Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3330303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3330303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          uJLynKp27fqnfdVINbBztEgiSBxagxISgW6kj0WBQ1g=
Subject key identifier:   E2:FC:8F:EC:D2:0B:1C:D2:15:3F:36:62:CB:D3:3E:00:EA:9E:24:9E
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       69DD6B42AA41597B6A2DC792B63CD42CE0EAA689
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3330303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 27 Jun 2024 03:50:02 +0000
ROA not before:           Thu 27 Jun 2024 03:45:02 +0000
ROA not after:            Thu 26 Jun 2025 03:50:02 +0000
asID:                     273858
IP address blocks:        2803:3550:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dd:6b:42:aa:41:59:7b:6a:2d:c7:92:b6:3c:d4:2c:e0:ea:a6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: Jun 27 03:45:02 2024 GMT
            Not After : Jun 26 03:50:02 2025 GMT
        Subject: CN=E2FC8FECD20B1CD2153F3662CBD33E00EA9E249E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1f:16:80:e8:f5:f4:9c:64:f5:7a:40:84:4b:
                    43:db:24:fb:d8:37:71:24:3f:11:84:c3:df:8c:af:
                    9d:7f:ef:d7:d2:1d:0f:29:63:11:29:b2:2b:01:0a:
                    4f:44:47:36:3e:9d:f9:31:3a:6c:48:a8:39:82:45:
                    d5:21:ce:c3:3d:b0:b7:96:19:b7:46:fe:7a:d7:d4:
                    8f:f2:1c:19:8e:f8:90:ac:a0:9e:82:09:13:42:ed:
                    ed:67:c6:12:2e:b0:b6:eb:a9:19:e3:3a:77:dc:fb:
                    9f:5e:a4:5e:cb:ad:f9:28:8b:b3:97:4f:53:46:6e:
                    e7:43:a8:67:51:b3:68:c2:dc:bc:88:2e:24:a7:35:
                    21:7b:e9:e0:44:14:b2:6c:b9:7f:1b:a6:2f:ad:08:
                    a1:3f:1a:ef:8e:9e:f7:89:85:7f:7c:ed:6b:df:e7:
                    0b:5a:e6:93:08:82:70:c9:85:d3:48:7f:35:c1:79:
                    f0:23:72:5f:51:4f:58:d0:9c:20:10:f1:69:53:a0:
                    67:21:b7:8c:20:f7:7d:5e:ef:80:26:39:01:10:4c:
                    d8:15:e8:0e:ac:d4:d1:35:4f:38:b8:c0:0a:e4:bf:
                    60:57:14:5d:77:1b:47:ae:51:a7:71:f8:7a:3a:a3:
                    8e:7e:00:38:82:07:44:29:93:65:a3:4e:67:b4:0b:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:8F:EC:D2:0B:1C:D2:15:3F:36:62:CB:D3:3E:00:EA:9E:24:9E
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3330303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:f6:70:a7:b3:96:e1:8b:d5:79:c4:7e:f4:03:79:05:3e:99:
         5d:26:73:a5:fd:ab:dd:bc:73:5c:fe:a9:4f:b1:f9:01:a5:ff:
         26:ef:3d:f5:22:7b:9b:a2:0d:47:70:f6:5f:30:e6:06:fd:fb:
         7d:1b:0b:df:c3:23:28:46:13:fe:79:11:14:3b:0c:49:0c:01:
         22:e1:90:de:80:5e:b6:3b:3f:e8:26:33:09:2a:d6:4d:b6:d0:
         3e:14:91:52:42:0a:4d:d2:ef:7d:73:fb:e4:f9:fe:fb:e2:d7:
         d2:99:7d:5a:7c:b2:1b:45:5a:dd:2e:3c:fe:99:a9:09:ed:71:
         43:a8:30:0d:48:97:a8:14:0f:81:21:87:9b:ec:d1:13:10:af:
         7b:df:ea:42:64:14:39:7d:e2:27:dd:a4:fc:cb:17:c0:2d:1c:
         18:1a:79:a8:f9:ec:ad:9a:fc:e8:3a:c8:e5:4c:5f:7f:ad:0d:
         09:5a:51:81:9d:bd:b3:13:1e:39:76:7d:3a:75:5b:d5:05:e9:
         15:31:4a:ba:43:25:12:88:2a:f8:d1:eb:50:16:45:90:9c:73:
         03:1e:90:ea:27:7c:64:65:a3:44:a5:00:21:7f:b7:46:cd:c9:
         cb:10:a3:cb:e7:61:6a:8f:20:e2:7c:00:18:13:74:0a:31:d6:
         99:ea:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----