Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e20323632353839.roa
File:                     323830303a3635303a343a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          Y34VVvXKwVjUPNmQ0UZJwbC/kK3gLoKVfeQ2VisvhlI=
Subject key identifier:   5B:D3:D1:29:63:FB:BF:7E:73:94:BE:FE:31:63:72:54:C1:7A:BC:D2
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       66EF211432254EAA88E466C624F994047462D815
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:14:00 +0000
ROA not before:           Tue 05 Mar 2024 18:09:00 +0000
ROA not after:            Tue 04 Mar 2025 18:14:00 +0000
asID:                     262589
IP address blocks:        2800:650:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ef:21:14:32:25:4e:aa:88:e4:66:c6:24:f9:94:04:74:62:d8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Mar  5 18:09:00 2024 GMT
            Not After : Mar  4 18:14:00 2025 GMT
        Subject: CN=5BD3D12963FBBF7E7394BEFE31637254C17ABCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:49:9f:2f:29:1d:b7:66:39:e6:6f:bb:e1:
                    5f:6e:b7:be:2b:9b:5b:0c:25:4e:9d:1e:97:ab:e0:
                    6c:66:7e:19:d9:a9:2a:93:df:73:a0:89:1b:c1:ca:
                    d0:fd:9c:7f:fe:8d:63:54:03:2c:c7:15:34:ad:0f:
                    bb:b1:9a:6d:90:08:42:86:8e:79:8c:34:14:dd:4e:
                    47:eb:27:2c:ac:40:26:85:95:89:18:b7:e9:ad:16:
                    9c:af:47:4b:09:56:b1:cb:a0:99:8b:8f:d8:eb:3e:
                    f3:fe:04:6f:58:19:d5:49:d9:dd:1f:6d:e4:8c:cb:
                    47:06:86:30:13:07:40:e6:6c:b7:b7:49:cf:1d:c5:
                    22:6d:53:92:ad:71:60:c1:9c:79:71:40:ca:33:1b:
                    dc:6e:7f:87:b6:6d:b7:bd:e5:da:7d:cf:6c:02:6d:
                    6f:c6:5c:0e:8e:e5:b8:26:00:c8:26:c6:9f:28:8c:
                    cc:15:19:fc:dc:e3:b3:ce:cf:e5:4c:34:65:94:05:
                    76:57:f0:d5:b5:48:6f:b1:46:84:be:fb:0c:7c:60:
                    fd:a0:bf:fd:be:8d:48:d5:c7:96:50:b7:ac:7a:2c:
                    09:fb:6f:05:40:5e:d4:45:45:e8:13:5c:d1:00:3f:
                    ab:5e:f0:c6:41:42:0e:ef:f6:db:46:de:73:4f:a0:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D3:D1:29:63:FB:BF:7E:73:94:BE:FE:31:63:72:54:C1:7A:BC:D2
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a343a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:66:73:0c:2b:0e:41:06:ec:41:39:78:f7:a7:ae:57:17:7a:
         4d:6e:0d:51:b6:f6:f9:f8:bf:10:72:ff:b8:7f:a8:5f:6e:3e:
         9c:16:6b:32:f1:c5:f7:2f:c2:8d:49:b7:c2:04:9b:31:7d:00:
         ef:8d:11:e3:8b:5c:f8:bf:c3:90:79:ad:26:55:7c:1c:9b:ea:
         ab:01:81:43:eb:73:76:16:93:38:0e:40:16:31:dc:60:3f:13:
         7f:c8:14:36:b4:de:43:25:70:ed:86:3e:93:0c:db:85:4b:57:
         8c:a5:ec:59:d1:fc:16:e5:21:7c:3c:c3:9a:08:0f:b7:c4:d9:
         73:cc:5b:58:1b:a3:02:ba:dd:00:93:00:da:73:96:72:53:0b:
         94:f1:24:d8:f4:02:4e:05:e9:d4:fa:d6:46:28:04:13:9a:6b:
         fb:5e:63:d3:03:47:c6:75:21:5e:c6:26:4d:6d:f1:ee:67:8e:
         ac:48:f4:6c:5e:05:10:3a:84:69:71:57:69:cd:4a:8c:8d:f5:
         3c:8e:5c:c9:28:a9:43:b3:6d:2b:0a:4e:ca:e4:99:87:e8:61:
         a4:ee:e7:e2:db:c0:1a:7d:fb:da:80:43:a6:03:be:16:f0:98:
         9b:70:e6:73:0b:e1:a6:5c:7d:a0:3e:61:b7:1f:3e:27:49:91:
         8b:44:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----