Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3438203d3e20323639393138.roa
File:                     323830333a646438303a3a2f33322d3438203d3e20323639393138.roa (raw, json)
Hash identifier:          5Vlj4NMsgmTO9MtU/5Ge7BHnkFTOu4GZdiL8qZ0AZCY=
Subject key identifier:   B8:99:A2:86:B8:10:C6:94:83:57:03:93:33:72:68:E0:5C:82:62:25
Certificate issuer:       /CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
Certificate serial:       65B210BFD300FD7CEE44B34701EC0BE7E7AAF95E
Authority key identifier: 00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3438203d3e20323639393138.roa
Signing time:             Fri 04 Oct 2024 21:40:00 +0000
ROA not before:           Fri 04 Oct 2024 21:35:00 +0000
ROA not after:            Fri 03 Oct 2025 21:40:00 +0000
asID:                     269918
IP address blocks:        2803:dd80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b2:10:bf:d3:00:fd:7c:ee:44:b3:47:01:ec:0b:e7:e7:aa:f9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009F5D7F1385A8FAC494CA7B348BE4F0C680E66F
        Validity
            Not Before: Oct  4 21:35:00 2024 GMT
            Not After : Oct  3 21:40:00 2025 GMT
        Subject: CN=B899A286B810C69483570393337268E05C826225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fe:e5:41:ce:a7:29:7c:48:b1:e8:23:83:c8:
                    f7:33:65:04:95:71:ee:99:35:62:a5:c7:31:31:c5:
                    65:a5:40:5d:af:a2:82:a9:e6:5f:98:a2:1e:24:99:
                    19:6e:e6:3c:bd:97:bb:00:ff:3e:d9:58:f1:86:c9:
                    96:bd:b1:c4:9f:23:72:58:b7:a7:f7:96:b2:4d:59:
                    7b:43:c0:bb:49:c6:b0:24:dc:cf:34:a8:0a:a1:65:
                    0b:09:40:3f:7c:15:ec:70:1a:b3:78:64:ad:f7:98:
                    a8:10:6c:f3:84:d2:69:a4:b3:77:28:69:73:de:7b:
                    cb:6c:71:8b:18:65:a9:90:cd:0e:78:8b:f7:e9:07:
                    9e:0e:d4:bc:42:74:5e:d0:20:3b:50:e2:ab:de:d8:
                    7c:80:cb:f1:5d:d3:29:3a:d8:40:3a:15:2c:8c:5f:
                    59:97:64:8a:02:55:a8:0a:a6:c6:3c:ee:c3:b5:5f:
                    64:64:75:eb:e1:0d:3f:08:90:63:78:49:dc:16:5d:
                    4a:28:c4:82:5d:61:e9:2e:12:d9:25:1d:05:2e:dc:
                    25:fe:70:c0:c2:5d:12:ba:14:7d:8b:11:cc:72:44:
                    b2:24:b2:c3:d0:9d:53:3b:45:28:1c:f3:f4:6b:32:
                    ff:cc:a2:40:bd:5b:1b:3b:e6:8d:b1:a5:5a:9c:8a:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:99:A2:86:B8:10:C6:94:83:57:03:93:33:72:68:E0:5C:82:62:25
            X509v3 Authority Key Identifier:
                keyid:00:9F:5D:7F:13:85:A8:FA:C4:94:CA:7B:34:8B:E4:F0:C6:80:E6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/009F5D7F1385A8FAC494CA7B348BE4F0C680E66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0328B18C5676A937ACD46D1956506C1A9DD781F270D2992C529B17585C065B59/0/323830333a646438303a3a2f33322d3438203d3e20323639393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:75:bb:5c:24:69:4d:6b:e7:10:9c:dd:ed:c4:5d:e3:57:c5:
         55:9b:2a:14:cf:bb:23:3a:91:6f:e1:6c:a1:36:84:c0:ea:6b:
         ce:b3:04:1d:d0:01:9d:7a:1f:2d:bb:ce:a1:bd:4a:d3:a4:b7:
         6e:a0:58:16:e8:bb:14:84:e4:e5:b9:71:13:ff:62:d3:6d:39:
         d7:a7:59:20:58:24:2b:98:bd:ab:19:ef:8d:a1:f6:7e:cc:53:
         4e:82:e8:6c:af:bb:fb:d9:66:2a:95:ce:64:85:7c:95:1e:0b:
         01:d3:b2:c9:29:95:8a:b7:95:2c:ed:a2:72:61:91:d6:49:44:
         44:60:91:13:8f:f5:03:90:ce:a0:84:68:51:f0:8f:3f:82:0a:
         33:88:b7:dc:60:f5:2d:4a:dc:2d:a2:5c:f6:a0:5d:aa:b3:a5:
         d0:8a:e5:fd:da:3d:5f:ed:34:47:9b:6f:35:b6:01:e9:1f:92:
         12:f0:e4:38:22:4c:9f:f2:f1:51:e6:16:98:85:28:ed:b0:7b:
         39:86:f0:98:b0:b8:85:38:cd:45:65:cd:de:cd:3c:94:b7:c3:
         31:b6:97:fe:f6:66:18:55:6a:75:34:13:91:4f:16:9a:ef:e7:
         47:b6:29:04:41:59:18:84:06:28:f9:a4:e8:4b:2a:2f:22:f4:
         ee:e4:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----