Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a363030303a3a2f33362d3336203d3e203532343638.roa
File:                     323830333a393539303a363030303a3a2f33362d3336203d3e203532343638.roa (raw, json)
Hash identifier:          EydVF5CVGrIaJJIkoJUaw3/W0pK1tl1BEdpX1hM7vaE=
Subject key identifier:   F8:D6:94:56:B9:83:3C:AC:91:96:1D:58:55:A7:7F:E3:CA:72:DE:D3
Certificate issuer:       /CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
Certificate serial:       46BAFE150C76CA392BA78C20C25F1E09B08129B4
Authority key identifier: 21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a363030303a3a2f33362d3336203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:00:10 +0000
ROA not before:           Tue 05 Mar 2024 17:55:10 +0000
ROA not after:            Tue 04 Mar 2025 18:00:10 +0000
asID:                     52468
IP address blocks:        2803:9590:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ba:fe:15:0c:76:ca:39:2b:a7:8c:20:c2:5f:1e:09:b0:81:29:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
        Validity
            Not Before: Mar  5 17:55:10 2024 GMT
            Not After : Mar  4 18:00:10 2025 GMT
        Subject: CN=F8D69456B9833CAC91961D5855A77FE3CA72DED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bd:c1:aa:68:72:e5:14:84:37:fb:cf:2a:44:
                    72:69:30:4b:99:31:fb:7a:33:be:7f:b9:bb:23:29:
                    18:0f:4a:62:40:99:85:f0:e0:c4:f9:dd:bf:f3:8c:
                    d6:67:d1:03:2d:97:8f:c1:df:3c:60:cb:f5:f7:d4:
                    c1:34:01:13:8d:78:dc:64:8d:b0:04:c6:12:58:c3:
                    69:95:69:6d:f9:34:ff:4d:b8:ac:11:b0:18:5e:76:
                    f4:11:83:bd:f7:b5:b7:b0:b4:c0:8e:aa:67:39:ea:
                    86:6d:d8:de:0e:88:d9:12:b6:01:0e:c1:8b:7e:94:
                    44:46:1b:c8:c3:fb:96:f0:b1:ef:9c:10:7d:f8:7d:
                    87:f3:1e:0d:51:06:f7:d2:98:e6:9e:2d:95:48:75:
                    ed:1a:95:0a:01:bd:33:e7:c5:74:03:15:25:d3:28:
                    e3:cf:f7:f7:11:4b:e0:92:63:69:a1:d7:68:62:11:
                    8f:0f:ab:37:79:f6:67:be:52:45:39:3e:54:f3:0a:
                    42:ad:5e:28:50:47:68:43:f0:e0:78:36:f6:0a:a2:
                    76:3e:23:33:1e:52:3e:98:55:eb:d5:b6:01:21:77:
                    9e:4f:3c:ab:bc:90:5d:a0:c0:b2:c3:2e:36:2e:7a:
                    0b:7b:2f:12:b8:2f:6a:13:65:ab:5c:d6:d5:80:e7:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D6:94:56:B9:83:3C:AC:91:96:1D:58:55:A7:7F:E3:CA:72:DE:D3
            X509v3 Authority Key Identifier:
                keyid:21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a363030303a3a2f33362d3336203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:d9:1d:68:92:b8:9f:2f:f5:63:5e:d1:ab:55:57:65:5d:
         f8:59:f9:d2:d7:fe:1c:da:21:c1:6c:ca:b1:ba:a1:38:79:dc:
         01:e1:42:1d:9d:b6:04:73:12:93:02:fc:f7:d5:ab:09:29:92:
         2c:c6:99:8d:b5:f1:25:8d:53:db:dc:77:1f:fe:66:a3:2b:90:
         c0:c3:5c:6c:eb:bb:71:c5:aa:5e:c5:61:08:64:39:34:8b:87:
         ec:a9:e9:72:f2:7f:aa:e5:a3:74:16:f5:6e:6c:58:fb:49:a0:
         ff:79:1c:0d:56:83:83:00:9f:da:30:a9:dc:ff:00:6c:38:b2:
         fd:a3:94:06:f4:a2:9b:f7:e8:e8:b6:7b:10:3b:b6:8d:2b:18:
         83:0f:ac:f6:96:a6:d0:81:0f:0d:3a:03:b7:9c:ab:30:0a:dd:
         25:03:4c:4e:02:14:49:1c:15:ec:a9:8b:64:aa:5e:78:0d:d7:
         a8:12:79:42:c3:8a:f2:55:d1:d4:6e:ac:88:a4:c5:f9:d8:a9:
         7e:71:43:fc:63:69:c9:22:65:6f:fa:68:0b:a1:c0:b6:c7:fd:
         fa:7a:35:bb:de:b3:ad:60:74:c1:0b:51:f5:30:08:68:1b:8a:
         14:95:a3:ac:a5:74:6d:de:b1:6b:e1:e8:e9:1b:6a:e5:b1:3e:
         6d:01:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----