Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6330303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a6330303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          ViTOpsL2lR38CyZTZWa1puy43G64JO9BWSq0WZSlxXw=
Subject key identifier:   4C:BC:02:CC:8E:E1:43:98:85:5F:1B:25:62:76:73:6A:62:97:62:E9
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       67B584A0D414030AB3C9620D81A01EF4F2CC2B12
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6330303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:59 +0000
ROA not before:           Tue 05 Mar 2024 17:42:59 +0000
ROA not after:            Tue 04 Mar 2025 17:47:59 +0000
asID:                     264824
IP address blocks:        2803:e360:c00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b5:84:a0:d4:14:03:0a:b3:c9:62:0d:81:a0:1e:f4:f2:cc:2b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:59 2024 GMT
            Not After : Mar  4 17:47:59 2025 GMT
        Subject: CN=4CBC02CC8EE14398855F1B256276736A629762E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:b9:dd:03:8d:e6:66:7b:b8:63:49:ae:e3:
                    a9:2e:e7:aa:7f:fd:6e:42:0e:ee:87:1b:75:bd:9d:
                    c9:40:30:3a:1a:b5:e5:a0:3d:73:9c:a5:29:c3:0d:
                    c9:6f:2b:11:c7:4e:a1:3a:68:65:c3:49:6e:ad:98:
                    99:14:7c:57:93:45:b0:b1:e8:07:8c:62:14:3c:e5:
                    c4:84:41:9a:c9:c9:34:ef:c9:5a:6e:1c:c6:a7:bd:
                    47:d8:56:4b:0f:3a:53:a4:5d:e9:46:2f:96:a2:dc:
                    fa:79:73:d9:f6:22:b5:8b:6b:1d:5e:50:0a:34:28:
                    44:49:8d:c3:d2:03:fa:5a:29:56:96:e0:13:a4:21:
                    eb:e5:6c:46:d0:87:a6:38:b6:6d:4e:66:45:8c:51:
                    19:57:f8:4c:a7:ff:80:a9:af:32:cf:b3:3b:d4:09:
                    37:8f:2c:b0:05:4f:fc:03:f9:b5:06:19:fc:5f:60:
                    15:77:9d:72:47:2f:03:cb:01:73:5a:b2:50:fd:5e:
                    68:f5:30:2c:e5:f3:62:fd:36:8b:6a:92:26:f4:10:
                    76:e6:83:db:ef:b5:02:d9:d5:14:2c:1d:31:e0:d3:
                    9e:04:09:85:35:37:d5:e1:d7:cf:b6:4d:73:57:85:
                    e7:bf:2d:d4:b3:14:bc:16:64:21:a0:bc:05:71:d1:
                    02:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BC:02:CC:8E:E1:43:98:85:5F:1B:25:62:76:73:6A:62:97:62:E9
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6330303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:2c:97:59:31:8a:73:6e:07:da:7f:9f:c6:c2:47:4f:8f:
         c8:8f:3e:94:97:98:89:59:e7:dd:b5:ba:e6:29:8a:e1:4c:f3:
         ec:ef:a4:29:0e:17:e6:34:64:6b:bc:8c:d6:51:24:f8:b3:3a:
         05:2b:16:ba:c7:cb:2d:8e:d6:5f:68:4d:e2:4c:10:87:11:d9:
         ce:02:6c:43:5e:93:bb:71:57:4f:73:82:fb:e6:80:0a:97:2d:
         21:35:fd:9b:51:47:1a:79:11:11:de:a8:47:48:2f:cb:eb:7a:
         5d:bd:0f:73:bb:f8:c3:2c:f0:b0:ed:da:5f:be:2c:56:5a:ed:
         e8:20:d1:f2:d3:6e:63:55:08:21:08:11:29:ce:25:8a:5a:7a:
         8e:97:3e:84:3a:55:d2:7c:a0:c7:3f:c0:b4:76:67:47:14:07:
         17:68:80:a0:6d:ab:b7:09:e2:a8:20:cc:b0:83:a7:21:c8:7f:
         1a:b7:80:e7:c1:e7:82:4e:64:f9:93:85:71:ce:7c:02:fa:7a:
         b9:2c:63:c2:d4:6e:82:88:a9:55:c8:42:3e:db:8d:c3:18:b8:
         67:9c:4c:c9:d4:21:5d:28:c7:6a:2c:e9:c6:ef:30:31:cd:d1:
         14:32:c7:06:24:68:62:58:37:33:37:0e:0c:b6:18:8b:a6:88:
         f7:8b:48:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----