Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a613030303a3a2f33362d3336203d3e20323639373330.roa
File:                     323830333a353136303a613030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier:          y1b0dw0/T5uzJIfsbTfyU34YWsWJlJYtFfqbkjyROZo=
Subject key identifier:   64:AF:52:9E:17:91:15:E8:63:AC:E7:2E:3C:11:5F:9C:6F:65:92:A1
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       72B36D06FC7B85F50F4CDBB5E784590761381629
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a613030303a3a2f33362d3336203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:08 +0000
ROA not before:           Fri 17 Jan 2025 14:40:08 +0000
ROA not after:            Fri 16 Jan 2026 14:45:08 +0000
asID:                     269730
IP address blocks:        2803:5160:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b3:6d:06:fc:7b:85:f5:0f:4c:db:b5:e7:84:59:07:61:38:16:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:08 2025 GMT
            Not After : Jan 16 14:45:08 2026 GMT
        Subject: CN=64AF529E179115E863ACE72E3C115F9C6F6592A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:24:d6:ef:2c:52:e4:27:46:84:26:ae:c8:
                    03:91:e5:7c:38:9b:76:e0:e8:cf:3a:27:31:b4:9c:
                    f3:ee:c3:3a:c8:61:60:75:a8:5f:46:c2:a4:eb:6c:
                    e3:05:76:c7:f9:8f:96:bf:13:49:28:6d:bd:68:35:
                    11:a9:d1:85:7a:2c:be:8e:e0:29:a9:27:33:24:24:
                    a8:cb:67:36:71:40:a8:44:13:90:7f:df:04:0e:96:
                    9a:64:ab:b2:ab:9c:28:2b:d0:c8:5e:3f:60:93:ca:
                    21:ef:84:32:c9:a5:26:b0:a0:68:0d:a9:6e:b6:3b:
                    79:e6:f5:ee:98:ab:ea:46:f4:49:b3:c9:c3:90:20:
                    57:f7:c1:c6:33:28:42:98:61:3d:2a:71:9c:f2:7d:
                    6f:21:1d:5c:74:45:2a:1b:a5:3e:83:c0:ad:2d:cf:
                    7d:31:f7:2b:fa:ad:3b:89:d6:14:6f:d7:65:bb:4d:
                    0f:ba:1d:29:6e:96:d0:e3:b9:96:a6:b6:20:c9:05:
                    13:e0:75:5e:98:ac:98:4c:9a:b4:ff:99:e0:1f:d3:
                    5e:10:f1:d8:3a:4a:eb:3c:38:bc:f1:46:07:b0:e1:
                    63:81:48:c4:6a:56:b9:4f:42:5b:2b:5e:c2:a3:f7:
                    ea:0a:b1:d7:e8:1e:18:fb:4d:91:bb:b0:36:15:a8:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AF:52:9E:17:91:15:E8:63:AC:E7:2E:3C:11:5F:9C:6F:65:92:A1
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a613030303a3a2f33362d3336203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b5:0b:30:c8:8a:50:11:89:d6:9b:a0:a5:ae:39:9d:7c:d7:b0:
         b4:7c:d2:af:76:5b:99:c1:fb:60:de:83:da:56:f5:5b:fc:9b:
         a9:c2:93:7f:17:4b:6c:db:5b:ca:cb:65:68:23:89:ab:1e:04:
         40:15:c1:14:43:97:cd:33:6e:0f:3d:c4:49:7c:bd:8f:a5:4f:
         86:c3:5d:d5:10:72:e9:4c:46:0b:b5:96:53:ef:4c:53:7a:4a:
         0e:91:0b:fc:a6:d9:d5:0c:f3:92:94:70:2e:78:79:55:45:64:
         dc:3d:8a:cb:d1:92:50:dc:9b:86:91:01:5d:8a:59:e4:85:4a:
         5d:19:8f:84:6c:76:b9:ef:28:a9:8e:3b:eb:32:cc:74:03:18:
         17:c5:5a:b7:be:3d:49:03:6e:5f:e4:da:44:51:76:1c:b4:45:
         89:f3:60:47:5e:6d:0d:99:a0:21:4c:c3:a6:ae:f2:9f:d4:56:
         f2:11:37:72:3a:20:cc:53:dc:71:4d:82:e8:4a:0a:9e:62:14:
         6b:3d:a5:e7:41:55:63:99:e7:08:1c:ca:cb:91:c5:28:72:d3:
         be:a9:b3:2b:81:29:c0:9a:5e:f1:f0:19:30:4e:dd:fd:55:77:
         0a:24:15:73:5a:5b:47:fc:d3:1c:88:8e:d5:e2:c3:48:44:f0:
         5f:98:ca:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----