Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323230303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a323230303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          ksFbyA0Kwnirp1bv9aCfePa/LEGLS6lq83GTc+VRgs4=
Subject key identifier:   2E:F2:48:51:25:2E:11:9A:3C:B3:3D:7B:64:DF:73:AE:FB:0F:79:01
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       0E93AA35D613E99AC55283E85C2181AC3CDD8689
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323230303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Thu 20 Feb 2025 13:50:01 +0000
ROA not before:           Thu 20 Feb 2025 13:45:01 +0000
ROA not after:            Thu 19 Feb 2026 13:50:01 +0000
asID:                     64120
IP address blocks:        2803:f080:2200::/43 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:93:aa:35:d6:13:e9:9a:c5:52:83:e8:5c:21:81:ac:3c:dd:86:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Feb 20 13:45:01 2025 GMT
            Not After : Feb 19 13:50:01 2026 GMT
        Subject: CN=2EF24851252E119A3CB33D7B64DF73AEFB0F7901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:26:98:f1:4e:cc:28:26:50:58:3c:f9:91:
                    df:f1:e7:45:ae:ea:aa:e2:74:ea:e9:12:51:64:34:
                    a5:cb:ae:ee:e4:46:25:f9:17:ef:c9:25:1b:ac:70:
                    cb:e8:f0:32:d5:ee:a2:e4:2d:16:19:f3:67:86:d8:
                    4a:89:fb:be:48:0f:04:1c:cd:15:5a:06:96:e5:0c:
                    59:8f:fa:85:97:82:35:42:c9:f7:30:ff:bf:e3:fb:
                    7c:c8:10:b6:9f:be:08:04:31:d6:70:8a:aa:87:58:
                    3c:86:e1:9b:70:36:f2:67:44:40:dc:72:60:f1:a2:
                    a1:cc:58:c4:d2:83:00:4e:60:4c:4b:6e:b5:6a:3d:
                    f9:d7:92:a0:e7:98:09:2b:01:f2:6d:66:bf:e7:b0:
                    10:34:67:62:d3:fe:2b:17:b1:1c:44:93:27:95:c8:
                    d5:d4:4f:86:88:95:b1:e4:fe:c6:65:38:3d:94:8e:
                    b5:17:16:a7:fe:1f:40:0a:a2:d4:16:19:56:a5:cc:
                    6c:1e:d7:0d:d4:c8:11:e2:14:b3:5c:75:fe:bd:f4:
                    d1:95:23:24:f3:f9:52:0f:93:6b:d0:5e:c7:96:41:
                    20:0d:1f:4d:3f:54:02:e0:4a:93:4c:6d:b9:4f:74:
                    d4:15:14:89:e3:79:6d:09:d8:c2:a5:a6:cb:ad:09:
                    48:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F2:48:51:25:2E:11:9A:3C:B3:3D:7B:64:DF:73:AE:FB:0F:79:01
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323230303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2200::/43

    Signature Algorithm: sha256WithRSAEncryption
         42:02:92:ab:43:2f:a3:04:79:c1:42:ef:92:88:d2:b7:7f:a2:
         4b:96:cf:50:29:4c:cf:fc:82:4f:9f:d0:28:e0:79:e8:4c:74:
         01:3d:58:ef:42:59:f3:35:2c:32:69:aa:7b:de:e1:c8:42:b7:
         72:83:0e:5f:4d:dd:ff:7b:23:4e:26:32:c2:66:6a:4e:25:e2:
         c3:76:85:94:ed:e2:94:8e:bd:40:d1:7a:92:2a:18:37:cd:04:
         93:c9:fb:d7:d5:bb:05:5e:e5:7b:6e:cb:5e:8f:6a:75:fb:cd:
         b6:50:bd:87:b0:f5:15:0f:de:df:a2:be:92:13:e8:b1:a3:bb:
         f2:47:a5:5f:38:bb:a7:8d:02:eb:c4:93:c9:28:44:c1:b3:3b:
         c6:74:db:d8:b6:c3:7d:16:de:5c:a3:ef:2c:0f:b0:29:c3:a9:
         0d:d4:d6:4d:c8:04:7e:78:ad:49:d5:36:47:aa:1a:63:5a:9e:
         a8:78:bf:49:2d:50:60:dc:56:38:05:83:47:78:11:b6:94:0b:
         4d:c2:39:96:24:ff:88:71:75:e5:59:d5:5f:b2:66:c4:a4:cb:
         07:ee:d3:f1:47:df:cb:b6:8b:ba:75:d1:5d:3f:64:22:d3:bd:
         3a:f9:2f:7b:9f:90:5d:0b:27:ad:87:71:ce:c5:5e:a8:9a:6f:
         4b:a5:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----