Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465313a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a3465313a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          FJ+8r1OpLdNNpe8lvEl1HDoO7eYLMBbQPM6jVlHPVH8=
Subject key identifier:   7B:0A:4E:1E:5D:73:44:E8:9B:C8:D6:5B:EC:E8:4E:2D:69:69:09:88
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       63414C9625CCABC4FE0BC2D7A26CA303A323AD63
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465313a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:27 +0000
ROA not before:           Tue 05 Mar 2024 17:59:27 +0000
ROA not after:            Tue 04 Mar 2025 18:04:27 +0000
asID:                     267848
IP address blocks:        2800:be0:4e1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:41:4c:96:25:cc:ab:c4:fe:0b:c2:d7:a2:6c:a3:03:a3:23:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:27 2024 GMT
            Not After : Mar  4 18:04:27 2025 GMT
        Subject: CN=7B0A4E1E5D7344E89BC8D65BECE84E2D69690988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:85:b6:8a:06:d9:54:d1:02:99:9d:1a:d7:
                    a7:5d:09:e9:73:3b:7f:7c:ba:12:42:2d:fd:67:7d:
                    06:14:14:b3:ea:67:4b:56:6a:62:59:a1:e4:f9:9d:
                    2a:53:33:70:50:bb:71:66:b6:74:51:5a:9d:70:2c:
                    18:fc:82:84:e7:8c:35:12:f0:7f:f0:aa:4b:44:6d:
                    93:22:d0:27:cd:bc:6a:0a:c9:21:43:71:99:f2:6c:
                    08:c3:46:f3:1a:d5:07:3f:cf:fc:bc:da:81:a1:a2:
                    ad:f8:83:02:54:22:a7:64:cd:c3:06:e6:ca:98:a5:
                    67:34:66:d2:f7:5a:6d:56:69:4c:3f:05:e8:eb:ad:
                    96:8b:36:b9:47:39:50:65:b3:57:79:2f:bb:a8:cf:
                    fb:f3:ce:3c:dd:7a:40:db:51:6e:10:d7:28:49:7c:
                    5d:24:7e:67:ca:0b:ff:82:f1:76:ec:c8:9e:4b:96:
                    a4:1b:da:c5:18:84:7a:fa:61:cc:79:be:4d:e0:69:
                    ab:c9:75:81:49:98:c9:59:9b:3f:3e:b7:42:05:8b:
                    89:58:1f:4a:92:f0:18:60:95:90:e6:2e:ee:e8:02:
                    2c:35:26:a5:44:2f:01:12:b6:96:dd:cd:94:5d:75:
                    b9:55:58:ee:a3:18:96:3f:3b:66:ca:9b:02:8b:c2:
                    62:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:4E:1E:5D:73:44:E8:9B:C8:D6:5B:EC:E8:4E:2D:69:69:09:88
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a3465313a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:94:92:56:67:ad:26:2f:65:eb:31:b4:33:df:3e:65:93:ea:
         f4:ac:7c:1e:7d:b0:5c:fb:19:af:1f:a0:0a:09:3c:1e:6a:54:
         80:69:f1:9d:17:31:9e:4c:91:05:0c:a3:b2:45:12:fa:fd:30:
         f7:3d:aa:ca:40:27:0e:f2:cd:1b:2c:fe:26:1d:aa:05:a7:c0:
         3a:73:2b:f6:3d:72:80:9b:0d:b0:67:3b:e0:d7:fb:41:d8:d6:
         fc:18:98:57:15:12:a4:d0:e6:42:b3:4e:50:21:30:2c:3c:fa:
         aa:6d:10:bf:95:1f:8b:dc:58:7e:af:66:41:69:57:f9:5a:6a:
         73:40:18:b2:e0:7e:97:1d:26:3e:a1:5a:3a:8c:88:59:7e:29:
         23:60:ac:04:c3:7b:43:0b:61:62:33:2d:f4:fe:33:4b:3f:6a:
         83:37:c7:d3:fa:bc:2c:bb:b6:e3:79:8b:7b:73:9b:e1:ac:5c:
         2a:de:c7:1c:de:8f:4e:2c:24:85:ee:54:b6:1c:dd:fd:20:99:
         74:94:12:42:cc:ef:3a:91:f8:8c:31:a2:1f:9c:fa:d0:ff:b9:
         19:a3:ee:79:04:73:9f:95:ff:f3:e8:31:b2:3a:f4:35:68:8e:
         28:e1:d7:47:a8:ab:6e:9f:ef:fd:87:9d:26:a6:a7:4b:76:6f:
         6e:3f:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----