Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203237393437.roa
File:                     323830303a3261303a3a2f33322d3438203d3e203237393437.roa (raw, json)
Hash identifier:          x+vsqufRJs8aKlyTPxVQ9S22jBdGcx5ta1gLvinKSBE=
Subject key identifier:   5C:28:7C:36:13:18:C0:0C:07:CA:05:1F:3C:D4:D0:DC:9F:E1:62:A3
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       23BF94B28B23E7A934A8EE1DC343378D9FAACE17
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:10:24 +0000
ROA not before:           Tue 05 Mar 2024 18:05:24 +0000
ROA not after:            Tue 04 Mar 2025 18:10:24 +0000
asID:                     27947
IP address blocks:        2800:2a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bf:94:b2:8b:23:e7:a9:34:a8:ee:1d:c3:43:37:8d:9f:aa:ce:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:24 2024 GMT
            Not After : Mar  4 18:10:24 2025 GMT
        Subject: CN=5C287C361318C00C07CA051F3CD4D0DC9FE162A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:09:ce:1a:68:b4:15:ac:a9:b3:d1:84:24:
                    ae:21:ba:4c:9c:88:4c:9f:71:f9:10:a6:3e:a2:54:
                    76:48:0a:0d:d0:da:13:88:19:fc:f5:18:67:0c:a5:
                    ea:02:83:57:15:d4:bb:8a:e7:6f:c8:a7:e1:25:a2:
                    cf:5e:eb:2b:2b:e8:54:a7:76:5e:ee:09:8c:75:02:
                    c8:a2:a0:cc:66:65:a7:fe:93:d6:77:d3:06:d5:dc:
                    9e:ed:3e:97:f4:aa:a7:6d:27:b2:44:d5:f3:2a:2a:
                    f5:e3:87:6f:97:72:ca:8f:69:a7:40:98:6e:5a:fc:
                    f5:86:9c:ba:15:60:46:46:b7:1a:34:09:4b:ae:97:
                    71:1f:a3:5e:e8:f6:2b:73:21:66:03:ab:c0:d9:59:
                    ce:9b:b4:c7:28:f1:d5:ce:d4:6b:0e:ce:0b:42:ab:
                    7b:22:27:0d:e2:58:1d:68:33:32:0b:bd:fe:21:31:
                    66:84:3b:c0:d0:92:1b:e3:dd:27:ca:5f:92:d4:8b:
                    af:64:55:0b:e2:d0:1d:99:71:50:10:0d:93:42:f9:
                    6a:71:97:7b:07:16:10:53:8e:27:87:b4:3d:d2:19:
                    69:67:37:dc:bd:8f:93:1c:76:6b:2b:0a:61:87:cc:
                    a9:11:ee:00:f8:b1:2a:6b:23:55:b2:f0:95:dd:31:
                    f3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:28:7C:36:13:18:C0:0C:07:CA:05:1F:3C:D4:D0:DC:9F:E1:62:A3
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:79:a7:10:a8:38:e4:6f:a0:d4:29:36:ee:8f:c5:ca:14:9d:
         6a:86:33:3a:27:33:99:53:30:a5:70:36:65:de:6e:76:24:9e:
         e9:2e:e3:0e:6a:dd:ae:18:76:f1:c3:dc:3c:fe:58:b5:2a:db:
         dd:d1:31:72:0a:96:34:73:7f:11:e8:5b:6d:66:0a:9a:d2:5e:
         22:39:15:e0:b7:22:5c:bf:6b:54:ec:ac:bc:2a:a2:91:d3:38:
         e2:f8:63:e2:ea:06:ec:ac:d2:6e:2f:4c:1f:6d:d3:4b:f9:b2:
         56:3b:60:1a:a3:79:bf:47:d8:12:10:ec:02:09:76:52:24:2c:
         21:bf:cf:f4:b6:57:60:cc:1c:8a:4a:b5:05:a6:be:13:b1:27:
         76:86:e5:c5:7a:e4:78:a1:e7:c7:29:a4:59:91:4d:97:57:c5:
         5a:b7:b6:6f:84:25:1b:10:03:d7:55:84:7e:f2:7c:76:02:21:
         dd:40:7b:60:9d:09:97:8f:91:8e:7a:06:74:d4:f5:ea:3f:60:
         55:da:19:c5:45:3d:e9:03:5e:b4:ad:0e:c8:9a:17:15:08:0c:
         99:2b:3d:ad:15:82:c3:de:68:e5:be:33:a7:da:4a:4c:b9:1c:
         b8:80:f8:a8:f9:20:2d:03:f6:d7:11:6e:84:38:f4:2e:be:62:
         82:18:88:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----