Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3330303a3a2f34302d3430203d3e20323639373330.roa
File:                     323830333a353136303a3330303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier:          qEVWbrnf7N8tSvFYBdSiFKoqXpwAQ4lMRjoTSNsY9hE=
Subject key identifier:   4D:6E:D5:BC:F0:47:DC:BB:35:62:4F:9A:3A:30:CD:99:D3:E8:A7:77
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       03DF4C0111DF7DE0C72EA811FEF6217B245F6F7F
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3330303a3a2f34302d3430203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:04 +0000
ROA not before:           Fri 17 Jan 2025 14:40:04 +0000
ROA not after:            Fri 16 Jan 2026 14:45:04 +0000
asID:                     269730
IP address blocks:        2803:5160:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:df:4c:01:11:df:7d:e0:c7:2e:a8:11:fe:f6:21:7b:24:5f:6f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:04 2025 GMT
            Not After : Jan 16 14:45:04 2026 GMT
        Subject: CN=4D6ED5BCF047DCBB35624F9A3A30CD99D3E8A777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:a7:df:48:8d:4a:be:9b:7d:37:58:e8:3f:
                    ee:6c:b6:ea:81:e1:15:d8:13:3b:c1:7f:d8:f6:a0:
                    7e:df:2c:db:7a:0c:c0:37:f4:19:84:92:04:16:23:
                    b3:44:fe:ce:a7:b4:3d:cc:1e:bb:fa:20:d3:4a:45:
                    d5:32:fb:a2:bc:1c:fc:3b:be:e3:d2:c7:ed:ae:fe:
                    4f:43:ad:16:0a:73:52:fd:78:60:ba:4c:07:93:7e:
                    25:83:0d:8e:b2:7c:59:96:d3:d7:6b:0f:47:1a:ae:
                    99:4f:80:c3:90:82:1b:bf:b6:84:83:5d:07:52:2d:
                    a4:72:7e:3f:ea:98:4a:d6:0c:2d:b7:e9:73:32:2b:
                    2e:bd:52:6f:60:96:19:3c:43:15:e6:e8:81:66:b0:
                    00:da:66:ce:0b:26:c7:fe:12:f4:00:bc:64:45:60:
                    92:a0:94:02:95:6e:6b:b2:99:37:56:31:a5:52:6c:
                    ba:cf:10:15:5b:77:16:4b:61:d6:5e:75:89:56:e4:
                    46:2b:a2:07:65:a6:4b:2a:a9:8a:a7:62:4d:fd:3e:
                    e5:a2:1f:a8:a5:5b:0c:25:92:c6:25:4a:a9:30:65:
                    40:b8:a9:ca:37:c4:6c:99:bb:fc:ab:6f:a8:a0:24:
                    50:18:c2:5a:6a:9c:e4:68:ad:b9:5d:c0:f3:ab:22:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6E:D5:BC:F0:47:DC:BB:35:62:4F:9A:3A:30:CD:99:D3:E8:A7:77
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3330303a3a2f34302d3430203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:00:95:9a:b0:cf:56:78:c5:a0:ae:cf:b0:1c:9b:9f:28:06:
         01:8e:c4:7d:42:dd:fb:7a:40:c5:c0:44:1a:a7:a8:dd:fb:13:
         2a:13:8d:e1:09:69:2f:41:78:1c:02:2c:6c:31:63:8c:60:98:
         46:b9:51:b6:ae:0c:c5:02:09:15:fd:57:d4:bc:cd:13:3f:dc:
         6b:1a:f3:ab:58:60:c6:bc:13:cf:1d:78:89:c7:8c:c1:92:50:
         07:bd:92:5b:cc:fb:57:20:64:78:65:86:17:45:e1:d8:3d:c8:
         10:f6:4b:d5:0f:c2:d9:aa:94:f4:c7:0f:a4:cc:29:bd:c2:b7:
         2d:d3:bb:a8:b0:a6:bb:42:af:1d:46:aa:43:af:c8:a7:cb:5f:
         55:9a:94:3d:b1:40:41:d3:38:ed:97:26:ce:07:79:60:91:ef:
         74:12:6f:23:f1:64:bf:a4:c2:91:1a:3d:88:54:cb:7f:82:7e:
         11:55:c1:68:c3:ed:2c:4f:0f:e9:b3:42:f5:70:a0:90:a4:fd:
         cd:c4:d1:98:94:35:57:66:dc:d2:32:63:b7:3f:31:27:10:79:
         67:1b:b4:ce:ae:7a:5e:3f:32:e9:23:e7:c9:e0:01:c0:71:03:
         92:82:04:68:be:79:8b:e0:c7:44:4f:a5:42:b9:66:f0:e6:4a:
         4c:64:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----