Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f33392d3433203d3e203634313230.roa
File:                     323830333a663038303a326330303a3a2f33392d3433203d3e203634313230.roa (raw, json)
Hash identifier:          5X7t0DLrgvMkQafiJppOvnOzuDms4OcwX1tmIb1lxY4=
Subject key identifier:   AB:40:C8:26:40:70:33:A1:EF:D0:FF:F9:89:9E:93:AB:A5:4E:A5:F8
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       2F21C17AA80207CB5C3CE93B10E5A6F277083B4C
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f33392d3433203d3e203634313230.roa
Signing time:             Sat 20 Apr 2024 23:15:00 +0000
ROA not before:           Sat 20 Apr 2024 23:10:00 +0000
ROA not after:            Sat 19 Apr 2025 23:15:00 +0000
asID:                     64120
IP address blocks:        2803:f080:2c00::/39 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:21:c1:7a:a8:02:07:cb:5c:3c:e9:3b:10:e5:a6:f2:77:08:3b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr 20 23:10:00 2024 GMT
            Not After : Apr 19 23:15:00 2025 GMT
        Subject: CN=AB40C826407033A1EFD0FFF9899E93ABA54EA5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:29:75:3c:22:9a:a5:f8:f0:7d:82:31:40:0e:
                    8a:ad:bb:11:cd:0a:4e:85:40:57:a4:60:24:13:9e:
                    e7:07:18:51:41:5c:f5:49:9f:f2:70:a5:7d:74:0e:
                    16:02:89:ab:ed:36:d9:ef:3e:ce:2c:b8:d8:07:cc:
                    1b:d6:9f:42:9f:ce:b9:ff:f1:7c:3b:a1:2f:55:87:
                    4a:61:b6:38:a9:5a:50:df:df:0f:c5:60:fd:7d:ce:
                    48:2f:7b:25:0e:55:d4:a8:ad:0b:1f:57:72:90:49:
                    9d:9c:42:f4:9d:42:a6:6f:1d:4c:ec:3b:09:95:b8:
                    f1:ee:0f:d7:c9:47:1f:04:c7:8b:80:8f:55:3a:ae:
                    da:5f:04:78:32:c9:42:93:19:dc:fb:8f:45:c9:86:
                    e4:46:0e:11:4d:da:a8:5c:2b:1f:92:aa:4c:ab:34:
                    52:2e:b1:b7:2b:35:41:05:ea:17:6a:77:db:8a:b3:
                    59:83:f7:dc:e8:5f:80:a8:4c:4f:78:30:91:68:c7:
                    cc:a8:99:60:7f:ec:2b:40:9b:52:26:2a:85:a9:0f:
                    fa:bb:04:5e:cf:68:a3:b8:c1:9d:f4:b0:af:5e:d7:
                    12:39:92:86:bf:2b:7f:66:41:af:cb:ae:0e:89:9f:
                    ad:71:79:79:64:bf:d3:2f:2a:53:f4:db:ca:07:56:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:40:C8:26:40:70:33:A1:EF:D0:FF:F9:89:9E:93:AB:A5:4E:A5:F8
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326330303a3a2f33392d3433203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         0f:f0:dd:48:75:07:28:d4:98:ee:6d:52:05:52:72:9f:08:59:
         26:40:1b:6f:99:80:3f:00:86:10:4b:74:81:c3:34:b5:a6:76:
         95:5a:aa:b9:a6:cc:62:f5:f2:67:3a:7d:cf:ab:2f:51:6c:b3:
         14:ad:bc:a7:3f:3c:8d:d7:58:61:f2:46:b8:e6:23:f6:1e:51:
         0f:cb:80:ab:c9:f4:f5:84:cc:1e:28:45:95:e8:d0:b9:cb:bd:
         96:b6:ef:85:cc:c8:67:31:9c:fc:94:ce:6b:17:0b:b1:3e:20:
         0b:31:92:24:96:bb:9a:86:a7:be:bb:09:53:c0:d5:15:4a:c2:
         d9:18:9b:4c:c7:9e:29:75:99:83:88:e6:95:86:d5:24:0d:91:
         13:43:0e:89:d8:09:18:c2:11:16:d8:d7:4b:42:66:d1:3d:56:
         25:d0:20:4f:51:f0:98:ae:79:99:f2:17:89:20:cc:d3:b3:34:
         6b:ae:cb:33:d9:31:ba:f8:e8:01:0e:0d:64:f1:32:ba:97:e8:
         68:3f:21:9c:99:4f:86:44:bd:78:6c:cb:1e:45:be:6b:26:a6:
         7c:e6:3f:3e:cb:13:e7:87:4f:e6:b2:f5:6e:e5:fa:72:17:6b:
         75:e0:ea:d8:e9:41:5f:eb:c4:55:f6:61:fe:0e:f3:28:e6:fb:
         a2:f6:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----