Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323165303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323165303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          U87ZtH/f6f1y5AR5wEO92fdLViI+w5FO/3/GfxI7ca8=
Subject key identifier:   E7:0E:03:52:9B:21:D0:F3:CA:61:95:36:33:D0:2B:6C:19:AD:13:D3
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       6351A57C3A20C10C0D1943372DB68D85B504E4C7
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323165303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Thu 20 Feb 2025 13:50:00 +0000
ROA not before:           Thu 20 Feb 2025 13:45:00 +0000
ROA not after:            Thu 19 Feb 2026 13:50:00 +0000
asID:                     64120
IP address blocks:        2803:f080:21e0::/43 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:51:a5:7c:3a:20:c1:0c:0d:19:43:37:2d:b6:8d:85:b5:04:e4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Feb 20 13:45:00 2025 GMT
            Not After : Feb 19 13:50:00 2026 GMT
        Subject: CN=E70E03529B21D0F3CA61953633D02B6C19AD13D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:69:75:5b:2c:a9:db:36:48:fa:a7:0d:62:
                    cc:fc:d7:c8:94:fa:93:c0:58:c7:b1:96:23:e1:ff:
                    55:cb:cc:c9:85:a9:46:98:c7:ef:11:86:9d:67:73:
                    ea:8e:3a:17:1c:e9:1d:34:f1:53:2a:30:98:7d:4e:
                    e1:9f:fd:4d:6c:8a:bb:c9:cf:75:d1:ed:f9:af:16:
                    fb:00:94:8a:f2:78:4a:3b:19:f6:95:e8:75:cc:36:
                    a3:20:56:f2:ed:10:60:b6:cc:19:2d:b9:ac:63:4a:
                    c7:5a:bc:83:1f:a1:a4:60:c0:c6:3e:1d:8f:53:50:
                    72:52:8a:47:4b:04:44:20:51:d8:8b:cf:fa:a6:f0:
                    2b:19:82:bf:1b:2c:14:a1:bf:98:b3:1e:c6:f0:89:
                    7d:4d:58:ed:e7:b6:d6:c3:4c:93:87:82:ce:7c:12:
                    eb:1a:09:15:6b:b2:b5:5c:9b:5a:fc:dd:aa:20:dc:
                    3e:c8:f3:25:97:0f:95:83:f0:d8:66:6e:d1:d1:28:
                    99:6f:3f:38:73:b1:94:92:7d:0d:48:61:53:b4:50:
                    85:a3:c9:9f:0c:80:ce:dd:47:7a:17:cb:d3:91:68:
                    5d:42:ce:87:ff:ca:8f:8b:28:88:32:86:66:32:c9:
                    1a:4c:ee:5e:58:7d:17:8e:fa:b4:de:50:c0:24:e9:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0E:03:52:9B:21:D0:F3:CA:61:95:36:33:D0:2B:6C:19:AD:13:D3
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323165303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:21e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         69:07:c2:1e:ae:13:53:16:70:a0:87:29:70:96:d6:c6:ee:1a:
         1c:e0:c7:9d:c1:e1:5e:b8:7a:86:ab:9a:3f:19:68:2f:2e:30:
         a4:58:f8:a7:a9:af:db:80:70:8c:e9:61:f1:f4:2f:62:30:99:
         81:1c:04:6a:04:1f:60:cd:b0:a6:f4:2d:8d:30:f6:0d:64:49:
         83:6d:57:49:22:6f:4d:db:fb:78:14:4e:4c:66:82:ca:7c:00:
         de:05:a6:d6:73:e6:c9:36:85:d4:bf:14:29:65:5d:32:51:a0:
         b3:a7:1f:b9:fb:dd:57:89:87:a9:d4:4e:7f:f4:74:7f:72:c7:
         1a:1b:2b:a0:04:2d:ae:c5:fa:1e:1e:0e:f9:40:5c:f0:57:7e:
         cc:63:ee:3f:9a:43:d0:ed:b8:dc:bf:59:ef:0a:b8:db:3c:96:
         ce:72:50:cf:2f:04:a0:18:dc:b6:f8:37:a2:40:b8:f3:e1:a5:
         bc:31:54:f9:58:95:65:74:47:31:86:05:61:4d:01:c9:0e:24:
         e8:af:00:0d:4a:ee:01:ee:82:39:db:6d:52:88:84:59:95:4d:
         2a:c6:9f:46:86:1a:38:30:0f:90:79:33:4e:cc:99:1c:db:aa:
         b1:11:30:39:87:3a:8c:56:98:91:64:6e:0a:5a:38:a4:b2:77:
         20:0e:9d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----