Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313130303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a313130303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          Wi6mJTSpGuq2R7niHQav8uZwx7tCs+hBILelEE7iN8w=
Subject key identifier:   BD:6A:6F:E1:D5:2D:28:8D:6F:BF:49:FA:1D:67:76:C2:2E:0D:C7:74
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       7C8D12E4E802CC013E1F4FAF9B0B1CEE126A965B
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313130303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:57 +0000
ROA not before:           Tue 05 Mar 2024 17:42:57 +0000
ROA not after:            Tue 04 Mar 2025 17:47:57 +0000
asID:                     264824
IP address blocks:        2803:e360:1100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8d:12:e4:e8:02:cc:01:3e:1f:4f:af:9b:0b:1c:ee:12:6a:96:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:57 2024 GMT
            Not After : Mar  4 17:47:57 2025 GMT
        Subject: CN=BD6A6FE1D52D288D6FBF49FA1D6776C22E0DC774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:d0:9e:26:64:70:3e:fc:1a:85:88:b1:74:
                    7f:0b:3d:ea:d5:83:97:90:a8:fe:a8:5d:94:22:2b:
                    db:74:1c:b4:9d:0e:a2:ae:25:92:68:83:39:41:26:
                    07:c9:2d:1a:30:c0:ca:be:67:02:ca:e8:c1:65:cb:
                    1d:29:2f:aa:bf:57:67:83:78:8c:3b:60:6b:d9:6d:
                    51:40:b4:c3:c6:88:8b:23:d6:38:35:24:ab:d5:c2:
                    c6:74:eb:75:f5:d3:c1:28:8c:c1:0a:5d:fa:95:97:
                    20:85:ff:d7:e6:ae:86:67:a9:be:9b:fd:49:fb:2b:
                    ed:f2:14:ab:77:f2:2e:66:69:3b:17:cf:ad:63:31:
                    b1:6e:e8:4c:68:0d:2c:d7:f8:b6:71:78:f2:5a:ad:
                    6a:31:58:ba:2f:84:03:27:c9:28:4e:0b:50:8c:da:
                    d6:da:8f:e1:00:73:2f:7f:6b:46:60:94:af:14:0a:
                    b9:c9:5d:1a:a0:79:8b:26:ed:7c:22:ea:e2:41:52:
                    03:9a:c2:c0:ea:59:db:06:f3:56:95:89:e6:5e:82:
                    9d:9d:dc:af:b6:81:98:73:e0:23:e2:09:35:e6:75:
                    b6:dc:37:32:20:88:b5:65:b8:be:62:56:25:fe:9c:
                    53:a3:67:6c:5a:01:37:4c:e9:42:c7:92:92:e9:cb:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:6F:E1:D5:2D:28:8D:6F:BF:49:FA:1D:67:76:C2:2E:0D:C7:74
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a313130303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:32:2a:61:d6:b0:6a:40:1b:c3:85:89:3e:f1:d0:e6:d5:07:
         9e:20:4b:d7:7a:c1:ce:9b:78:ff:64:25:a4:58:7b:15:73:6a:
         f8:ad:5b:e8:57:95:7b:b0:4b:92:cc:58:ea:6f:55:ed:af:a6:
         8f:e0:f4:0c:47:26:56:ad:92:31:fc:d8:13:3c:8a:5b:22:5e:
         27:f5:f3:2c:00:4f:ac:4c:9d:10:d8:f7:9f:a7:3e:31:18:77:
         27:58:d1:09:e9:19:3c:d1:f0:42:bc:9f:00:74:17:7e:cc:1d:
         d5:e4:73:9c:f4:e4:ff:96:c3:9e:0f:c9:5e:4a:51:82:65:a8:
         53:eb:a9:d6:7a:11:6a:ff:c7:5e:94:ce:b8:6d:c9:a4:aa:66:
         a0:f3:50:b9:21:e8:0e:fd:f5:80:ef:f1:75:36:e6:5c:ba:3d:
         ce:2c:1d:e2:ec:f6:86:de:6f:56:07:48:41:e1:48:ee:e8:0a:
         22:1c:58:9f:3c:ab:3d:17:51:a3:e6:e8:ad:9e:9f:df:d7:2d:
         db:cc:98:19:75:30:42:27:7e:e1:29:96:a7:39:98:d2:58:6d:
         49:46:ef:0e:02:97:1a:c3:f7:91:de:f5:81:b1:a7:b4:e2:46:
         a7:9a:16:62:bf:24:1b:6c:ad:f6:28:66:09:69:72:c5:63:0c:
         99:0d:50:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----