Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326336303a3a2f34332d3634203d3e203634313230.roa
File:                     323830333a663038303a326336303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier:          VOL0yg66B/ZmkL5O7nTBPmcQhayACOdJWphuTABDIAM=
Subject key identifier:   4F:FB:9E:A9:CA:94:C1:2D:05:0A:4F:77:D6:CA:68:E7:09:23:9A:E1
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       560E22D93A4C406E8CF4B50F543D2BDE6ADCF01F
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326336303a3a2f34332d3634203d3e203634313230.roa
Signing time:             Tue 28 May 2024 02:40:01 +0000
ROA not before:           Tue 28 May 2024 02:35:01 +0000
ROA not after:            Tue 27 May 2025 02:40:01 +0000
asID:                     64120
IP address blocks:        2803:f080:2c60::/43 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0e:22:d9:3a:4c:40:6e:8c:f4:b5:0f:54:3d:2b:de:6a:dc:f0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: May 28 02:35:01 2024 GMT
            Not After : May 27 02:40:01 2025 GMT
        Subject: CN=4FFB9EA9CA94C12D050A4F77D6CA68E709239AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:3a:ca:d1:af:a2:d2:56:8e:b6:79:f0:65:
                    1f:ac:f5:dd:63:3b:dc:02:eb:9e:01:c8:e7:90:6b:
                    76:07:4f:e4:12:c4:7c:18:6e:bc:61:d0:69:44:bd:
                    92:08:d1:07:b0:99:1b:15:7e:58:74:b4:e3:a0:c3:
                    02:ac:b7:9b:58:59:66:e3:c0:70:ec:26:c7:44:1c:
                    26:49:f3:49:13:b3:30:c4:bb:ad:f4:ec:34:bd:de:
                    4b:8e:75:3b:96:a4:5e:55:27:37:95:23:28:39:c6:
                    0f:08:7d:8b:21:3c:9d:ee:c3:97:c0:fe:a5:c3:03:
                    9e:21:fd:c3:b2:7d:f9:13:07:50:af:df:3a:1d:7e:
                    ba:0a:96:6b:15:1d:ee:e0:c1:38:75:c9:e7:e0:bd:
                    c4:cd:bc:93:7c:89:9d:87:6b:ce:d8:84:ca:2b:65:
                    4a:be:9e:39:39:0a:31:21:ee:72:b0:b0:87:57:e7:
                    9d:39:d0:76:56:6d:ee:8e:50:34:5d:9c:24:1a:28:
                    81:94:a7:32:77:28:c2:23:68:ef:ae:f1:1a:1f:4a:
                    95:e3:33:b0:c5:08:09:d4:f4:4d:dc:0b:55:19:fe:
                    02:e8:95:1f:80:36:11:d8:f3:20:97:14:59:cb:83:
                    3a:02:4a:60:51:bf:dd:91:9c:2e:58:5d:7e:34:2c:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FB:9E:A9:CA:94:C1:2D:05:0A:4F:77:D6:CA:68:E7:09:23:9A:E1
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a326336303a3a2f34332d3634203d3e203634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2c60::/43

    Signature Algorithm: sha256WithRSAEncryption
         39:08:18:db:1f:0f:9a:be:43:dd:ad:a1:75:f6:4a:8a:e4:4f:
         3c:f0:fa:f3:26:a8:85:95:9d:9c:69:31:d3:22:fc:bf:ee:ba:
         27:13:8e:d7:b2:81:36:f2:7f:eb:b5:e9:5e:55:9b:0f:83:41:
         47:5a:56:14:45:a0:45:ee:d0:f3:7d:41:cf:ab:86:e5:d7:10:
         bb:c5:ef:12:ea:b7:2b:87:d4:8f:36:79:bf:f3:c3:8d:99:3f:
         97:10:61:8f:35:df:b5:26:2b:26:22:7b:0c:14:96:bc:38:de:
         68:d6:5b:80:b9:26:47:08:14:20:41:0c:f9:f1:43:09:d1:73:
         54:1a:c1:32:81:eb:1b:65:04:10:4a:63:b0:61:97:61:a5:30:
         ac:6d:44:f7:e8:e7:2b:b0:ff:23:79:43:35:43:83:7e:37:55:
         bf:34:da:40:cb:44:76:81:34:0e:08:ed:9b:03:03:a0:92:b3:
         d4:0f:45:05:e3:9e:c2:63:f1:3a:2c:7f:08:76:af:34:5c:41:
         a8:f7:04:9f:f2:db:72:d8:16:11:e5:4d:fe:7f:2a:76:38:1f:
         48:06:f5:80:fc:56:4e:be:4c:c8:ac:0a:b0:34:58:3c:c7:6e:
         98:fa:93:e5:0e:d9:8e:20:e5:29:d0:3e:af:7c:8e:be:1a:57:
         c3:04:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----