Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          no/40/0ynzdHPZVB7u9xy8SMJNsAbcdZcZWqRCGX7yU=
Subject key identifier:   92:0F:4E:FA:07:87:72:00:2F:D6:59:B2:5E:FB:93:B1:DC:BE:CA:4E
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       2742AF3AF22CBE948B4D2D4D57FE0B06F5A25D89
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:56 +0000
ROA not before:           Tue 05 Mar 2024 17:42:56 +0000
ROA not after:            Tue 04 Mar 2025 17:47:56 +0000
asID:                     264824
IP address blocks:        2803:e360:f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:42:af:3a:f2:2c:be:94:8b:4d:2d:4d:57:fe:0b:06:f5:a2:5d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:56 2024 GMT
            Not After : Mar  4 17:47:56 2025 GMT
        Subject: CN=920F4EFA078772002FD659B25EFB93B1DCBECA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:d4:2e:86:82:cf:b2:41:3e:dc:3f:64:60:
                    4c:9c:a1:c2:b7:73:98:97:e2:7c:25:c5:eb:1c:2d:
                    99:5a:4e:46:af:25:93:eb:d6:71:fc:bf:7a:a8:3f:
                    0b:6e:f8:ca:a1:7b:eb:05:3d:40:2a:fb:ff:a2:c9:
                    2d:1c:76:cb:d5:09:8a:eb:3b:66:c2:2f:db:8c:e2:
                    22:6a:f8:ea:03:e1:ee:62:bb:30:33:94:72:c0:ce:
                    0f:01:a0:06:b8:09:20:bb:69:c5:9a:75:64:16:0a:
                    a1:ef:a2:ef:0b:bf:30:c6:6c:a1:eb:fe:20:be:16:
                    7f:e8:07:92:bd:b2:db:ec:30:0c:96:a7:28:18:ec:
                    7c:7e:a8:42:28:f8:7f:c6:d7:ab:26:35:de:40:10:
                    5e:01:c6:7f:1a:f0:7d:05:ab:d6:25:e4:1d:98:ed:
                    80:1f:87:ce:c8:2a:93:be:5e:db:e3:0f:0c:d7:f5:
                    a7:44:cf:1d:c2:75:54:c1:12:29:12:40:6a:37:80:
                    27:9c:a4:fe:0a:d4:a7:3d:fb:55:45:bf:d0:2b:f8:
                    32:f5:cd:91:9f:56:55:3c:af:15:03:c6:ca:8d:60:
                    4c:d2:91:c4:44:36:8b:32:f0:26:76:03:dd:6f:dc:
                    e3:2c:d0:f6:09:29:f1:e7:7e:bf:84:a4:8f:33:ca:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0F:4E:FA:07:87:72:00:2F:D6:59:B2:5E:FB:93:B1:DC:BE:CA:4E
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a6630303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:96:7f:f7:61:6e:b5:a7:18:3c:2b:99:d4:47:cc:d8:d4:ac:
         03:b2:64:6f:3d:2d:49:66:0d:fc:f1:61:ae:7a:c2:78:4e:33:
         61:8b:f0:2e:48:eb:45:87:e1:1f:c8:c4:bb:ac:b9:25:fc:63:
         8b:af:1f:14:fe:3a:d3:36:f9:31:2c:32:86:f9:94:02:a5:a4:
         ec:f1:70:0a:0b:40:7b:90:27:45:a8:6e:06:3d:56:2a:65:50:
         39:90:b9:0a:5f:2a:9d:b7:ac:b8:de:eb:74:a2:14:7c:c1:35:
         82:47:9a:31:52:86:d6:e6:1f:de:48:66:e8:73:18:9d:06:bb:
         13:a8:70:db:d7:f1:b9:41:e5:19:f0:04:7e:71:d5:ae:87:f2:
         99:77:0c:73:3a:08:30:c9:88:d2:21:6a:6b:1a:8a:50:99:59:
         2a:c5:3d:15:14:ab:0a:f4:25:99:28:40:8d:e3:cb:a9:ec:29:
         fd:5a:88:32:4d:8b:f1:8c:86:89:3c:0e:7c:fa:dd:e5:24:b1:
         e5:f6:94:5c:33:1d:83:cc:c5:d1:ca:b6:d8:01:97:66:9d:0a:
         b3:6b:11:fe:aa:31:48:12:0f:e6:ff:09:4f:9f:a7:f8:7b:e4:
         46:c9:a8:39:0e:e7:70:89:cb:6e:d8:b9:d6:3a:96:9b:76:6b:
         cf:7d:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----