Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3430303a3a2f34302d3430203d3e20323636363739.roa
File:                     323830333a663932303a3430303a3a2f34302d3430203d3e20323636363739.roa (raw, json)
Hash identifier:          GamNuymgJG34dA3NAOVmcLxb3Nv2wVUREJoWm+e613E=
Subject key identifier:   00:6F:5F:D0:02:BB:A5:0C:C0:3B:7A:35:FF:65:72:F7:11:04:89:F0
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       58ED8719FE68B2ADE338CA583ADE7CD1BF09C930
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3430303a3a2f34302d3430203d3e20323636363739.roa
Signing time:             Wed 19 Feb 2025 04:15:00 +0000
ROA not before:           Wed 19 Feb 2025 04:10:00 +0000
ROA not after:            Wed 18 Feb 2026 04:15:00 +0000
asID:                     266679
IP address blocks:        2803:f920:400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ed:87:19:fe:68:b2:ad:e3:38:ca:58:3a:de:7c:d1:bf:09:c9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Feb 19 04:10:00 2025 GMT
            Not After : Feb 18 04:15:00 2026 GMT
        Subject: CN=006F5FD002BBA50CC03B7A35FF6572F7110489F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:1a:e7:c3:3e:06:c6:d7:97:f2:e3:ad:01:
                    ee:a8:93:f4:ef:32:c3:a7:6b:37:28:f0:91:b0:f0:
                    34:eb:15:c0:27:93:bc:26:5e:0f:57:8e:16:ad:33:
                    12:14:43:e6:54:90:9c:f9:39:22:a4:cd:4c:6c:f3:
                    2e:0c:04:54:24:09:5d:75:83:44:87:9d:53:67:66:
                    9c:12:8e:d8:13:e8:0b:93:49:e5:dd:a3:96:4e:9f:
                    28:9d:f5:07:82:cf:65:dd:8d:ac:50:79:2f:ff:63:
                    bc:3b:a5:80:07:76:70:16:45:70:f9:d4:31:04:36:
                    96:5f:3e:73:da:a6:92:c5:2a:65:a0:ce:58:c6:de:
                    50:e8:d6:7e:c3:d8:3b:da:c0:33:66:11:26:37:3f:
                    94:ea:e3:ef:a1:27:92:11:c6:63:09:0e:fb:b3:2e:
                    16:cd:e9:6e:52:d3:a0:a9:d6:37:b1:68:b2:e4:5a:
                    c9:07:30:c8:be:b3:39:78:e2:66:33:75:10:89:d2:
                    41:f5:be:90:11:31:a9:7a:e8:8e:6e:7f:46:40:95:
                    f9:43:b7:c0:54:97:d9:64:b5:64:c7:83:dc:63:d0:
                    c6:52:80:02:21:57:be:6a:23:bd:30:68:12:cf:bb:
                    55:40:45:e0:df:56:0a:83:1c:63:89:2e:eb:e8:b7:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6F:5F:D0:02:BB:A5:0C:C0:3B:7A:35:FF:65:72:F7:11:04:89:F0
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3430303a3a2f34302d3430203d3e20323636363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f920:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:36:2e:ca:7c:b4:73:9b:e7:fe:e7:b4:9c:1f:bf:54:aa:
         dc:fd:c2:cc:a0:b7:3b:f0:f4:54:b6:a3:56:4e:4f:86:1d:24:
         11:00:9b:eb:1e:bb:f7:2a:0e:98:ee:69:5c:0e:da:6e:e0:37:
         30:1e:47:cd:40:16:77:99:92:9e:53:d8:3f:70:4f:39:f7:ed:
         8b:db:7b:bb:08:50:57:b7:37:93:af:da:3e:41:f1:4f:4e:7b:
         a2:86:dd:de:3f:3e:68:e6:a6:24:3f:fa:f8:50:d0:74:a0:6f:
         5e:95:52:49:57:33:b9:75:0c:9e:e6:7d:fb:8c:d6:7b:8a:59:
         87:91:8d:7d:20:3b:c4:e1:c6:11:70:9c:f2:e3:be:23:46:b9:
         6b:0b:b0:43:60:18:75:67:de:9d:f8:49:a6:52:4b:cd:86:ef:
         9f:96:1a:d3:e8:8c:ab:9a:30:fe:90:67:f2:1e:b3:42:b1:b6:
         01:f2:70:58:bb:b2:9e:f4:3d:04:76:98:d6:08:59:26:93:d8:
         91:88:fa:cf:a1:7a:d2:49:fd:8d:45:a6:76:cd:59:cb:8c:d1:
         58:c1:ee:f7:eb:6a:89:fd:11:5c:bf:08:9a:8f:b1:73:a6:b8:
         dc:97:e5:66:4d:7f:2b:72:ef:71:69:f2:d9:50:a3:e9:c6:bf:
         63:ba:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----