Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/323830303a6364303a3a2f33322d3438203d3e2036353638.roa
File:                     323830303a6364303a3a2f33322d3438203d3e2036353638.roa (raw, json)
Hash identifier:          I0Czw6SHcDJwsAntQ44iOjy69APscmXBhKpQLQTBb+I=
Subject key identifier:   E6:FA:74:63:B5:55:8B:7E:03:18:E0:6F:74:73:BC:FC:11:DF:E1:C7
Certificate issuer:       /CN=677CEC9F1C4060755422FE75661CBC3718515578
Certificate serial:       580CBB3DBC0F74E990FA52DD26BF4D7C80FE14C3
Authority key identifier: 67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/323830303a6364303a3a2f33322d3438203d3e2036353638.roa
Signing time:             Tue 05 Mar 2024 18:06:19 +0000
ROA not before:           Tue 05 Mar 2024 18:01:19 +0000
ROA not after:            Tue 04 Mar 2025 18:06:19 +0000
asID:                     6568
IP address blocks:        2800:cd0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0c:bb:3d:bc:0f:74:e9:90:fa:52:dd:26:bf:4d:7c:80:fe:14:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677CEC9F1C4060755422FE75661CBC3718515578
        Validity
            Not Before: Mar  5 18:01:19 2024 GMT
            Not After : Mar  4 18:06:19 2025 GMT
        Subject: CN=E6FA7463B5558B7E0318E06F7473BCFC11DFE1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:93:15:49:fe:4f:81:9c:c0:85:96:6a:f8:d2:
                    26:f3:08:fa:55:32:e0:8b:6a:6c:53:04:f6:3c:59:
                    e6:0f:fc:70:8b:a2:37:72:fd:da:48:a8:67:5b:0f:
                    66:93:24:a4:38:cd:0c:1c:58:6e:54:f4:76:f1:ec:
                    ad:48:1e:bc:03:2e:66:0a:39:66:81:b3:1d:07:93:
                    59:26:ee:6a:b4:65:74:95:0c:79:d1:d9:c1:53:34:
                    53:26:ae:b8:76:17:1e:6d:e9:b1:69:e3:9b:a4:a2:
                    4b:34:94:6b:0d:76:1d:66:9a:fc:b0:b0:9d:94:b6:
                    1d:4d:5f:a5:66:e2:3f:59:30:d9:e5:f0:ff:08:4c:
                    17:1e:dc:90:2b:c3:c5:49:d7:7e:be:90:fd:64:8a:
                    54:79:3e:75:0d:82:cb:12:07:c2:77:56:46:c1:5b:
                    47:5a:1e:e5:c9:cc:30:9f:9c:2c:d4:77:1c:8f:1b:
                    71:f7:ec:4a:df:11:3c:93:94:06:83:54:05:c5:18:
                    df:09:77:ec:69:c1:19:b2:73:25:ad:76:d2:cf:c7:
                    4c:6f:4d:45:0f:b4:74:c1:e6:93:37:ab:cf:e2:e2:
                    f2:2f:be:c1:ee:9b:eb:f2:c6:e5:9c:d8:d5:e2:58:
                    bf:de:b6:24:6b:5f:36:f8:04:10:36:0c:0e:89:a3:
                    ed:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FA:74:63:B5:55:8B:7E:03:18:E0:6F:74:73:BC:FC:11:DF:E1:C7
            X509v3 Authority Key Identifier:
                keyid:67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/323830303a6364303a3a2f33322d3438203d3e2036353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:c4:8a:77:25:aa:11:07:33:f1:44:2c:33:39:43:25:46:7a:
         f9:0e:fd:8a:1d:a1:59:92:61:ab:5d:c9:d2:b3:28:db:0b:d3:
         59:0f:03:c4:c4:24:49:0e:d1:50:9e:3c:01:0c:fd:62:c8:db:
         3f:a4:71:b0:da:c3:09:1d:56:13:8e:c3:a7:83:93:fa:db:6d:
         a5:47:88:61:e1:10:f0:6e:b7:7f:71:20:2e:a0:7f:0d:ac:99:
         a6:cd:69:ce:0b:83:1d:89:a9:60:9a:f6:a3:bb:90:90:10:32:
         d5:1f:1e:e1:f1:1a:c9:db:82:12:54:72:d2:6d:72:1e:99:4d:
         20:57:03:82:e5:e0:92:0c:72:e9:44:46:00:2c:5f:9d:fe:ba:
         3f:4b:77:ad:ac:e9:60:f4:78:c7:19:8d:2a:92:23:e2:37:7b:
         e2:a5:05:80:ec:65:64:9d:cb:03:2a:99:ff:4c:16:a5:f4:28:
         4b:17:db:55:67:fd:22:08:de:55:24:6d:85:e5:cf:52:d8:4e:
         5d:2e:60:e6:9c:9a:d0:00:36:7e:48:57:b5:3d:a4:9b:ea:e4:
         a7:ac:5b:12:ab:12:a8:24:b0:34:2c:75:43:4b:8b:44:51:7b:
         0a:3f:5f:0d:bf:ac:d2:37:5a:26:0b:f7:4c:93:c2:95:18:0b:
         19:61:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----