Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323163303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323163303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          +jXGSzr8LYpZfk1dVeg6yWKO7vFt1wxSz/Uk57u1XNQ=
Subject key identifier:   F9:18:6A:5C:50:40:55:D0:48:13:CF:A3:F0:68:56:51:B3:B8:43:9B
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       728B0DB6F7B95E32DCC50D3E79BFD7CB61D80C0E
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323163303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Thu 20 Feb 2025 13:50:01 +0000
ROA not before:           Thu 20 Feb 2025 13:45:01 +0000
ROA not after:            Thu 19 Feb 2026 13:50:01 +0000
asID:                     64120
IP address blocks:        2803:f080:21c0::/43 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8b:0d:b6:f7:b9:5e:32:dc:c5:0d:3e:79:bf:d7:cb:61:d8:0c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Feb 20 13:45:01 2025 GMT
            Not After : Feb 19 13:50:01 2026 GMT
        Subject: CN=F9186A5C504055D04813CFA3F0685651B3B8439B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8e:fe:67:4b:ee:4e:a8:b6:d5:ad:1a:80:46:
                    a6:12:30:a8:b6:99:ea:d3:63:fa:c9:01:eb:4e:71:
                    b9:00:79:9a:51:8b:74:58:f9:15:41:8f:77:ee:a7:
                    ab:89:cc:ad:ed:0f:b8:6b:c4:f7:36:36:4c:d7:9b:
                    b6:95:9e:0d:d0:5e:fd:fe:98:13:6e:cd:4e:40:f2:
                    1b:55:1b:d1:17:67:45:0d:b5:f5:53:b4:f7:e6:56:
                    21:9c:34:26:ee:d5:46:2e:3e:5f:43:8f:cf:63:6f:
                    d3:89:a3:2c:6b:01:5b:78:d6:de:fb:1a:68:6e:6b:
                    06:98:e8:2b:e1:15:3c:f4:eb:37:95:64:59:8f:02:
                    51:0f:85:ec:55:c7:d0:d5:1b:c5:5e:af:a2:af:8d:
                    a1:c0:4b:d6:da:07:97:5c:c6:ab:12:3a:1a:23:62:
                    92:6a:46:cb:dc:af:0f:a7:04:6b:6b:3b:e5:be:7d:
                    35:da:aa:25:95:65:b4:f3:d1:71:f4:e8:7b:93:18:
                    c2:1b:a4:80:05:fc:7e:3c:40:81:c3:ae:2e:1b:42:
                    43:bc:4d:57:58:1a:08:45:a0:e5:7e:6e:47:ef:a7:
                    e2:b1:20:ad:6c:5d:03:2e:13:79:f2:5a:96:ce:9b:
                    52:59:9f:3d:21:e9:e0:2d:ea:66:84:67:ed:3d:47:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:18:6A:5C:50:40:55:D0:48:13:CF:A3:F0:68:56:51:B3:B8:43:9B
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323163303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:21c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:33:11:0a:68:be:7f:1d:e6:80:ae:75:a8:86:6f:f3:95:
         90:e8:1e:0d:f8:26:af:78:80:c3:82:a1:8d:61:ac:22:e7:7c:
         af:2d:53:03:6f:03:cc:bb:95:6e:e3:4f:d0:2b:63:7d:7e:48:
         b6:b6:ef:d3:36:97:0f:e2:5f:ae:ad:66:4d:f7:dd:75:39:86:
         fb:33:49:33:17:bf:37:37:e2:b0:b6:d0:4a:46:61:10:9e:11:
         e7:8b:8e:ac:27:93:41:ae:0c:b8:78:45:99:15:51:0a:1b:13:
         33:49:8a:ef:ec:bd:72:d2:3a:ab:44:f6:fc:bf:c7:02:fd:e2:
         06:cf:1b:f8:d3:4d:c5:7c:9a:14:3f:fe:2f:3a:75:14:c3:30:
         4a:e5:b7:6c:e9:f4:9c:e4:67:f3:ba:fb:da:8c:46:e0:ea:13:
         c8:c8:20:90:a3:d9:72:cd:38:b1:a6:e2:ed:15:8b:75:fe:36:
         70:92:f6:a3:45:b9:57:03:fa:51:bf:ce:32:a5:54:f9:66:bd:
         ac:77:ee:43:ba:1a:a2:f6:87:e6:27:8b:cc:57:bb:46:1a:bc:
         9f:bb:b9:cd:f4:ce:55:b6:7a:2b:30:63:8c:31:1f:5f:6d:10:
         4f:78:3c:3b:92:02:c7:9b:fa:13:c3:c0:50:97:22:62:30:1f:
         32:fe:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----