Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532323a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346532323a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          YIGUfO5LU+lilUy4a5FbyhoQxCSko7mtDI0Z95yfVb0=
Subject key identifier:   D7:74:8B:78:22:73:73:C2:C1:AF:2B:B1:C9:09:5D:82:1F:B2:C5:FC
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       742B61114F2AE23016F61F360E159CDEE00BAD7F
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532323a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 05 Mar 2024 18:04:26 +0000
ROA not before:           Tue 05 Mar 2024 17:59:26 +0000
ROA not after:            Tue 04 Mar 2025 18:04:26 +0000
asID:                     267848
IP address blocks:        2800:be0:4e22::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2b:61:11:4f:2a:e2:30:16:f6:1f:36:0e:15:9c:de:e0:0b:ad:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Mar  5 17:59:26 2024 GMT
            Not After : Mar  4 18:04:26 2025 GMT
        Subject: CN=D7748B78227373C2C1AF2BB1C9095D821FB2C5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:78:8e:40:f0:e6:fd:14:e2:9c:f7:db:cf:3f:
                    35:f0:5f:a4:80:66:52:1d:65:49:8d:84:ac:df:24:
                    4e:86:c9:5f:99:3c:7e:e5:db:df:9a:1b:dc:da:a2:
                    fd:b5:c9:38:ae:ad:53:70:be:20:a0:d7:07:bc:4f:
                    9e:47:fe:53:c9:64:00:ba:5a:8c:32:79:d7:01:2f:
                    6c:d5:1a:2d:c2:6c:28:b9:5a:a9:0b:2f:b2:7d:01:
                    4f:83:2b:a9:bc:64:99:50:50:17:d3:f0:0c:50:fb:
                    ce:16:be:9c:22:9a:dd:96:b9:e9:f8:ad:39:e4:e2:
                    ae:f2:14:2e:bf:d0:44:46:7a:d3:64:ae:eb:06:50:
                    83:96:71:2a:72:e3:c4:4e:14:6a:d1:51:17:66:ba:
                    01:bd:4c:16:29:42:fe:4c:9e:82:72:7d:b7:a7:f4:
                    83:d3:c2:de:3c:c9:5f:eb:e7:31:08:8a:78:30:73:
                    c7:6e:8a:ed:91:d4:08:dd:1f:a9:89:09:fe:fa:3b:
                    01:9d:bc:c5:6b:04:d9:eb:f3:9e:9e:71:c2:27:4e:
                    4f:44:54:df:05:a9:db:3b:92:94:6a:ea:0c:90:2a:
                    16:d6:16:53:ab:39:66:2d:d4:3b:b6:57:d7:fe:00:
                    2f:2f:51:6c:b6:06:0a:bb:a4:58:9c:3c:19:36:3d:
                    5d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:74:8B:78:22:73:73:C2:C1:AF:2B:B1:C9:09:5D:82:1F:B2:C5:FC
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532323a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e22::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:f3:dc:80:ad:53:ba:b2:a7:1d:fc:d4:56:e1:eb:98:6b:
         72:68:3c:40:38:2a:2c:dc:44:a8:fd:4e:eb:a8:21:44:c1:5c:
         52:6c:2f:c7:17:18:d4:d5:a2:46:b7:50:a6:49:ba:66:5a:2d:
         28:f9:e4:d9:ba:ba:07:58:e7:89:3f:d5:eb:ed:13:41:90:a5:
         46:b4:63:9c:a6:77:a2:29:ec:ea:4d:d8:28:39:33:25:72:49:
         15:90:ea:9b:c3:13:ec:3e:bc:5e:e2:3f:f8:68:80:6e:7a:0a:
         63:f1:c8:6b:65:ad:dc:7f:6a:d1:2c:e2:27:91:3e:35:ff:9a:
         5f:d0:63:03:11:68:a2:36:d3:52:6c:a9:ab:a2:64:4c:2a:dc:
         33:dd:9d:0c:2a:da:ae:88:6e:9c:fc:24:d8:24:8c:68:31:35:
         0a:0d:d0:4d:b7:66:7c:2f:83:fc:1c:0e:21:df:47:9f:46:47:
         75:c0:7e:46:ce:29:be:2f:50:2d:39:ea:16:09:a7:66:25:0f:
         fa:8b:53:71:fd:90:4a:2f:5d:82:9d:9d:4c:22:02:e1:ee:52:
         8e:b5:34:a0:4f:0f:d9:e6:cc:01:09:89:b9:70:8e:68:73:a1:
         3d:a6:a8:ff:63:b1:55:b9:25:5e:e8:a6:5b:72:5b:4d:f5:a4:
         fd:0b:d6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----