Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313030303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a313030303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          W4ghySaw8zWm+e+7zG7D28HjPD6swnyT7Dm9gmwyj7o=
Subject key identifier:   CE:4F:E2:BB:F2:C2:36:AF:59:E2:86:6B:34:75:D1:27:FF:A4:CB:7A
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       1533407093881EA1E7E820DDC64125B4D79CE0A2
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313030303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:55 +0000
ROA not before:           Tue 05 Mar 2024 17:42:55 +0000
ROA not after:            Tue 04 Mar 2025 17:47:55 +0000
asID:                     264824
IP address blocks:        2803:e360:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:33:40:70:93:88:1e:a1:e7:e8:20:dd:c6:41:25:b4:d7:9c:e0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:55 2024 GMT
            Not After : Mar  4 17:47:55 2025 GMT
        Subject: CN=CE4FE2BBF2C236AF59E2866B3475D127FFA4CB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:fc:cf:15:8d:30:0a:f5:88:ac:29:05:49:
                    79:d5:f8:76:2c:ca:51:ae:1f:e7:49:5e:a4:e7:08:
                    c2:8d:82:12:c4:18:17:d4:2d:9a:b9:22:d4:2b:db:
                    4e:65:c6:65:ac:bd:6a:76:6c:32:b8:8f:60:b3:b7:
                    5b:65:1d:26:54:60:93:5d:39:77:04:52:f7:de:7e:
                    44:8c:44:43:63:0a:2b:a2:3f:8a:64:d8:63:fa:62:
                    41:5a:22:df:6b:64:52:e1:42:22:39:ae:d6:56:13:
                    ac:b8:37:ff:cd:0a:8f:ad:31:23:62:46:41:e3:02:
                    ff:5c:bf:c5:79:e3:65:80:33:aa:18:a9:21:84:87:
                    bb:50:3f:c8:d9:26:0a:58:ea:4b:ff:37:0f:24:58:
                    51:48:3d:ba:d0:1b:2d:63:69:37:ec:b2:7c:b3:d8:
                    85:d5:07:77:ab:19:d5:7d:17:7c:0c:bc:ed:62:20:
                    0e:c6:e2:b8:bb:9d:45:16:97:ea:b8:b0:f3:00:05:
                    be:bc:2e:ff:71:f4:61:55:af:9e:4b:7a:6d:55:d8:
                    ea:fe:42:5f:44:3c:62:f6:47:fd:3e:00:b2:b3:56:
                    44:52:45:5a:ce:02:b3:04:a3:75:7d:6a:0e:db:66:
                    d8:49:e4:88:f3:bc:99:0c:35:01:b1:08:92:a6:39:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4F:E2:BB:F2:C2:36:AF:59:E2:86:6B:34:75:D1:27:FF:A4:CB:7A
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313030303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:d6:89:a3:57:7b:c4:71:21:ac:27:dc:53:fb:2e:01:74:
         cc:7a:b5:2f:da:28:32:e8:6e:a9:64:78:57:bc:b8:c6:5b:ac:
         51:64:4f:6d:72:0e:ac:a0:94:07:82:15:75:d1:8a:d6:5c:0e:
         db:8d:37:50:00:4f:1c:61:01:d8:a8:a1:62:7f:7e:cc:78:69:
         dd:97:86:a2:3f:7c:79:e7:5a:e5:e6:86:32:6e:5c:af:00:47:
         ba:8b:d1:85:5f:2e:24:b7:c5:7d:b6:41:88:6e:14:f0:bc:df:
         b4:3d:32:78:62:3d:24:32:8e:d4:1a:cf:fd:da:b0:ca:c0:ea:
         56:0a:1b:ad:c7:a8:a5:a9:33:26:17:0b:8c:a4:c3:46:3b:f1:
         ee:0e:65:9a:a8:7b:64:85:e4:e7:ff:e8:5a:1b:f2:b9:91:d8:
         39:86:9e:ed:c4:29:44:bc:4b:ba:e4:ae:98:f4:09:19:3d:0f:
         8d:82:d6:69:ed:b6:5e:c7:44:49:67:1b:56:4c:6f:4b:9f:2d:
         17:9f:84:06:a0:90:d2:dc:3c:96:31:6b:01:22:27:ee:8b:9a:
         ee:49:2e:fb:0f:ed:fc:d3:aa:c9:a4:dd:cf:4a:55:f0:55:aa:
         a8:50:b5:fd:20:e7:78:2c:71:48:60:ae:8d:07:a7:32:bf:7b:
         d9:69:e1:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----