Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a363030303a3a2f33362d3336203d3e20323639373330.roa
File:                     323830333a353136303a363030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier:          FEZiTtFgaQCc8LQ6fYlAVg+sOXlOki8aTd5wAP8CqMk=
Subject key identifier:   07:9B:C9:CE:E8:0F:24:BF:E5:00:D2:20:53:AF:19:83:B8:FC:60:88
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       169D0F0A665EE3417CC8EA97EE914D6EA7F2F2CA
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a363030303a3a2f33362d3336203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:09 +0000
ROA not before:           Fri 17 Jan 2025 14:40:09 +0000
ROA not after:            Fri 16 Jan 2026 14:45:09 +0000
asID:                     269730
IP address blocks:        2803:5160:6000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9d:0f:0a:66:5e:e3:41:7c:c8:ea:97:ee:91:4d:6e:a7:f2:f2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:09 2025 GMT
            Not After : Jan 16 14:45:09 2026 GMT
        Subject: CN=079BC9CEE80F24BFE500D22053AF1983B8FC6088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:57:1d:3c:8a:54:f9:bc:f0:73:e7:05:8a:
                    ed:9a:e1:b9:c3:86:2b:1c:d8:ed:ab:ed:00:d6:e6:
                    c0:e7:ab:28:03:be:d2:12:07:dd:35:fe:5d:c3:73:
                    92:43:4d:56:1b:0c:7e:11:9c:ee:81:37:65:c5:4a:
                    e4:5b:73:89:12:04:74:53:70:2c:78:c2:96:09:15:
                    40:b0:c0:68:8e:ca:2e:23:21:9b:8c:9c:1b:75:8f:
                    4a:fa:15:da:51:38:74:6b:87:9b:81:d7:84:1e:50:
                    fa:16:a8:18:5a:62:ec:e8:81:6b:09:1e:0b:11:54:
                    03:78:29:d3:7c:9b:43:ee:91:74:9b:e5:54:a8:29:
                    3b:df:b5:c0:de:69:87:e5:95:5e:40:42:4b:dd:da:
                    7c:9d:7b:63:55:9d:13:1a:93:e9:e1:8e:f6:7f:5c:
                    16:21:10:cd:4b:45:22:da:19:ec:3c:a4:2a:f7:97:
                    e5:2c:1f:4c:9c:cc:ed:53:8e:de:8a:d0:2f:42:18:
                    fd:2d:0a:bb:0a:08:36:e6:b9:b8:21:4e:8d:33:0f:
                    75:66:15:8d:b9:d3:f6:4f:3d:37:50:d4:4f:5c:2c:
                    bf:53:28:4c:5e:8e:3f:34:42:f5:7a:d9:33:94:dd:
                    ad:15:2a:57:72:d6:80:b5:35:35:64:63:c5:73:4c:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9B:C9:CE:E8:0F:24:BF:E5:00:D2:20:53:AF:19:83:B8:FC:60:88
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a363030303a3a2f33362d3336203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:21:30:18:f9:95:1a:2a:6a:19:8a:1e:d7:21:da:3e:a4:
         71:df:31:8d:33:21:5c:9c:23:e9:dc:a0:b3:e3:25:41:64:6c:
         54:64:bf:c7:5f:e9:3c:55:41:43:a6:83:43:f7:58:9a:fb:a0:
         0a:d1:51:3c:44:00:2c:36:e8:7c:23:22:06:92:be:49:31:60:
         fd:c0:59:a3:15:35:da:7d:85:d4:29:8b:80:ed:08:57:66:fa:
         0b:3a:32:d6:f4:cb:4a:30:19:a1:a5:d4:63:ad:eb:74:d1:8a:
         11:36:6b:ba:43:6b:2f:8f:1f:d7:90:b6:22:55:17:57:ab:e8:
         91:82:1d:6d:c3:52:33:4b:0b:50:ad:fb:1b:75:d4:eb:60:72:
         e9:99:30:63:16:bb:81:9d:6b:b4:5c:90:1a:75:59:a1:ba:58:
         a1:d9:77:c7:6a:e9:68:3c:42:d3:52:af:3e:8a:9e:9d:59:b2:
         33:c4:0f:c0:65:ad:68:49:1d:7c:77:d9:c8:4a:1f:50:01:39:
         f3:91:cc:32:75:b6:8b:3f:ea:3c:45:08:d8:90:fe:00:48:05:
         42:78:a8:90:90:6b:b0:3f:d6:20:b1:4d:e0:c7:fc:ef:29:93:
         e2:fb:ff:2a:e5:64:a0:04:f8:04:f6:8c:36:99:84:ba:2c:18:
         35:52:9c:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----