Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a633030303a3a2f33362d3336203d3e20323639373330.roa
File:                     323830333a353136303a633030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier:          MihL+56PICOzR/aT4uhnyYDsSd9x/dZ/gs8cE/rMqcs=
Subject key identifier:   B7:52:82:40:9C:6C:59:51:8A:51:6F:AE:9E:73:14:FB:E7:86:B7:C3
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       17E2016BE14BE5548AB40ADEF5167EA3EE779964
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a633030303a3a2f33362d3336203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:06 +0000
ROA not before:           Fri 17 Jan 2025 14:40:06 +0000
ROA not after:            Fri 16 Jan 2026 14:45:06 +0000
asID:                     269730
IP address blocks:        2803:5160:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e2:01:6b:e1:4b:e5:54:8a:b4:0a:de:f5:16:7e:a3:ee:77:99:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:06 2025 GMT
            Not After : Jan 16 14:45:06 2026 GMT
        Subject: CN=B75282409C6C59518A516FAE9E7314FBE786B7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:99:10:4b:9f:c8:60:7d:ae:b5:a4:ac:83:
                    c3:86:1e:f1:9e:d6:94:0b:17:53:ee:83:fa:0f:92:
                    b1:1f:6f:46:ab:02:90:e3:72:4d:22:1c:81:ee:d1:
                    8d:ac:6a:ec:95:22:c1:67:5f:7b:3b:04:93:67:2d:
                    6c:99:4b:75:d4:31:ba:8a:65:2f:6f:b3:d9:43:70:
                    f9:e6:0c:51:99:d3:1d:73:9f:9c:b3:52:0b:56:b7:
                    30:88:9b:37:8f:6c:eb:79:d4:31:50:cb:d8:f5:0b:
                    03:57:a4:d1:05:17:89:f6:b7:7b:89:1c:ab:55:44:
                    63:1c:49:f7:87:e1:79:54:7d:59:c8:79:e6:28:fa:
                    dd:31:24:f1:66:8f:c2:ff:e7:d7:dc:78:b3:85:89:
                    6e:b9:87:28:8b:f9:cb:4c:48:b2:15:f4:3d:37:75:
                    a8:6c:2e:15:2a:b0:80:17:b3:f3:55:21:ac:b1:d3:
                    44:d3:2e:31:8c:d2:06:9a:18:09:98:47:b9:28:15:
                    bb:8d:44:48:ce:77:fc:60:ee:4c:28:4c:f5:bf:35:
                    81:19:de:40:81:d4:32:ab:e2:7d:e9:a5:35:b9:54:
                    25:9a:f8:05:d4:1c:3d:d4:c7:ec:15:4f:e5:1c:8f:
                    de:7b:67:c6:db:60:cf:d3:4e:a7:4d:30:e3:36:a2:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:52:82:40:9C:6C:59:51:8A:51:6F:AE:9E:73:14:FB:E7:86:B7:C3
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a633030303a3a2f33362d3336203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:46:92:51:53:47:15:54:63:5a:c0:ed:0b:0f:bf:88:15:82:
         ca:c7:36:a4:5b:12:3a:ff:94:90:35:7f:5d:08:16:a8:a8:88:
         70:1c:2f:9b:76:ae:e1:8d:c1:85:b1:9b:c6:fa:cf:de:61:15:
         09:10:8d:f6:0d:17:af:09:24:ad:c6:fd:ba:0e:4c:a9:20:38:
         a3:b6:c2:de:df:ec:9a:51:e5:20:30:49:a9:6c:54:f9:b8:37:
         02:8d:19:c1:ae:f2:0b:5c:78:0a:ab:73:6b:05:5e:84:86:35:
         3c:7c:99:a5:00:86:87:b2:e7:b3:5e:e5:60:b5:8a:db:a7:94:
         88:44:01:df:ba:f4:ae:e3:ce:3c:25:93:c2:41:2e:08:2f:6f:
         cd:26:45:5a:2a:e0:6f:57:07:e8:4d:29:01:b9:8c:57:57:dd:
         36:4a:e0:55:36:3a:38:15:1f:b9:66:03:25:d4:05:f5:e5:ee:
         f9:89:df:09:d2:35:59:3b:4c:49:ef:ad:1c:30:a3:5e:05:66:
         98:f1:dd:9d:a4:7a:5d:e0:fe:7d:eb:97:17:ce:52:ff:46:5c:
         ed:3f:54:5f:bc:36:f8:35:48:85:0d:3a:2b:fe:00:73:c4:64:
         f9:97:6d:db:86:df:e1:bb:0b:70:12:8a:53:4f:9d:9e:ec:0e:
         0a:ed:f7:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----