Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a623030303a3a2f33362d3336203d3e203532343638.roa
File:                     323830333a393539303a623030303a3a2f33362d3336203d3e203532343638.roa (raw, json)
Hash identifier:          9Azu3Uh/0vmupuhCn6xEntukKZ38YUqPM/KyCL2tcYo=
Subject key identifier:   F0:10:E1:4A:A4:E3:D0:5B:97:3E:E3:91:7B:D9:6C:24:13:11:C3:13
Certificate issuer:       /CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
Certificate serial:       2A0858D8CD19B96C12886811633A73C32DE038FE
Authority key identifier: 21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a623030303a3a2f33362d3336203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:00:13 +0000
ROA not before:           Tue 05 Mar 2024 17:55:13 +0000
ROA not after:            Tue 04 Mar 2025 18:00:13 +0000
asID:                     52468
IP address blocks:        2803:9590:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:08:58:d8:cd:19:b9:6c:12:88:68:11:63:3a:73:c3:2d:e0:38:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A79D2F0C2D260B1D7DD4819BE255B149917BAD
        Validity
            Not Before: Mar  5 17:55:13 2024 GMT
            Not After : Mar  4 18:00:13 2025 GMT
        Subject: CN=F010E14AA4E3D05B973EE3917BD96C241311C313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:cf:ca:f7:6d:d6:69:06:37:ae:1f:22:18:
                    99:bc:fa:60:eb:e0:2d:9e:4d:39:22:0a:70:04:5f:
                    f3:9f:28:17:72:55:6b:f4:7a:e8:de:c9:76:28:16:
                    d3:02:ca:cb:72:f0:b2:31:a7:c9:e4:39:61:ee:e1:
                    6b:cc:e3:64:5e:f2:22:95:00:28:42:91:09:ae:4b:
                    2e:ec:7a:25:b9:28:5a:f0:2e:f8:1b:8b:5f:b1:da:
                    f5:5d:d7:60:d0:69:04:0e:a2:53:16:e9:ea:a4:45:
                    56:78:4b:c1:d7:38:a2:03:c4:9b:4e:5e:2c:8f:21:
                    d6:02:9f:49:ec:2f:0a:88:00:ae:58:23:55:e3:5b:
                    9a:b6:e7:bf:57:9d:6d:c6:3d:01:72:a7:b2:98:72:
                    ab:f5:d7:5e:e0:f0:51:d0:3c:81:67:e8:5e:64:48:
                    29:3a:39:65:07:a1:d7:0d:d0:8d:a1:0f:97:b8:45:
                    b4:19:f7:5a:d1:ac:88:b8:a3:ea:9d:87:8c:bf:07:
                    a3:f4:88:b3:d6:79:a8:e6:7a:9a:cf:1d:6b:4c:51:
                    18:94:3d:c2:5a:e7:82:d8:aa:17:aa:86:21:dd:64:
                    04:44:25:ba:17:79:7e:bd:1a:4d:d0:37:3e:92:d8:
                    89:92:15:34:16:7c:95:ff:f7:da:e3:a7:88:bd:9a:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:10:E1:4A:A4:E3:D0:5B:97:3E:E3:91:7B:D9:6C:24:13:11:C3:13
            X509v3 Authority Key Identifier:
                keyid:21:A7:9D:2F:0C:2D:26:0B:1D:7D:D4:81:9B:E2:55:B1:49:91:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21A79D2F0C2D260B1D7DD4819BE255B149917BAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F4D8221D5720392C9C4D58EBE8E647D6916C55C606B2576137A2212C706761A5/0/323830333a393539303a623030303a3a2f33362d3336203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:01:21:d8:40:15:57:3b:da:2f:f6:33:80:5f:9f:d0:09:bb:
         7c:4e:e3:ed:26:1f:67:f4:d1:41:53:a5:b5:0a:2b:c9:6a:c2:
         fa:bd:eb:b1:10:e5:44:ea:24:c0:86:c2:ea:83:e9:75:29:97:
         98:be:e8:ad:39:5b:69:9e:4c:22:7e:1d:39:58:78:46:ed:23:
         17:47:26:8b:24:78:70:7c:9d:1d:25:b7:95:c6:4f:8c:1c:0d:
         bd:d1:63:e9:79:63:7f:85:22:93:ba:83:db:fe:6e:0d:58:0d:
         31:bd:f2:2c:e5:a5:58:6a:47:24:97:b0:92:e4:88:2c:36:2d:
         7b:e6:d1:f9:4b:b7:9f:69:b4:b4:d9:5b:fa:f6:a4:5e:f9:68:
         ff:cc:1d:68:76:f1:3b:3b:40:26:51:58:45:fd:c6:a4:45:d0:
         7d:cc:3d:80:26:3a:3f:c1:9f:69:51:1b:ab:a2:74:8b:69:28:
         89:b0:7e:65:be:20:e4:97:61:d1:19:38:df:5c:bf:68:54:1a:
         e5:cf:a1:3c:9b:d2:f8:57:d6:bd:e9:01:f3:98:9b:26:b3:b5:
         a2:1b:91:bd:0b:60:f7:de:42:4e:38:b4:14:b4:63:ab:01:f6:
         77:02:8d:41:96:c9:ff:72:a3:ea:d9:27:5e:b7:20:71:6c:fa:
         4b:79:31:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----