Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/323830303a3632303a3a2f33322d3634203d3e203131353632.roa
File:                     323830303a3632303a3a2f33322d3634203d3e203131353632.roa (raw, json)
Hash identifier:          qqFasnaDWZZM3XDtRxsBZ8QWue9wOkJimbBIs5z6Tnc=
Subject key identifier:   7A:07:E6:95:B9:7F:F1:79:3B:AA:0C:B6:36:E9:AE:18:A6:BD:0F:B8
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       75516E3242ADA5AA94B031ADBC572DDD8544AC5A
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/323830303a3632303a3a2f33322d3634203d3e203131353632.roa
Signing time:             Tue 05 Mar 2024 17:53:26 +0000
ROA not before:           Tue 05 Mar 2024 17:48:26 +0000
ROA not after:            Tue 04 Mar 2025 17:53:26 +0000
asID:                     11562
IP address blocks:        2800:620::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:51:6e:32:42:ad:a5:aa:94:b0:31:ad:bc:57:2d:dd:85:44:ac:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Mar  5 17:48:26 2024 GMT
            Not After : Mar  4 17:53:26 2025 GMT
        Subject: CN=7A07E695B97FF1793BAA0CB636E9AE18A6BD0FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:bd:9d:4b:ad:20:41:9c:29:cf:64:27:0a:
                    9e:0f:1d:de:b7:23:8e:ca:28:91:76:d8:82:a5:51:
                    5c:66:5a:f0:99:a9:4f:46:6a:f3:f1:9b:e4:9d:3e:
                    de:2a:15:47:e4:50:e9:84:3f:fd:d4:f5:2b:e2:c6:
                    a9:4e:3d:8b:c4:a4:03:18:8a:81:03:a8:5d:b7:f7:
                    b5:c4:c9:a4:68:c9:3f:d5:bc:93:3f:fa:df:b9:bc:
                    cc:e6:eb:55:dc:8a:33:1b:ef:4f:07:dc:b4:a6:04:
                    68:5d:2c:60:36:61:f6:5c:fd:32:b4:7b:c3:5f:55:
                    34:3d:20:f7:88:2a:48:c9:a3:3f:a1:1e:d5:6e:d4:
                    85:e3:c8:98:75:f2:68:35:57:de:f7:51:75:99:41:
                    1c:6a:77:99:29:0a:b7:0c:20:ee:13:71:a7:69:31:
                    aa:48:d2:cc:d7:58:ac:1d:af:80:e2:f9:cb:13:db:
                    ab:6b:fc:97:71:94:43:3e:be:fd:99:6c:a0:59:5c:
                    fa:b2:61:08:c4:3e:72:f8:6a:3a:38:89:fa:d8:53:
                    32:9c:94:bf:f3:2b:04:9c:7a:08:66:c7:5b:76:4d:
                    62:e5:47:88:ca:ac:c1:53:09:d0:13:43:71:5c:4e:
                    5c:70:23:f3:a0:94:7b:ce:84:3a:e4:53:2f:a8:df:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:07:E6:95:B9:7F:F1:79:3B:AA:0C:B6:36:E9:AE:18:A6:BD:0F:B8
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/323830303a3632303a3a2f33322d3634203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:620::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:c3:18:37:95:23:77:65:46:5c:0b:33:51:1d:6d:6b:83:97:
         2f:d0:78:9f:7c:03:5b:d5:d2:2c:0f:99:78:ea:13:a5:0d:27:
         a0:2a:5f:fd:3b:2f:a6:c2:29:95:e9:a8:64:3a:db:16:0c:20:
         e0:6e:f5:d6:d5:be:ec:28:a6:a3:69:05:6a:10:95:27:53:e7:
         43:ab:8c:e3:06:42:f8:a6:fc:4f:47:a0:53:74:8b:db:76:af:
         d3:61:1b:43:f9:d4:53:76:42:91:e9:56:ae:35:a1:5a:39:fd:
         71:c4:de:fe:e5:8b:31:71:29:79:de:98:29:e0:cb:80:86:a6:
         3e:94:cf:ed:74:0d:ca:0a:7c:f1:7a:da:c6:e8:16:c4:3f:c0:
         01:14:f7:ca:a5:49:78:8d:b0:c8:5c:6b:c2:fd:53:a3:92:d7:
         6a:26:66:42:06:1a:b2:d6:80:70:51:d4:f9:4d:a0:c0:c6:71:
         11:6e:e2:ae:09:f6:aa:28:72:21:d1:1c:07:23:e7:34:0e:59:
         7f:dd:25:60:f3:7b:5b:df:45:4d:ec:27:b6:63:bd:64:7a:1a:
         f6:cd:ae:5a:56:f2:4c:0c:4c:bc:a6:67:34:54:9b:e5:37:b9:
         9b:ec:f2:f5:b0:21:bd:6e:6d:9d:ab:49:9d:29:4e:c4:7e:6f:
         b0:be:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----