Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6630303a3a2f34302d3430203d3e20323639373330.roa
File:                     323830333a353136303a6630303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier:          LLNYduDeaMYVQprwPvQ21m58TKyAFgzg6dy61CZ30nY=
Subject key identifier:   60:5A:AB:4B:13:A9:E4:F7:05:92:FB:53:3B:15:8F:0D:EC:28:C0:06
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       71376AFA35E34DE58F6E9456206271E68B38E0D5
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6630303a3a2f34302d3430203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:07 +0000
ROA not before:           Fri 17 Jan 2025 14:40:07 +0000
ROA not after:            Fri 16 Jan 2026 14:45:07 +0000
asID:                     269730
IP address blocks:        2803:5160:f00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:37:6a:fa:35:e3:4d:e5:8f:6e:94:56:20:62:71:e6:8b:38:e0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:07 2025 GMT
            Not After : Jan 16 14:45:07 2026 GMT
        Subject: CN=605AAB4B13A9E4F70592FB533B158F0DEC28C006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:16:b2:e4:93:8f:3d:53:21:e8:9f:89:b5:
                    bf:1c:8b:34:69:82:22:08:0b:9b:a2:0d:cd:3f:19:
                    68:d1:9a:3e:3d:4f:c7:bd:d0:64:dc:be:88:d7:dd:
                    a7:7f:36:a8:4b:08:31:2e:48:95:74:15:9d:ff:8c:
                    28:2f:79:d0:0e:0b:a9:f2:43:aa:93:9b:d0:3f:2e:
                    da:ee:02:d2:e1:a5:92:52:ef:94:6d:ba:23:c0:c3:
                    32:24:d0:16:44:fd:9b:9f:24:c5:41:a5:80:65:57:
                    18:2b:d8:4e:7e:6a:4f:ba:fd:1c:68:83:5c:ce:e4:
                    84:0f:96:6e:7f:7d:46:71:44:4f:56:15:e9:60:c2:
                    4c:c0:a0:f1:4d:38:2e:67:7e:09:5f:4f:85:51:79:
                    bb:dc:3b:41:a9:4e:f0:67:f5:60:11:76:4b:e6:33:
                    b8:ef:aa:d3:bc:f5:6d:f3:75:03:38:44:f8:08:85:
                    80:0c:c4:c0:81:14:84:5f:67:19:d9:a6:90:39:b7:
                    82:99:49:92:62:b7:41:82:83:b9:8d:fd:6d:bb:10:
                    e5:99:12:53:c9:82:48:d8:1e:32:fa:e2:61:fe:6c:
                    32:45:6f:e9:c0:8f:19:97:f4:01:89:c9:72:b5:9e:
                    5b:49:51:55:43:0b:d1:f0:80:d5:37:58:21:5d:02:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5A:AB:4B:13:A9:E4:F7:05:92:FB:53:3B:15:8F:0D:EC:28:C0:06
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a6630303a3a2f34302d3430203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:53:ce:70:c1:27:04:a6:8a:ef:bc:ce:6a:8a:86:86:05:db:
         36:0d:e8:3d:ec:67:17:1c:1a:43:6f:08:b5:d4:81:e2:5e:29:
         81:fd:1a:09:48:1c:e9:12:b2:18:be:a5:b4:a0:17:ab:4d:3b:
         3e:cb:68:56:27:49:cf:c7:e3:60:5a:da:29:0b:75:ac:dc:ac:
         30:fb:60:5d:e9:0a:d3:08:6a:c3:35:82:87:0b:55:5c:d7:5e:
         e0:58:b6:66:4e:ec:f7:e9:c1:65:0f:d1:93:d0:27:89:eb:2a:
         56:d6:9b:77:46:9e:e8:b8:e2:75:19:56:55:94:6d:37:3f:30:
         e0:23:57:ec:66:08:b2:62:be:c6:5e:65:b8:a6:2c:93:df:ac:
         7f:5c:63:1a:e8:f7:c6:8a:91:e2:1b:32:89:33:c4:77:26:89:
         ca:16:72:76:2f:a5:e2:1c:c2:ed:cd:34:88:f8:00:29:13:29:
         45:74:87:57:04:1e:78:52:6c:1c:c2:a2:29:13:89:97:c3:23:
         7d:d7:c5:ca:17:86:e9:13:e4:61:d0:f3:91:10:18:8d:4b:d2:
         59:01:cb:8e:83:17:ec:bf:f7:ce:c3:0d:9d:90:b8:ab:c7:16:
         6f:f0:fb:ff:7b:b4:d4:f5:0f:09:83:42:db:e8:d8:90:00:b9:
         77:b4:e9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----