Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/323830333a666365303a3a2f33322d3438203d3e20323639393136.roa
File:                     323830333a666365303a3a2f33322d3438203d3e20323639393136.roa (raw, json)
Hash identifier:          sxtQmoj/NwFqJDbF406JSaM3jCJYGW7GTT1ctFCe9sw=
Subject key identifier:   C2:EA:F6:5F:8B:04:5D:58:86:6D:46:16:04:31:E7:91:72:C7:7B:8F
Certificate issuer:       /CN=26202FFE799537E0FC87B74ABBFB4E1A1367F2EA
Certificate serial:       5DA3BF6F1EE2A56308861131131543DFFCC08F2D
Authority key identifier: 26:20:2F:FE:79:95:37:E0:FC:87:B7:4A:BB:FB:4E:1A:13:67:F2:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/323830333a666365303a3a2f33322d3438203d3e20323639393136.roa
Signing time:             Tue 05 Mar 2024 18:07:25 +0000
ROA not before:           Tue 05 Mar 2024 18:02:25 +0000
ROA not after:            Tue 04 Mar 2025 18:07:25 +0000
asID:                     269916
IP address blocks:        2803:fce0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a3:bf:6f:1e:e2:a5:63:08:86:11:31:13:15:43:df:fc:c0:8f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26202FFE799537E0FC87B74ABBFB4E1A1367F2EA
        Validity
            Not Before: Mar  5 18:02:25 2024 GMT
            Not After : Mar  4 18:07:25 2025 GMT
        Subject: CN=C2EAF65F8B045D58866D46160431E79172C77B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:76:30:f1:29:da:e2:64:84:0f:77:ec:01:
                    d6:52:39:2c:87:48:05:9f:d6:0a:b7:bb:be:4f:ac:
                    3b:27:b3:14:40:bc:1a:a0:03:00:1e:99:5e:f3:28:
                    ab:d0:d8:90:73:e0:65:52:b7:eb:c1:35:a0:a8:e2:
                    25:5a:e0:9f:a4:9d:2c:b5:1c:18:c4:7f:0e:96:49:
                    67:7c:8f:71:54:49:e0:e0:5a:1f:31:ad:34:a4:19:
                    b0:0e:8b:ed:dc:db:95:50:16:1b:14:f5:7d:e7:99:
                    be:d0:9d:17:c0:94:83:c3:84:ce:0a:d0:7b:46:32:
                    a6:1e:f7:de:5a:40:08:37:b2:b8:83:70:c3:97:c0:
                    15:70:49:ab:d8:a7:c5:a3:0d:5d:20:23:c3:ca:8e:
                    e8:d0:b7:2b:e8:9a:f4:47:ad:be:1b:98:4f:e3:14:
                    d3:1d:d4:f8:98:a7:38:7a:e2:00:ac:84:8b:b0:e8:
                    44:93:79:9f:98:c1:ee:cf:c1:3f:31:64:62:77:58:
                    f8:65:59:33:7a:71:ef:69:94:01:9e:8b:12:99:9a:
                    db:13:3d:73:e7:3f:62:ed:c0:ec:e6:0f:f2:04:68:
                    33:e5:74:32:c2:2d:ce:fe:cb:fc:7a:bc:44:63:bc:
                    56:e3:93:b9:19:a3:db:00:84:e1:a0:b0:ac:67:23:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EA:F6:5F:8B:04:5D:58:86:6D:46:16:04:31:E7:91:72:C7:7B:8F
            X509v3 Authority Key Identifier:
                keyid:26:20:2F:FE:79:95:37:E0:FC:87:B7:4A:BB:FB:4E:1A:13:67:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26202FFE799537E0FC87B74ABBFB4E1A1367F2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C02E62AF8B008606AF09BC81447C408B4AF27715B155F719C463F18470263C7E/0/323830333a666365303a3a2f33322d3438203d3e20323639393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:b7:4a:7d:3f:fd:76:fd:89:86:53:18:b4:65:eb:3e:f6:
         ad:c1:38:b1:f9:7f:b5:40:f5:a3:40:ba:ef:6b:b6:ce:e1:ab:
         14:1d:85:f9:fc:12:44:d1:3f:6a:0e:21:df:40:13:b4:25:99:
         71:42:1f:20:ab:e8:d5:2b:d6:6b:bc:c7:8c:4c:94:96:3d:9c:
         67:c7:40:fe:1b:63:0f:86:dd:8f:9d:7d:50:c2:eb:d3:cf:ea:
         ad:6e:22:53:76:43:58:8b:2e:8f:1a:c3:05:a4:36:ed:35:be:
         d0:b5:79:49:d4:b2:db:2c:ab:6b:d4:07:09:6a:35:0e:1f:1e:
         41:f6:5e:ae:5e:3d:99:05:14:b4:20:fe:b6:a8:78:f8:75:87:
         a4:e9:9d:2d:26:cb:70:ff:47:3a:ef:51:df:19:c3:05:cf:16:
         42:7f:09:ba:64:7b:0f:00:5d:c4:e3:8a:2d:bc:ad:94:0b:5d:
         fb:30:14:17:30:75:35:66:06:98:ae:d8:3d:69:9f:2e:5a:6f:
         31:7c:cd:a5:89:f9:6d:24:84:06:df:a0:5d:3c:bc:d9:9a:1f:
         24:b9:5d:ea:92:e8:43:21:4b:40:5a:85:e5:60:9f:a4:24:f4:
         10:69:62:cf:ad:34:ec:95:37:6c:d8:59:44:0d:14:1f:4e:5d:
         8f:e9:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----