Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/323830303a3939303a3a2f33322d3332203d3e20323632313637.roa
File:                     323830303a3939303a3a2f33322d3332203d3e20323632313637.roa (raw, json)
Hash identifier:          wf7vwo9D7WQ/nR7IM7RddPSwwZYqwzd6jHDEaG5oJxg=
Subject key identifier:   E7:C1:6E:19:87:46:C7:ED:51:EA:0C:C5:83:08:94:AB:D0:EA:8F:19
Certificate issuer:       /CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
Certificate serial:       03F42F3ECCD88877E508A5865E8C2CEC27E5E75E
Authority key identifier: 2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/323830303a3939303a3a2f33322d3332203d3e20323632313637.roa
Signing time:             Tue 05 Mar 2024 17:44:41 +0000
ROA not before:           Tue 05 Mar 2024 17:39:41 +0000
ROA not after:            Tue 04 Mar 2025 17:44:41 +0000
asID:                     262167
IP address blocks:        2800:990::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f4:2f:3e:cc:d8:88:77:e5:08:a5:86:5e:8c:2c:ec:27:e5:e7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20
        Validity
            Not Before: Mar  5 17:39:41 2024 GMT
            Not After : Mar  4 17:44:41 2025 GMT
        Subject: CN=E7C16E198746C7ED51EA0CC5830894ABD0EA8F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:10:5b:52:f7:5c:1a:a9:b6:e8:d7:73:5e:
                    2e:e0:21:6e:81:7d:b4:a3:a1:23:e1:9f:eb:60:b9:
                    76:7b:b5:0d:cc:f5:65:f4:d6:d9:c8:ec:f1:fd:ac:
                    79:77:74:0c:6e:b9:5d:2a:5e:f7:0c:4d:8c:5f:fd:
                    2c:1f:be:58:93:73:b8:44:ca:f6:5d:2c:d6:a3:60:
                    f1:16:75:bd:a8:b7:9a:17:d9:07:1e:68:d4:81:40:
                    d6:bb:34:70:03:d7:be:9e:40:91:c5:df:f8:3a:c4:
                    66:35:22:03:88:29:6d:2e:91:dc:f1:0b:95:a2:eb:
                    83:24:ed:a2:4d:48:7b:f8:ff:7d:8b:8f:c3:44:45:
                    69:de:79:1f:fb:97:2f:e2:12:a9:97:17:e0:cc:94:
                    79:11:93:53:05:21:a3:be:e1:d1:bf:55:ae:4f:d8:
                    5c:a5:d3:ca:01:47:ba:a2:1d:8c:32:48:39:d9:58:
                    5b:14:9d:06:d4:99:5b:9e:04:6d:22:45:b2:2e:20:
                    53:bb:78:81:6b:c1:d8:bf:8f:4f:75:df:a2:f8:06:
                    ba:23:bb:dc:6e:75:e7:75:33:0b:99:81:1d:0a:39:
                    9d:aa:83:2b:27:1a:33:5a:43:e4:98:85:89:dd:9b:
                    71:ab:23:6f:e4:0e:dc:92:d0:7a:f9:56:a6:21:79:
                    f6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C1:6E:19:87:46:C7:ED:51:EA:0C:C5:83:08:94:AB:D0:EA:8F:19
            X509v3 Authority Key Identifier:
                keyid:2E:02:EC:6D:1E:EE:7A:D7:8F:5B:8F:7C:6C:8B:79:9A:66:B4:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E02EC6D1EEE7AD78F5B8F7C6C8B799A66B4CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3BD945811064E6687D8AD0DE50E9D5CDD15FF600EAD81E29F625439335C1360/0/323830303a3939303a3a2f33322d3332203d3e20323632313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:990::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:90:01:7a:27:d3:ac:4d:a1:89:e6:79:92:e6:8c:21:61:b4:
         26:b5:f1:e0:fc:68:da:76:11:64:c1:f1:e3:3e:e7:7e:5d:64:
         7b:8d:cc:1f:2a:4c:dc:ac:40:ba:f7:37:04:01:5d:7b:34:b5:
         73:71:92:57:24:39:64:c8:cc:84:02:75:8c:62:a8:4c:05:76:
         ab:06:8f:ed:17:18:af:c9:1a:ea:e4:60:e5:ef:b9:89:52:a1:
         48:72:51:bc:e9:6d:1d:83:5b:c3:eb:52:e3:3f:e3:4a:88:c7:
         44:7d:f8:c0:e3:89:61:f3:20:3a:33:c7:bc:d6:8d:ba:c8:d9:
         e1:17:42:b0:df:b2:67:fd:2f:3a:03:0c:a8:fb:36:ab:25:07:
         0a:3d:6c:63:eb:8f:57:f3:d8:d2:ea:66:5c:c8:d6:58:d8:74:
         e2:f7:92:d9:b8:b8:b9:9b:b5:c5:20:8e:a9:0c:9a:d7:ec:de:
         cf:16:68:9e:f3:b5:13:29:bd:2e:4e:e8:16:aa:2f:a2:af:b5:
         36:f8:ce:8d:f5:c4:2e:e8:45:9e:4d:05:5b:4f:82:23:1e:26:
         6c:60:55:f7:56:fc:5e:aa:ea:25:a0:34:48:30:fe:64:e4:6e:
         96:1f:00:dc:e8:3d:87:d2:06:f3:da:01:d7:07:89:3e:f1:b4:
         36:ad:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----