14:92:23:DF:AF:6F:3A:4E:DE:A9:EE:53
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:fd:35:5a:34:4c:2f:0b:9b:61:b2:17:b8:a9:4e:4a:db:
         fc:22:0e:fd:8f:68:36:01:36:94:49:9e:67:5a:a9:38:88:63:
         37:af:c2:57:9d:b8:a7:5d:e7:5f:7f:63:e5:d1:d7:4f:e2:9b:
         92:51:52:f4:18:9f:f7:89:53:83:65:9a:bf:41:e5:cc:3f:19:
         ec:ab:1a:ad:d5:a7:92:85:08:c9:e8:6b:53:68:39:fe:8e:98:
         bc:dd:f9:aa:5e:b2:8a:3d:28:35:3c:3c:6b:e7:9c:a4:77:69:
         23:e1:f0:aa:f0:0c:a6:fb:6f:95:2a:96:02:64:03:cb:46:ad:
         eb:a5:ec:d8:6b:82:4f:45:0b:5d:9c:bb:0e:79:c2:9c:03:27:
         bf:9e:28:17:50:24:da:e4:af:ed:b0:ea:95:15:82:30:d8:e5:
         27:0e:62:c1:b5:32:d9:66:4b:6e:ac:2c:50:bd:66:3d:55:b0:
         80:bd:c2:96:79:eb:5f:0f:d1:a0:8d:df:9d:00:1f:7f:0b:d6:
         eb:63:08:30:35:b9:25:36:20:b2:90:cb:d3:81:a3:ca:1c:2a:
         a2:f3:64:52:ba:cd:19:b1:b4:95:7d:d2:2b:52:06:8e:0c:92:
         99:6e:09:3b:14:60:55:5c:76:8f:e9:fd:36:44:59:17:3f:5c:
         a2:0d:e0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----