Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531303a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346531303a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          KAzYx05wEgg+SdR1gIpsWBg6OUZURjveaPtWSxYhPlg=
Subject key identifier:   1C:95:AD:92:0B:23:81:A1:5F:A4:FF:40:38:EA:BE:BD:7F:D0:D8:F0
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       31527066CF3B7C8C124DD3A00C454C2955AAE647
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531303a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:29 +0000
ROA not before:           Tue 05 Mar 2024 17:59:29 +0000
ROA not after:            Tue 04 Mar 2025 18:04:29 +0000
asID:                     267848
IP address blocks:        2800:be0:4e10::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:52:70:66:cf:3b:7c:8c:12:4d:d3:a0:0c:45:4c:29:55:aa:e6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:29 2024 GMT
            Not After : Mar  4 18:04:29 2025 GMT
        Subject: CN=1C95AD920B2381A15FA4FF4038EABEBD7FD0D8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:6d:94:91:d9:cb:5d:0d:40:65:ec:98:e8:
                    fe:e0:d5:58:54:b4:88:72:9a:cd:5f:5b:ff:cf:a8:
                    3d:d3:fa:66:3d:bb:71:e9:2b:12:1c:6f:23:6b:fb:
                    44:af:bd:86:ba:22:c6:20:aa:c8:4a:e7:0d:9d:7b:
                    4c:c1:0f:70:6b:16:7b:91:e9:df:ed:5c:1f:bc:80:
                    2c:6a:59:12:a7:fc:fd:71:c5:63:74:1e:11:fc:67:
                    d1:8d:09:65:a0:d4:6b:21:56:e6:95:ea:98:d9:50:
                    86:48:93:89:85:9e:e5:f6:9a:1c:86:36:bc:9c:ed:
                    84:e0:e9:a0:75:f7:a6:24:a9:ad:34:79:17:55:9e:
                    72:d4:da:17:73:23:d0:a6:61:e7:c6:dd:02:64:68:
                    23:cb:31:5d:56:f0:8a:93:3a:04:f2:e9:31:5e:c5:
                    fa:9f:f8:ef:74:3f:e2:9f:0c:54:ea:87:cb:07:3a:
                    e8:90:9b:98:d8:d8:5d:84:7a:b1:bb:4a:d9:9f:7b:
                    06:63:c5:0c:ed:ce:d7:6f:47:2f:4d:8f:28:24:c8:
                    06:cb:12:11:7c:2f:fc:ec:da:c4:6f:5b:22:6b:34:
                    9e:b5:5e:1b:4f:4a:d9:0f:4f:d2:de:cc:d9:5b:18:
                    77:11:9b:4a:9d:a2:bd:6a:23:3e:7a:d6:88:9d:18:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:95:AD:92:0B:23:81:A1:5F:A4:FF:40:38:EA:BE:BD:7F:D0:D8:F0
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346531303a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e10::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:6d:38:d0:4d:28:61:73:f1:0f:ca:a4:40:aa:30:06:39:15:
         0d:a4:76:2f:96:94:06:86:ae:c4:2b:05:39:db:82:09:ca:31:
         db:e7:84:af:b9:ac:e1:5b:df:83:36:14:46:01:34:99:46:06:
         77:77:ce:5a:09:3d:aa:96:f9:58:1c:eb:ea:ad:e3:67:88:33:
         65:c1:84:fb:75:95:21:66:a4:bc:82:81:93:53:e6:c5:32:23:
         ff:63:59:4a:52:4a:67:17:1d:91:6c:a5:64:0c:51:eb:6a:35:
         4f:f3:3d:fb:b2:7f:d3:dc:c5:f7:5a:d1:bc:6d:3b:e1:df:d6:
         22:64:ca:37:c7:52:75:d2:69:76:7e:1d:11:cc:2a:d2:83:10:
         4c:44:ca:1d:28:f9:b4:49:fd:19:29:63:ee:16:77:cc:67:7c:
         4f:ed:d4:5e:f0:d3:5a:64:49:9f:17:7b:a9:10:62:66:55:71:
         a0:d6:fb:b6:6d:8d:66:5e:9d:70:4d:43:da:07:49:da:b0:66:
         4f:4e:78:a2:09:a9:a5:94:7b:3a:36:83:cd:85:4a:0f:be:91:
         6b:f9:47:49:f6:68:3c:f0:e6:f8:04:4f:a2:04:5e:f8:58:b5:
         22:96:10:a4:14:9e:a6:69:52:a5:9b:fe:3f:0b:bf:7a:7e:b6:
         4c:7f:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----