Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6130303a3a2f34302d3430203d3e20323733313932.roa
File:                     323830333a3635303a6130303a3a2f34302d3430203d3e20323733313932.roa (raw, json)
Hash identifier:          sZa+xq6vmIM8jMq4BdYG/uNU5urGUsp4yc9a1k/WE4M=
Subject key identifier:   84:9D:B2:92:D7:4A:46:B4:3A:2D:31:3D:4C:C2:DB:B2:E0:85:C3:C5
Certificate issuer:       /CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
Certificate serial:       1CEA5A9BCED50B186F46E90700CC436ECF72DF37
Authority key identifier: 96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6130303a3a2f34302d3430203d3e20323733313932.roa
Signing time:             Tue 30 Apr 2024 04:55:00 +0000
ROA not before:           Tue 30 Apr 2024 04:50:00 +0000
ROA not after:            Tue 29 Apr 2025 04:55:00 +0000
asID:                     273192
IP address blocks:        2803:650:a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ea:5a:9b:ce:d5:0b:18:6f:46:e9:07:00:cc:43:6e:cf:72:df:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E6C96FEA4FC5C17A5104F06884C50C6AF015A0
        Validity
            Not Before: Apr 30 04:50:00 2024 GMT
            Not After : Apr 29 04:55:00 2025 GMT
        Subject: CN=849DB292D74A46B43A2D313D4CC2DBB2E085C3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:63:df:40:c5:cf:58:16:98:14:c6:13:96:
                    27:3a:ed:d2:46:b4:a6:95:86:89:b5:88:dd:ad:b1:
                    32:13:81:20:70:2d:b0:e5:5f:5b:6d:08:56:ca:bb:
                    5f:09:28:e9:e0:6c:57:52:3b:fe:6a:74:54:7e:63:
                    f1:57:90:6e:e1:1f:97:d8:1f:70:82:3c:85:3a:01:
                    c9:b6:75:ad:21:2c:b9:c4:e3:7c:e8:4f:23:75:5b:
                    aa:ef:03:c5:20:19:0e:0b:b4:41:a1:e1:ca:7d:e0:
                    c8:dc:4b:d9:80:b4:aa:17:75:98:f7:3a:9a:f1:91:
                    42:4d:e3:0d:fe:e7:3d:b2:28:64:7f:ca:a9:be:6d:
                    24:b3:5d:dc:6b:43:59:07:1f:6f:44:db:b0:ca:8e:
                    df:72:0e:d7:26:b0:3b:4a:01:91:f5:a7:9a:67:3a:
                    44:ef:ca:1d:2c:45:bf:e3:2f:d4:97:71:f6:e0:7b:
                    4f:c2:18:fd:19:b7:ce:19:19:d3:32:ee:a5:8a:70:
                    c7:0a:5e:a5:a1:bc:63:0a:c0:f7:a7:17:48:03:3b:
                    a6:cf:06:55:8a:cc:c4:d9:62:83:26:98:6d:cf:a2:
                    7c:2d:ae:58:50:c7:d8:70:45:39:38:92:80:51:5d:
                    44:ed:33:44:32:7f:d1:e2:61:23:ba:fa:45:06:18:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9D:B2:92:D7:4A:46:B4:3A:2D:31:3D:4C:C2:DB:B2:E0:85:C3:C5
            X509v3 Authority Key Identifier:
                keyid:96:E6:C9:6F:EA:4F:C5:C1:7A:51:04:F0:68:84:C5:0C:6A:F0:15:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96E6C96FEA4FC5C17A5104F06884C50C6AF015A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F4152A59784624CF228AF49EA43DD0BA3CD8108953E071DA1BD3307EE1DBB9C/0/323830333a3635303a6130303a3a2f34302d3430203d3e20323733313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:e9:af:91:49:a9:83:e4:5b:5f:5b:cc:f0:36:5f:78:6e:88:
         b9:74:39:ca:b2:69:29:14:a1:d6:1c:42:a9:7b:4d:36:99:1b:
         83:b9:6a:f9:44:c7:f5:16:fb:d9:85:3b:49:99:52:ac:6f:03:
         1c:ca:03:e1:3f:1a:c7:85:18:5e:4d:35:78:72:5d:ff:3c:56:
         89:b1:0e:2c:83:a5:b8:f1:e5:13:4e:86:f0:d0:65:12:54:1f:
         6f:7b:56:be:dd:93:3e:2a:c5:c4:ca:8c:ff:ca:96:28:41:ab:
         ec:35:34:c0:67:be:7e:7f:e6:86:72:cb:b6:b6:e9:be:8d:c5:
         63:7d:d5:27:35:6f:da:60:db:1e:42:70:45:18:84:c3:56:a7:
         09:6c:f5:ce:86:7d:06:90:2a:5d:29:bf:ea:1e:de:a4:fa:2f:
         85:78:32:34:55:e9:64:62:f2:27:ac:3b:72:d7:76:87:f1:46:
         2e:f1:ee:61:16:89:fb:5c:0a:34:20:65:7c:41:4b:b1:19:78:
         7c:ea:cc:b5:73:35:35:1d:17:9d:e5:11:7d:e2:ea:ee:49:35:
         13:ae:72:9f:61:07:f3:10:59:d2:55:05:87:b0:c8:33:5c:d0:
         44:ab:a0:f7:81:9d:94:2a:ef:b3:79:88:48:36:06:dd:ae:66:
         a0:ea:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----