Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/323830333a316631303a3a2f33322d3438203d3e20323732313532.roa
File:                     323830333a316631303a3a2f33322d3438203d3e20323732313532.roa (raw, json)
Hash identifier:          zTSGhGTkTCAH6zsxvvBlAjk40oGDytEBhp7Bbe3b3F0=
Subject key identifier:   AD:39:46:41:06:AF:81:7E:A1:C9:E5:E2:91:5A:E5:2C:2C:7F:0A:FD
Certificate issuer:       /CN=2F04FD11390F25856E2C138CD67BF473814525F2
Certificate serial:       2CCD9954C4A923D05FD6FCF2ADB15BF1F09A8259
Authority key identifier: 2F:04:FD:11:39:0F:25:85:6E:2C:13:8C:D6:7B:F4:73:81:45:25:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F04FD11390F25856E2C138CD67BF473814525F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/323830333a316631303a3a2f33322d3438203d3e20323732313532.roa
Signing time:             Fri 20 Dec 2024 13:30:00 +0000
ROA not before:           Fri 20 Dec 2024 13:25:00 +0000
ROA not after:            Fri 19 Dec 2025 13:30:00 +0000
asID:                     272152
IP address blocks:        2803:1f10::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cd:99:54:c4:a9:23:d0:5f:d6:fc:f2:ad:b1:5b:f1:f0:9a:82:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F04FD11390F25856E2C138CD67BF473814525F2
        Validity
            Not Before: Dec 20 13:25:00 2024 GMT
            Not After : Dec 19 13:30:00 2025 GMT
        Subject: CN=AD39464106AF817EA1C9E5E2915AE52C2C7F0AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:ae:eb:43:ab:f7:2b:4b:e4:c9:6e:1c:a9:
                    ac:8c:ca:04:da:90:6a:d6:71:3c:f7:0b:93:4f:c2:
                    27:5b:8e:14:a3:2c:7e:f9:e9:6d:1f:17:4e:0a:61:
                    0f:ee:36:c7:a1:07:40:9e:84:02:34:8d:1e:9a:23:
                    40:01:8c:5e:4f:78:a8:84:c8:a4:f1:cc:8c:13:58:
                    3b:14:c7:c1:74:ad:ac:90:e2:ae:b6:98:7a:2b:c7:
                    d0:05:06:59:3d:35:6b:59:7f:7e:ed:95:36:95:f5:
                    12:8d:ec:df:43:51:5d:5c:f4:fb:34:c5:9c:9a:0f:
                    fd:10:92:14:d0:7c:ac:8f:8f:33:82:09:13:8b:3e:
                    11:3e:3f:69:72:bd:25:6f:75:fa:d8:8d:31:03:fd:
                    b5:00:05:6a:33:03:09:85:e0:0d:56:d6:d0:38:50:
                    e7:7c:2a:8c:b5:c0:19:17:44:30:60:c5:01:63:02:
                    b5:ab:12:bb:a6:ff:3f:fd:21:f0:e5:24:19:f5:36:
                    5b:0e:00:44:e1:7f:c9:8b:b6:00:3a:ce:68:62:77:
                    68:c3:75:4b:94:da:c3:8d:75:db:d3:b6:e7:9b:d2:
                    f4:d0:bc:07:50:eb:2b:25:50:80:ce:b4:0f:03:72:
                    bb:68:ef:63:bb:18:af:c0:c0:f7:c5:03:18:0f:fc:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:39:46:41:06:AF:81:7E:A1:C9:E5:E2:91:5A:E5:2C:2C:7F:0A:FD
            X509v3 Authority Key Identifier:
                keyid:2F:04:FD:11:39:0F:25:85:6E:2C:13:8C:D6:7B:F4:73:81:45:25:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/2F04FD11390F25856E2C138CD67BF473814525F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F04FD11390F25856E2C138CD67BF473814525F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4053E15793D8BA738124B70F97D5B90469FF1A29B0A57E142AF6DD4D81111C9/0/323830333a316631303a3a2f33322d3438203d3e20323732313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:b3:e2:8a:ab:df:9e:f4:ad:a3:30:71:4e:59:38:ed:04:62:
         0e:88:55:1e:e7:da:22:87:f8:0f:2f:04:6c:b3:dd:1a:1f:c8:
         e3:89:ff:3a:4a:c3:77:69:19:96:cf:f6:87:1c:a1:d3:9e:70:
         a0:91:08:3a:00:ea:6c:88:a4:09:00:fb:ca:01:8d:5b:22:cc:
         ec:bd:c3:9d:3b:0a:a8:a4:c0:77:4b:8b:53:98:b5:70:f4:2e:
         67:37:1b:85:a3:4c:1d:97:ab:30:1a:52:8f:43:12:1d:58:bc:
         08:31:1b:bb:e5:39:24:1b:c5:fc:25:7d:fc:1a:4d:b0:ab:1d:
         20:00:65:f6:d1:03:27:15:1f:be:a6:c2:bf:74:a1:e6:95:f9:
         d9:2f:23:99:5e:60:55:b8:aa:b9:32:a5:2c:b5:ca:29:63:1e:
         b5:fb:7c:09:fc:7f:74:93:71:28:2a:92:46:e4:f2:d8:37:08:
         95:24:8b:cd:74:a6:77:6d:07:b8:2b:0c:89:12:f7:e3:30:ef:
         0c:3c:b0:7b:23:2a:3c:92:17:4c:7e:cb:64:b0:cb:a8:04:09:
         a2:04:00:48:fd:f7:88:07:d2:aa:48:59:36:35:32:b3:1b:8c:
         bc:20:37:9e:e0:9d:31:0c:0f:c6:83:a2:a3:55:4d:67:7c:54:
         07:5f:be:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----