Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa
File:                     323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa (raw, json)
Hash identifier:          TyX53fWv48tmf8MiS5b6AHfR3FXhppAgiN7O8TCyZVs=
Subject key identifier:   6E:31:58:E5:C2:CB:1A:E9:B4:89:63:99:1C:F6:10:0D:CE:9A:BA:93
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       2BF435EE17667AFE6E63C22BA51ECF5902C3159E
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa
Signing time:             Tue 19 Mar 2024 18:00:00 +0000
ROA not before:           Tue 19 Mar 2024 17:55:00 +0000
ROA not after:            Tue 18 Mar 2025 18:00:00 +0000
asID:                     266790
IP address blocks:        2803:a0a0:500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f4:35:ee:17:66:7a:fe:6e:63:c2:2b:a5:1e:cf:59:02:c3:15:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Mar 19 17:55:00 2024 GMT
            Not After : Mar 18 18:00:00 2025 GMT
        Subject: CN=6E3158E5C2CB1AE9B48963991CF6100DCE9ABA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:0b:e6:0e:64:89:54:4e:86:52:9e:d2:38:
                    42:52:69:d4:3e:b3:e9:f0:97:16:ca:84:8e:81:f5:
                    2b:08:27:26:ac:9d:35:92:24:58:c1:f7:91:df:d9:
                    9c:03:03:90:6e:7d:72:a2:01:a9:1a:6b:03:ed:03:
                    11:cc:b1:81:60:88:a6:b0:e5:67:b9:64:b6:d9:f5:
                    cd:d2:bc:57:9c:dd:94:93:09:d7:f3:ef:5a:62:dc:
                    78:09:80:85:79:a7:70:8b:19:df:e4:21:c1:f7:34:
                    85:48:54:08:93:52:2b:80:95:cf:4c:f3:3b:9a:55:
                    2e:b2:64:90:a3:e0:8e:9a:71:c9:06:98:5d:b4:cf:
                    02:f1:18:6e:0a:00:35:98:e8:96:f3:5b:a2:b5:aa:
                    70:d7:b5:cc:11:ed:89:d2:ea:03:91:6d:68:4d:e6:
                    07:eb:4b:eb:83:f8:65:4b:68:8c:8d:e1:71:81:73:
                    2f:6c:7e:43:0c:f3:d6:db:b9:09:db:cd:65:91:89:
                    3e:5d:99:bc:f1:bf:01:c1:a7:3b:97:5a:83:21:75:
                    bc:bb:a4:06:41:92:cc:7e:26:66:15:3d:bb:29:2a:
                    43:0b:cb:61:3c:15:43:34:29:d5:9d:c9:4f:99:88:
                    0b:cb:a7:8d:b3:67:79:5c:93:62:98:df:ce:19:50:
                    ae:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:31:58:E5:C2:CB:1A:E9:B4:89:63:99:1C:F6:10:0D:CE:9A:BA:93
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/323830333a613061303a3530303a3a2f34302d3430203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0a0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:24:b3:cf:20:25:4f:11:39:d9:16:e5:e7:a7:30:19:af:cf:
         b9:54:dc:be:80:df:fb:56:43:7a:1e:4f:d7:8f:58:5c:72:57:
         1d:99:34:e2:74:44:e6:9f:c9:ab:3f:59:07:e3:2b:13:dd:bb:
         84:04:0a:0a:75:e5:e4:64:f2:4a:6f:b8:54:b1:b0:af:05:0d:
         f4:69:8a:df:cc:c9:95:7e:d0:87:af:6b:46:44:fb:e3:35:cd:
         40:a7:90:7f:78:7e:c2:b1:e9:96:bc:42:88:b8:69:64:de:47:
         8c:ff:0e:83:38:be:bf:cd:e0:8d:80:57:b6:67:39:9b:df:89:
         d2:a4:d6:7b:5d:f0:de:97:ca:5a:2f:79:e4:d4:f9:89:a6:c2:
         13:c1:80:f9:9a:1f:df:01:53:26:f4:53:f8:10:72:1b:46:2b:
         5f:60:92:66:3d:f7:b5:d8:00:87:bd:fe:4b:7c:5c:d1:40:01:
         7f:87:e1:b9:11:d6:35:97:13:a2:7d:a8:1c:63:12:79:22:28:
         84:d4:b4:29:96:de:c8:30:e7:e2:d1:ea:3c:c6:1a:f3:b2:56:
         fc:84:83:aa:cc:f6:84:0a:e7:84:3c:f2:90:dd:cf:b5:ed:77:
         d0:b3:eb:1b:7c:68:9f:b4:32:16:53:09:31:35:f8:62:d2:7c:
         51:45:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----