Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34302d3430203d3e20323639373330.roa
File:                     323830333a353136303a3630303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier:          510b8N//RvWRnVvFps2fBzQbbOpQ+Dpw6TWacKsu9wc=
Subject key identifier:   D0:7E:5B:57:82:8E:E4:58:DB:CF:34:AA:51:18:23:AB:20:ED:AB:71
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       3AE47EE5741F9976C22D469A3B3139C12E36E673
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34302d3430203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:03 +0000
ROA not before:           Fri 17 Jan 2025 14:40:03 +0000
ROA not after:            Fri 16 Jan 2026 14:45:03 +0000
asID:                     269730
IP address blocks:        2803:5160:600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e4:7e:e5:74:1f:99:76:c2:2d:46:9a:3b:31:39:c1:2e:36:e6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:03 2025 GMT
            Not After : Jan 16 14:45:03 2026 GMT
        Subject: CN=D07E5B57828EE458DBCF34AA511823AB20EDAB71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:07:87:01:01:f0:a7:5e:ce:82:96:64:f4:
                    4c:05:af:c6:c7:f6:42:0e:94:fc:8c:03:28:0f:93:
                    e2:d8:ac:07:e8:05:11:f6:1a:bf:90:5f:8a:58:4e:
                    2b:50:13:bc:e7:83:a3:ca:7c:20:61:bd:dc:f3:f4:
                    2c:d2:a5:14:73:88:df:39:8a:02:da:17:70:55:5c:
                    c1:33:65:71:8f:27:b1:97:9d:df:12:48:4f:99:f0:
                    6c:45:15:76:55:86:06:59:e1:fb:34:12:3e:b6:58:
                    b3:a2:ff:cf:9f:56:47:e6:e3:d9:5c:03:8d:4f:8c:
                    28:c2:3e:72:49:49:7d:16:ef:59:16:1d:55:e4:67:
                    06:35:13:b6:fd:d7:a4:b6:97:fa:3e:28:cc:c8:cb:
                    90:3e:92:5f:cc:ec:10:10:e6:02:d7:ff:33:19:21:
                    e5:64:6d:c5:0d:8c:c1:d5:6e:6c:8b:a0:6f:85:c5:
                    80:d5:a5:5a:56:cc:dc:69:c9:ac:c3:20:4a:ff:92:
                    4d:bf:7c:52:a6:ef:f0:4b:bb:8c:64:bb:fb:4c:3c:
                    08:5e:94:54:b4:a5:b8:4c:1a:47:bc:ba:b0:0e:fc:
                    8b:b4:ae:db:60:98:82:fb:1d:ea:93:cf:50:e3:35:
                    47:55:5a:a4:e9:02:a8:1e:96:99:2a:cc:ff:14:ee:
                    3f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7E:5B:57:82:8E:E4:58:DB:CF:34:AA:51:18:23:AB:20:ED:AB:71
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3630303a3a2f34302d3430203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:a6:49:79:14:c3:20:3a:e5:d5:d3:f4:ac:94:aa:ac:7c:fd:
         36:9f:9a:70:82:31:92:20:06:a6:fe:f8:f0:d9:cd:c5:22:04:
         a5:a1:fc:2e:53:66:e7:0a:c8:0d:9b:70:86:41:fb:16:04:a2:
         2d:f0:3a:3b:26:85:1b:ab:6c:03:93:f4:d8:08:16:1b:f8:52:
         e9:ee:e9:35:b3:09:65:6e:d8:11:56:81:d1:c6:c3:62:18:ac:
         61:5a:4b:69:cd:a0:9f:db:dd:4e:26:15:96:a5:87:3c:f2:2b:
         bd:55:90:24:1b:41:1d:b7:c4:7c:c7:99:27:2e:e7:08:c9:74:
         a8:0c:69:f0:60:bf:a9:a9:3c:47:f4:1f:03:df:37:c6:28:97:
         eb:82:cb:aa:94:e5:28:8c:83:a8:f5:b2:44:a0:e5:ad:e6:bc:
         a2:33:64:33:57:cf:dc:ee:0f:b6:13:16:75:d0:91:e8:80:99:
         9b:3b:5f:12:31:00:fd:c6:e2:80:5d:71:9a:b9:55:07:d1:74:
         e6:68:1e:52:49:bb:0c:f3:27:9e:ca:34:8e:db:8b:60:eb:ef:
         d4:14:be:30:72:56:42:e3:4a:f8:f4:4c:75:32:ce:29:e3:d1:
         f4:76:2b:75:64:b3:84:96:f0:ae:63:2a:e8:90:72:27:a6:f3:
         d0:4d:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----