Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/323030313a313230343a3a2f33322d3332203d3e203238343631.roa
File:                     323030313a313230343a3a2f33322d3332203d3e203238343631.roa (raw, json)
Hash identifier:          jun7Eo2oV4UXQixmjn+9RnY7fg2wiG3MKZQ/mW2tvOI=
Subject key identifier:   EA:7F:5C:71:37:60:01:69:38:4B:40:71:DF:B7:53:04:B3:2F:D5:DA
Certificate issuer:       /CN=34090330F5A38CD685507A29EEE8D849546FBEBA
Certificate serial:       237F81DB178E7617F2B22FD984DE7C1A1F17DF36
Authority key identifier: 34:09:03:30:F5:A3:8C:D6:85:50:7A:29:EE:E8:D8:49:54:6F:BE:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34090330F5A38CD685507A29EEE8D849546FBEBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/323030313a313230343a3a2f33322d3332203d3e203238343631.roa
Signing time:             Mon 20 May 2024 19:55:00 +0000
ROA not before:           Mon 20 May 2024 19:50:00 +0000
ROA not after:            Mon 19 May 2025 19:55:00 +0000
asID:                     28461
IP address blocks:        2001:1204::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7f:81:db:17:8e:76:17:f2:b2:2f:d9:84:de:7c:1a:1f:17:df:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34090330F5A38CD685507A29EEE8D849546FBEBA
        Validity
            Not Before: May 20 19:50:00 2024 GMT
            Not After : May 19 19:55:00 2025 GMT
        Subject: CN=EA7F5C7137600169384B4071DFB75304B32FD5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:6f:3a:f1:36:cd:4d:47:cd:a4:a6:9e:7d:
                    71:83:2a:7b:c4:79:b7:93:37:15:44:cb:3a:c2:2a:
                    de:12:23:41:7a:14:2b:3a:87:a1:18:b8:98:44:56:
                    cb:2c:6a:0d:f8:22:ab:49:79:a9:b2:f7:15:e4:49:
                    1a:76:5a:18:fe:3f:6a:e0:e6:08:fb:02:c0:5e:d2:
                    b6:40:a8:09:b1:c3:53:d3:04:91:ea:89:68:e4:5d:
                    4a:e9:55:f0:10:7d:2b:d9:c3:4e:10:65:d4:37:e0:
                    a4:c6:b0:b4:72:dc:02:66:f1:f7:b4:8e:95:c6:c5:
                    8f:ad:b6:07:5b:bb:f2:ab:a9:a4:6b:e4:f0:d5:54:
                    a0:b8:ae:11:28:59:e2:9c:b8:ab:f1:a5:84:3d:50:
                    3a:b3:96:2a:4b:d5:10:1d:ae:e1:c9:96:5f:c2:02:
                    32:72:79:2f:9b:74:ef:32:8e:e7:73:bf:65:f4:2f:
                    ac:b1:e2:4a:9b:32:c4:ba:44:42:ef:6c:5a:c6:dd:
                    2e:ca:72:b4:61:5e:c2:b1:38:e4:51:4d:6c:53:a2:
                    cb:26:16:2b:24:39:9e:e9:1b:bc:cd:2c:45:a6:2b:
                    3e:9c:82:4e:05:a8:68:01:0b:41:e3:65:d3:8c:d1:
                    18:4b:70:9e:8b:d4:1d:cf:dc:5b:67:9b:3f:80:e7:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7F:5C:71:37:60:01:69:38:4B:40:71:DF:B7:53:04:B3:2F:D5:DA
            X509v3 Authority Key Identifier:
                keyid:34:09:03:30:F5:A3:8C:D6:85:50:7A:29:EE:E8:D8:49:54:6F:BE:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/34090330F5A38CD685507A29EEE8D849546FBEBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34090330F5A38CD685507A29EEE8D849546FBEBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A812FE5FCEFEAF70B7D79AEE8E84BC794BD60FF0BCA0C0C34AF26279041CEC28/0/323030313a313230343a3a2f33322d3332203d3e203238343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1204::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:48:b1:b3:f2:28:cf:5b:60:da:a7:c7:d3:68:9c:96:63:15:
         28:d2:15:3a:c1:23:a6:b6:05:2a:9b:3a:e9:37:65:00:0c:9a:
         54:98:3b:84:63:84:e3:0a:f0:22:fb:a1:2d:a8:62:fa:e8:82:
         cf:c4:fe:74:98:e3:2a:41:74:61:6e:f5:95:09:82:f4:14:e6:
         22:0a:5c:d2:2e:40:86:5b:27:65:d0:b5:7e:ce:e8:85:3e:e6:
         47:03:d6:71:a1:7b:b6:7d:95:3d:27:62:c4:85:09:2e:83:6a:
         9e:52:3a:c2:5e:5d:76:75:3e:7d:e1:3a:e3:69:89:52:3a:42:
         f1:cf:82:e6:df:f3:58:4e:07:65:a5:d7:79:45:2d:f4:3f:69:
         d8:58:d3:d3:53:f0:d7:e3:ab:f7:68:fb:94:6c:c3:4b:6b:1f:
         23:65:0b:83:9a:1e:cc:7d:83:93:1c:6e:99:4e:81:db:2c:87:
         9d:37:f2:11:52:72:9a:af:2c:4f:80:3a:a5:35:95:f0:41:14:
         3e:5c:36:2b:68:df:14:38:5a:c6:ba:cc:b1:8a:25:9b:82:75:
         b7:62:37:54:fe:7c:d1:9e:8b:3c:ec:63:6c:65:2c:30:a1:d0:
         31:0c:4c:87:04:de:4f:ce:9c:f6:ea:05:e5:ac:6e:81:25:33:
         77:79:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----