Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3630303a3a2f34302d3430203d3e20323636363739.roa
File:                     323830333a663932303a3630303a3a2f34302d3430203d3e20323636363739.roa (raw, json)
Hash identifier:          qE0HeZ1IvRf7P3weXcZORcD0w8dSyvASJSoa3uvlj4M=
Subject key identifier:   EC:CB:DC:28:3B:24:5C:E0:39:7D:5C:83:4B:B8:1C:53:59:0C:F6:1E
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       056133C145A1A7D30B742926961627D88BA57EB4
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3630303a3a2f34302d3430203d3e20323636363739.roa
Signing time:             Wed 19 Feb 2025 04:15:01 +0000
ROA not before:           Wed 19 Feb 2025 04:10:01 +0000
ROA not after:            Wed 18 Feb 2026 04:15:01 +0000
asID:                     266679
IP address blocks:        2803:f920:600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:61:33:c1:45:a1:a7:d3:0b:74:29:26:96:16:27:d8:8b:a5:7e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Feb 19 04:10:01 2025 GMT
            Not After : Feb 18 04:15:01 2026 GMT
        Subject: CN=ECCBDC283B245CE0397D5C834BB81C53590CF61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:0e:38:bf:e2:b6:05:a5:c4:2d:17:6a:71:
                    36:21:3b:e9:be:a7:70:78:52:b5:cf:18:cb:45:69:
                    94:43:aa:79:4c:40:14:7f:fd:fa:1b:aa:27:11:d2:
                    3e:fe:08:6c:f2:0e:74:65:98:d4:9b:00:43:57:7f:
                    7e:08:ba:56:06:da:65:7a:f9:fe:d5:a4:0e:11:6c:
                    d6:31:00:40:37:61:6c:65:ff:a1:56:24:0c:9a:e2:
                    f9:ae:22:07:a3:7f:64:c6:6c:7a:fb:b4:b1:ee:69:
                    ba:d6:72:74:a2:31:c4:1b:9c:d1:f3:ef:16:d8:a0:
                    4b:c0:64:b7:55:e7:9e:6d:c4:c4:6d:3a:dd:1a:9d:
                    1c:cd:5d:08:77:4a:d5:90:fe:e9:4c:14:f9:07:d2:
                    ef:a5:6b:5b:72:d3:33:e6:8c:2f:54:f3:c0:fc:14:
                    18:50:65:6b:c4:d7:a1:46:6b:1e:38:fa:0c:4e:37:
                    73:85:9c:36:97:23:c2:85:9b:87:ab:01:15:ca:2b:
                    b7:90:15:ad:5b:a9:96:3c:3c:36:fd:03:a7:20:ff:
                    ea:60:2a:dc:b6:a0:12:1b:ef:55:d4:bc:fc:be:cf:
                    05:5e:4c:bc:3b:79:ca:71:66:34:3e:33:9b:f8:97:
                    e6:18:70:b1:27:2b:c0:3a:4a:50:f6:6c:5e:ef:2b:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CB:DC:28:3B:24:5C:E0:39:7D:5C:83:4B:B8:1C:53:59:0C:F6:1E
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3630303a3a2f34302d3430203d3e20323636363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f920:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:e7:5a:1e:15:79:55:4a:e1:91:71:a1:ec:52:70:2a:b0:b6:
         85:4d:e6:33:3e:36:b9:1c:92:52:df:7c:b8:c3:90:91:13:a8:
         31:6d:f9:9d:44:5b:f3:33:36:4f:f9:15:1d:3a:1e:f7:f9:24:
         f5:9d:fa:05:39:6b:d9:34:e9:b1:51:62:44:c5:0b:d9:42:8d:
         45:1e:26:d5:fb:1f:87:11:05:f8:05:7c:d8:e0:5d:b2:d2:57:
         1a:9d:83:85:5e:73:4c:80:6f:29:ea:a0:0e:93:a9:ed:10:1b:
         e6:0f:5c:6f:ff:a2:66:7c:43:8a:6d:16:f6:13:a8:ec:da:b1:
         2c:c3:da:39:1a:56:0d:9a:38:57:e6:76:50:c6:52:49:28:d7:
         ac:c7:17:87:8e:13:f9:fa:25:e9:d8:90:89:a6:39:e1:19:8d:
         20:2e:fb:3b:98:67:c9:68:c8:71:f6:c5:61:aa:6f:ab:f0:23:
         4c:62:9d:7d:12:9c:98:bd:e9:31:7c:89:33:5c:ad:79:35:dd:
         bb:d3:48:fc:a0:2d:79:ba:d4:ed:a2:21:21:96:1d:14:6b:4c:
         87:b5:f5:25:be:32:2a:e4:aa:f6:40:0c:b4:de:ee:a5:67:a1:
         e9:9e:62:ab:7d:79:38:c3:be:e0:c2:d9:89:84:98:a9:ee:5d:
         f7:e4:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----