Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326538303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a326538303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          I3dXOj86DD/vEhaaqt2TvXcnUCL5f4e16rYFNQ6TnsE=
Subject key identifier:   2E:2C:77:2A:16:D8:46:BC:F2:C5:B1:B3:B8:77:9E:75:A5:6A:44:DE
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       148631F2B8EF7D9CAC963980A283073226BBF023
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326538303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Mon 05 Aug 2024 17:20:00 +0000
ROA not before:           Mon 05 Aug 2024 17:15:00 +0000
ROA not after:            Mon 04 Aug 2025 17:20:00 +0000
asID:                     64120
IP address blocks:        2803:f080:2e80::/43 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:86:31:f2:b8:ef:7d:9c:ac:96:39:80:a2:83:07:32:26:bb:f0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Aug  5 17:15:00 2024 GMT
            Not After : Aug  4 17:20:00 2025 GMT
        Subject: CN=2E2C772A16D846BCF2C5B1B3B8779E75A56A44DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:4d:49:83:e0:30:64:ef:7e:45:f1:ec:17:
                    73:91:19:a1:b8:6a:ab:be:c1:77:74:a8:ce:2e:c2:
                    96:9d:f8:5e:5a:53:4b:38:c3:76:0d:3b:27:ce:69:
                    dd:17:6a:79:63:ee:88:6a:07:ce:28:b6:4a:ce:bb:
                    63:c0:03:63:31:27:5e:95:1d:84:e0:51:8b:7a:92:
                    67:e0:d3:94:bb:24:db:a7:75:9b:46:9f:26:28:7a:
                    f6:07:45:79:95:84:b5:2a:57:80:1a:f3:61:66:d0:
                    4e:be:e8:d4:8d:47:0b:08:85:c6:17:21:32:eb:53:
                    c4:01:e1:1a:25:73:2e:d0:5b:ab:71:c5:69:73:73:
                    25:80:ce:da:b1:34:52:f9:91:31:3b:09:1b:71:3a:
                    74:82:45:d9:16:ba:e0:92:cd:cd:7c:82:b8:4b:a0:
                    ab:4f:35:ff:0c:57:8e:05:d0:41:b0:81:be:ca:a4:
                    b8:67:d6:f1:d9:d0:32:12:f1:f4:87:ce:93:16:84:
                    c6:58:4a:9a:9e:4b:52:ab:66:35:bc:57:28:b4:9c:
                    da:62:e8:f4:d8:93:8e:19:21:87:76:4f:c5:95:ee:
                    21:9a:7d:75:8d:19:07:9c:7a:db:78:b2:be:75:26:
                    b3:e3:14:b6:db:34:89:05:b6:e8:8b:af:dd:62:1f:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2C:77:2A:16:D8:46:BC:F2:C5:B1:B3:B8:77:9E:75:A5:6A:44:DE
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326538303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2e80::/43

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:dc:d8:a8:ae:dc:54:63:ee:0e:dc:6e:f8:30:33:0b:3c:
         3d:4e:0a:ce:3c:92:02:8b:e7:8e:7b:c1:4b:09:2c:b3:46:e7:
         e4:cd:88:93:59:45:8b:d7:e6:cc:59:2f:e7:45:23:cb:38:c4:
         1c:b5:95:21:26:e8:a8:9d:5b:02:97:5e:48:7c:24:77:c0:1e:
         ad:37:e1:37:f1:79:d2:84:3e:e0:7b:94:21:53:1b:06:a2:f8:
         f1:cd:3e:39:77:77:21:a1:45:ba:76:b9:e1:4d:8a:34:a9:4b:
         40:e8:0f:11:df:c8:f4:53:67:c8:9c:ac:0d:08:ea:c7:bf:8c:
         3c:a6:64:51:cc:a0:fa:83:8c:56:23:b2:2e:bd:59:a2:0c:ca:
         36:35:7e:26:68:65:e9:60:1b:7e:09:72:7c:ea:fd:62:84:92:
         99:e8:4a:8f:4d:36:8a:b8:40:a8:06:87:9c:44:57:0a:9d:0f:
         5d:59:fc:4b:0d:45:f2:3f:bf:e2:5b:73:cf:85:08:ed:e0:a4:
         e9:9d:a2:6e:ad:6e:28:af:56:3b:4e:7c:9b:27:7a:ac:a0:66:
         ae:c7:43:08:30:24:c9:70:1e:13:cc:71:2b:36:bc:14:75:71:
         61:f6:31:2e:11:44:29:57:82:e1:39:2e:4e:f8:da:21:03:3a:
         d8:c2:19:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----