Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3630303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3630303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          c3F9V9f4pgo3EHinmBzFXVXhGGjjpTjV8RFmSiizqe4=
Subject key identifier:   D2:6E:01:11:36:0D:80:BC:48:8B:B6:C9:E4:51:D9:10:C3:02:24:2F
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       2D3EB412DFA2EF8B9A8C704E07040668B6BF6EC0
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3630303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 27 Jun 2024 03:50:01 +0000
ROA not before:           Thu 27 Jun 2024 03:45:01 +0000
ROA not after:            Thu 26 Jun 2025 03:50:01 +0000
asID:                     273858
IP address blocks:        2803:3550:600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3e:b4:12:df:a2:ef:8b:9a:8c:70:4e:07:04:06:68:b6:bf:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: Jun 27 03:45:01 2024 GMT
            Not After : Jun 26 03:50:01 2025 GMT
        Subject: CN=D26E0111360D80BC488BB6C9E451D910C302242F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:8f:56:6e:eb:d9:7b:7a:b5:1a:e3:62:24:
                    0c:24:76:57:b0:aa:2f:20:98:cc:40:7f:39:5e:1b:
                    27:25:c0:79:bf:1c:6a:f9:a7:8f:b1:3c:15:b9:bc:
                    f0:67:2f:96:b8:27:c8:62:03:60:30:54:0b:27:82:
                    3b:1b:65:79:e5:ae:31:f9:2d:d2:bf:1a:94:f6:8d:
                    76:0b:b7:50:8f:77:d2:8c:65:38:c7:84:16:0d:43:
                    f5:6f:79:55:f0:87:f0:ca:98:dd:da:67:cd:e8:78:
                    67:71:40:89:77:fe:42:70:82:b0:04:4b:0a:45:4a:
                    6f:6b:3a:0b:7c:6f:7a:e5:ee:e3:2a:f1:ee:cb:5b:
                    37:67:01:ff:85:fd:64:4c:0c:c7:47:00:e3:00:67:
                    03:5d:36:f6:bb:8c:d5:02:ca:9d:93:b9:59:45:ef:
                    0e:df:75:31:7c:44:a8:a6:fa:64:7d:d3:ac:1d:c4:
                    e8:ac:ad:73:20:1e:67:e3:ab:6e:15:32:23:83:3d:
                    65:25:2b:7e:f7:e7:97:18:d6:7d:81:9d:32:6d:63:
                    fd:f3:7d:19:da:f0:fb:e5:bf:d1:a5:85:b1:6c:cf:
                    14:b7:fb:1a:1b:28:6a:a9:c6:e5:c8:bc:c8:eb:3e:
                    6e:63:a9:41:e6:f0:5f:93:32:7f:3f:6c:1c:82:08:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6E:01:11:36:0D:80:BC:48:8B:B6:C9:E4:51:D9:10:C3:02:24:2F
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3630303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:92:45:77:90:a3:9f:f9:5c:03:64:df:8f:98:a1:68:e5:b9:
         f8:b5:6c:bc:1f:7b:67:35:27:c7:47:e1:4c:9d:f8:8d:8e:82:
         03:d3:1f:50:b0:3c:fa:3d:19:ae:b8:1e:0e:7d:1a:28:80:51:
         30:4c:3d:c5:c4:64:83:61:eb:85:a8:b7:74:e8:cb:34:c9:20:
         1f:62:14:ee:74:aa:86:03:f6:54:b8:49:4d:05:e7:e3:70:35:
         04:85:5f:15:34:20:55:b0:f7:ec:94:ca:7d:d3:1a:f5:8a:1c:
         76:ab:b7:d8:dd:b5:90:38:98:20:da:7d:de:ca:3c:6f:fd:d4:
         dc:7a:3d:85:2c:e5:5b:13:f6:8e:93:12:0f:7f:cd:22:f5:25:
         01:84:22:4e:0b:ed:9b:57:7b:90:7d:99:32:ce:85:ca:a4:b4:
         ba:30:f1:f8:fa:14:0b:5c:00:fd:02:4e:b5:0c:aa:ec:8e:eb:
         8a:34:d7:36:09:aa:05:bd:f7:a5:31:90:02:8d:3a:7f:3b:26:
         70:bf:81:94:72:b0:5e:17:de:6d:10:12:33:03:44:4f:ff:b9:
         13:4e:b6:66:0e:45:be:32:e6:e2:2e:69:fb:a5:3a:2f:3b:48:
         cd:d7:de:14:bc:68:3c:f4:ef:e6:05:6f:02:da:4c:30:cc:7f:
         ec:15:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----