Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130613a3a2f34382d3438203d3e20323632353839.roa
File:                     323830303a3635303a3130613a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          r8IsLSHUmDjM78NJ8sx0DITR0v0+HfN43Pp88HlkpkM=
Subject key identifier:   6D:23:6F:05:40:42:19:27:3D:ED:25:63:E8:2C:DC:AD:66:C8:04:31
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       6BABC632C8AF9BBEDF44CCD8FA61EE49AA90EA37
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130613a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Wed 17 Jul 2024 14:15:01 +0000
ROA not before:           Wed 17 Jul 2024 14:10:01 +0000
ROA not after:            Wed 16 Jul 2025 14:15:01 +0000
asID:                     262589
IP address blocks:        2800:650:10a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ab:c6:32:c8:af:9b:be:df:44:cc:d8:fa:61:ee:49:aa:90:ea:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Jul 17 14:10:01 2024 GMT
            Not After : Jul 16 14:15:01 2025 GMT
        Subject: CN=6D236F05404219273DED2563E82CDCAD66C80431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:e1:03:f2:25:39:ca:4b:26:df:63:e8:e0:
                    3a:99:96:85:55:23:1a:df:ca:21:09:8a:a0:08:d7:
                    2c:1e:db:03:c7:06:9e:24:30:9f:9b:f5:46:0b:e8:
                    2a:da:f0:7d:c8:45:36:b1:71:08:54:36:97:3d:c6:
                    49:56:33:9c:9a:0f:bd:62:61:95:bb:58:92:ee:e4:
                    b1:11:8d:80:5b:3f:b6:8d:85:dc:24:54:14:cf:5b:
                    a4:f9:a3:59:a2:a6:58:9a:2c:f6:ea:ce:9e:90:7d:
                    00:c8:eb:c0:02:cc:3b:1c:9a:ba:2d:78:72:a8:40:
                    71:53:1f:20:da:45:14:61:ac:83:6a:41:6d:fd:65:
                    dd:18:b4:ff:a8:83:8a:70:dc:98:48:02:c5:dd:25:
                    32:df:b7:63:f9:1f:f0:47:27:dd:de:e1:d9:c1:59:
                    21:b3:c1:30:56:b3:b1:42:57:91:ed:3c:c4:9f:15:
                    63:0e:38:ac:b5:11:10:9d:88:2a:8d:6a:ff:5a:f4:
                    93:8a:3a:73:32:36:72:10:91:fa:f2:8f:df:d9:de:
                    ef:b9:6d:24:45:e8:8c:89:77:a1:df:73:22:be:62:
                    ae:20:50:2a:90:d4:9b:d1:03:a5:88:c2:2c:66:8c:
                    fb:9a:ce:3b:50:39:d6:c0:99:6c:00:16:2c:ce:93:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:23:6F:05:40:42:19:27:3D:ED:25:63:E8:2C:DC:AD:66:C8:04:31
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3130613a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:e2:84:bd:54:dd:b6:5f:c6:78:2c:6e:ff:a7:63:21:eb:
         b4:c0:b4:78:ec:12:75:f5:03:b5:f2:9b:c4:82:09:90:be:c9:
         89:02:2a:69:7b:ff:c5:d5:c0:ba:07:58:72:5d:41:15:ef:20:
         38:c8:f4:7a:9a:17:a9:b0:6f:61:44:ea:80:35:a5:7f:6c:79:
         70:34:b3:e1:8d:fb:c9:f8:98:f7:b5:0b:2a:a6:8a:fe:f3:1f:
         5c:06:7f:75:8a:74:5f:28:fa:9e:de:9d:3b:27:39:49:ce:f4:
         a1:fb:aa:ec:b3:e1:cb:fb:32:08:13:f7:f8:ce:d3:27:87:f8:
         32:f9:f6:e7:a4:c2:9d:4a:a4:b2:7a:6a:79:2e:84:ed:c7:f9:
         0b:c6:d3:dd:6d:3a:b9:c9:ab:bf:7f:5e:aa:c8:b0:04:f6:af:
         2c:cb:c4:b2:1b:38:64:7d:df:9d:51:fd:56:f6:59:0d:f4:a1:
         f0:24:d7:40:df:04:20:5e:aa:05:f6:98:12:3f:99:89:aa:4b:
         d5:7b:bc:71:22:78:62:87:51:e8:c0:96:63:cc:1b:e1:76:89:
         f0:5e:c6:e1:d6:9e:ab:62:28:85:ed:c4:59:72:91:4f:ea:ba:
         f1:17:c8:b3:1b:d0:91:47:16:60:ea:a2:87:24:4e:81:56:b0:
         3f:50:94:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----