Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3536203d3e203532343635.roa
File:                     323830333a643761303a3a2f33322d3536203d3e203532343635.roa (raw, json)
Hash identifier:          fH3XoNujlmW5l+2YwilGh7KJQ6iTUG9lcDhBIFEILr8=
Subject key identifier:   A5:70:7F:8E:14:BF:0B:27:73:0E:26:19:A3:37:BC:E1:7E:2F:26:62
Certificate issuer:       /CN=CFD2835EF2DA8C68B69290E421AE6ACB9E7B06BD
Certificate serial:       45041DFF85A1973629C863BFBDD0721B3254DCA1
Authority key identifier: CF:D2:83:5E:F2:DA:8C:68:B6:92:90:E4:21:AE:6A:CB:9E:7B:06:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFD2835EF2DA8C68B69290E421AE6ACB9E7B06BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3536203d3e203532343635.roa
Signing time:             Mon 01 Jul 2024 11:35:01 +0000
ROA not before:           Mon 01 Jul 2024 11:30:01 +0000
ROA not after:            Mon 30 Jun 2025 11:35:01 +0000
asID:                     52465
IP address blocks:        2803:d7a0::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:04:1d:ff:85:a1:97:36:29:c8:63:bf:bd:d0:72:1b:32:54:dc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFD2835EF2DA8C68B69290E421AE6ACB9E7B06BD
        Validity
            Not Before: Jul  1 11:30:01 2024 GMT
            Not After : Jun 30 11:35:01 2025 GMT
        Subject: CN=A5707F8E14BF0B27730E2619A337BCE17E2F2662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:42:89:3b:0a:cd:21:ec:c0:78:6c:4b:c8:
                    cc:5e:5e:27:bb:47:a7:40:02:ee:8c:0c:58:98:b7:
                    74:a0:bf:3a:a5:d0:01:f4:9f:2a:84:3f:ee:ec:08:
                    43:70:c9:f2:fb:6d:cc:3a:f6:34:ed:ff:f3:f3:21:
                    9e:07:fe:9f:bb:8f:c3:ec:e5:0f:5f:66:a1:cb:02:
                    8c:c1:fe:7f:7f:0b:be:a4:d0:61:69:4a:11:94:96:
                    32:af:db:49:00:86:d2:7a:e8:95:3c:46:13:e8:37:
                    5b:d8:13:1f:39:5c:05:6f:3b:3c:e2:4b:8b:42:d9:
                    cd:5b:9b:5d:98:34:46:18:8d:2a:95:0c:f2:c3:2e:
                    1e:04:b4:15:42:69:04:fc:29:2b:10:79:86:e5:7a:
                    f4:4a:69:7c:95:2c:e1:a5:c2:0f:ef:59:aa:1b:7c:
                    62:80:17:c8:e3:b7:d1:2a:8d:a5:3c:d5:be:73:67:
                    2e:ac:d0:48:05:03:25:f8:50:45:62:5f:49:e9:d1:
                    05:46:76:7d:94:a7:60:ee:f8:e0:37:01:c7:84:59:
                    3b:67:4d:b9:f9:14:69:f9:07:8a:b5:8a:d4:28:f7:
                    80:f1:fa:a4:07:14:da:bf:65:af:82:94:56:93:84:
                    45:0c:6e:11:5a:6a:d2:ee:fa:7f:44:28:e7:08:4f:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:70:7F:8E:14:BF:0B:27:73:0E:26:19:A3:37:BC:E1:7E:2F:26:62
            X509v3 Authority Key Identifier:
                keyid:CF:D2:83:5E:F2:DA:8C:68:B6:92:90:E4:21:AE:6A:CB:9E:7B:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/CFD2835EF2DA8C68B69290E421AE6ACB9E7B06BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFD2835EF2DA8C68B69290E421AE6ACB9E7B06BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3536203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:e4:f4:13:26:ff:9d:33:9f:0b:7f:e2:4d:da:ca:4d:d0:
         78:2b:75:e0:8e:4e:cd:db:93:cd:74:58:35:ba:c8:52:f7:8e:
         6f:2d:55:61:dd:64:8b:1b:57:4d:95:21:6a:c6:2b:80:ad:3e:
         43:5d:ae:ee:f1:05:1c:d2:ab:95:8f:31:b1:6a:d4:01:68:28:
         c8:20:d1:a7:75:28:0e:5b:b6:f7:6c:6e:2a:45:a2:58:23:da:
         fc:ac:c0:f3:85:2b:e9:d7:f8:ae:44:c9:04:3a:9b:7b:df:ad:
         67:c1:a7:39:e9:95:7b:10:3d:85:04:b8:37:fa:fa:49:73:6e:
         89:ea:5c:ce:87:5a:bc:6c:8e:1a:ec:ab:52:ce:b6:80:b6:35:
         a2:60:96:37:3a:62:7c:9d:b2:f5:84:7d:9c:a4:88:6f:c3:e8:
         55:0e:22:f5:f5:f1:89:4c:79:77:6a:cb:b6:20:c2:dc:fa:e3:
         34:dc:ef:dc:0f:72:75:66:c6:00:ec:ac:32:0b:16:a6:4f:f1:
         5f:7b:1e:da:82:29:b7:25:46:59:78:e9:c8:cf:4c:8d:ef:2e:
         ee:5f:13:8d:d2:78:20:93:55:b3:5b:40:19:ae:9d:6d:4d:0b:
         3f:26:93:7d:c4:b8:13:71:45:f9:eb:d6:5c:42:63:09:ed:13:
         dd:f5:13:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----