Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3930303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a3930303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          7LLZUOkcHH578GYowWxvSUAhX97etCmQWrpbxWCLjd8=
Subject key identifier:   DB:88:15:40:5B:66:F1:FE:04:CE:33:23:E0:63:30:2C:79:B4:F5:19
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       705246624D98BC74A044F124C5151D09DE06635B
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3930303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 30 Apr 2024 04:55:04 +0000
ROA not before:           Tue 30 Apr 2024 04:50:04 +0000
ROA not after:            Tue 29 Apr 2025 04:55:04 +0000
asID:                     273192
IP address blocks:        2803:650:900::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:52:46:62:4d:98:bc:74:a0:44:f1:24:c5:15:1d:09:de:06:63:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr 30 04:50:04 2024 GMT
            Not After : Apr 29 04:55:04 2025 GMT
        Subject: CN=DB8815405B66F1FE04CE3323E063302C79B4F519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:d6:3d:41:5b:57:cd:76:76:55:01:5a:bb:
                    76:9c:bf:fb:4b:e3:5a:f1:c7:19:4e:35:8d:14:ae:
                    e3:27:7b:e7:5e:f8:88:cf:46:2d:d0:2c:2e:d9:ce:
                    91:20:95:29:b9:d6:46:36:d5:d4:d9:0f:67:df:38:
                    f6:7d:b6:31:0a:e0:97:d7:6a:6b:9b:71:53:08:90:
                    d6:df:8e:90:00:47:01:c5:21:29:cc:64:e0:98:b5:
                    21:c2:c4:d8:e0:b1:79:d2:54:12:b6:de:fb:37:b4:
                    d0:ca:07:a9:2e:3a:87:7d:cd:e7:00:d1:fb:1e:0b:
                    1e:03:c0:68:44:c9:69:7e:b1:73:7a:f7:1e:57:e6:
                    ae:cf:4d:dd:bf:c0:61:f6:63:87:42:8a:5e:30:cc:
                    af:f6:df:9b:93:73:e3:53:5f:16:c6:3d:fe:3b:e5:
                    26:b8:ee:e2:9a:30:93:c3:c2:fb:e1:23:ee:10:7a:
                    0d:ea:39:0d:71:11:40:40:b7:ce:fb:dc:ec:d7:30:
                    8c:6d:29:e0:8e:bf:b4:0e:b7:a1:5e:53:8c:d4:a2:
                    9f:16:8d:e3:fc:0c:f7:5d:14:38:3f:ab:d2:45:f6:
                    19:41:51:cc:15:5d:09:c1:db:04:12:c1:39:48:92:
                    4d:d7:17:be:c4:02:24:3c:ad:f3:0d:8a:0b:3e:8d:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:88:15:40:5B:66:F1:FE:04:CE:33:23:E0:63:30:2C:79:B4:F5:19
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a3930303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:0b:e4:93:9b:de:49:52:8a:33:0b:84:b2:9b:8e:20:3d:1b:
         3f:f5:4c:7e:fa:ae:a0:33:05:ab:11:76:2e:7b:4f:fd:26:c8:
         76:31:54:fc:65:fc:9e:dd:31:f8:db:22:63:6f:dd:d7:7a:9a:
         e3:bc:05:76:bf:85:8d:23:42:3c:e5:57:11:d7:0e:5a:ca:5f:
         78:4e:1e:ea:52:e4:05:f9:cc:63:54:fa:b9:cc:27:1f:e7:74:
         c3:ec:f0:14:7b:87:64:fc:dc:24:da:89:1e:f7:d4:cf:a1:31:
         a9:eb:9a:f2:41:67:c5:c3:38:06:de:7d:db:80:e6:cf:96:95:
         33:52:c3:ec:b8:4f:b8:6c:69:e7:2c:07:73:1e:b6:3b:11:f1:
         0a:e1:c6:8b:44:b0:71:05:aa:e6:a1:22:a1:ce:db:2d:40:cb:
         19:35:4a:d3:3e:9b:29:d7:ee:40:13:34:72:e4:a7:03:20:97:
         0e:06:94:99:ce:70:dc:88:4d:ee:6a:1b:36:9c:66:3f:07:c1:
         83:35:1a:e7:98:c8:80:e0:3b:e2:7e:da:53:0e:7a:46:ce:fe:
         cb:15:13:96:2c:07:91:b6:b9:29:54:79:ef:cb:72:ac:5d:25:
         65:c9:03:98:2f:45:0b:f1:27:ac:27:7c:1b:11:33:31:0c:7c:
         9d:5e:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----