Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa
File:                     323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa (raw, json)
Hash identifier:          TgUNKF4CKH0yw4BV/0q9BRatow5y/8SK8kILOZYbehA=
Subject key identifier:   85:69:CB:7E:4B:2C:B3:9E:33:A2:27:D5:6A:8F:C5:A4:73:BA:79:62
Certificate issuer:       /CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74
Certificate serial:       3432D975C8AABF84796DCB2C0E4F88C7BB106AAA
Authority key identifier: 9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa
Signing time:             Tue 05 Mar 2024 18:19:55 +0000
ROA not before:           Tue 05 Mar 2024 18:14:55 +0000
ROA not after:            Tue 04 Mar 2025 18:19:55 +0000
asID:                     272146
IP address blocks:        2803:d090:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:32:d9:75:c8:aa:bf:84:79:6d:cb:2c:0e:4f:88:c7:bb:10:6a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74
        Validity
            Not Before: Mar  5 18:14:55 2024 GMT
            Not After : Mar  4 18:19:55 2025 GMT
        Subject: CN=8569CB7E4B2CB39E33A227D56A8FC5A473BA7962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:2b:ca:33:91:1f:86:be:f0:0c:6a:b7:dd:
                    26:82:e2:73:14:55:85:61:3d:20:9c:dc:8a:fd:56:
                    73:b9:85:5b:68:dc:f4:34:0a:88:57:b1:2f:8d:b1:
                    13:3e:cb:79:57:6b:6c:f9:3e:97:10:ca:10:ee:fb:
                    f4:e0:33:82:9a:64:b8:55:3c:f3:f0:23:3b:e2:7e:
                    93:34:05:46:d5:8a:68:6f:33:69:fb:51:c4:6c:8d:
                    99:4a:dd:2e:a8:e6:36:5c:da:03:fd:c7:15:8c:1b:
                    ef:18:9e:73:a2:b0:1e:df:1c:bc:4e:0a:fb:0f:84:
                    38:92:49:70:46:7e:81:ea:c1:af:c6:45:a5:e5:75:
                    43:44:de:67:62:81:5c:b2:97:11:f9:08:f3:38:1d:
                    85:34:e6:d2:ee:fd:4b:fb:67:e7:76:8d:aa:5c:45:
                    de:69:ea:97:a7:35:07:03:9a:3d:bc:19:de:67:8c:
                    5e:a4:35:fc:7c:b1:26:1d:65:e4:d4:c3:2e:e9:f6:
                    35:27:12:74:db:11:5e:8c:a8:d2:d5:b2:de:56:c5:
                    d7:27:24:54:08:6c:1a:e5:8e:59:7e:db:93:73:ce:
                    04:f2:76:c2:f0:3f:57:7f:80:7d:23:40:11:b7:b7:
                    7d:de:d0:a2:5f:cc:cd:16:09:f5:ae:d5:6e:e8:f0:
                    35:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:69:CB:7E:4B:2C:B3:9E:33:A2:27:D5:6A:8F:C5:A4:73:BA:79:62
            X509v3 Authority Key Identifier:
                keyid:9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a323030303a3a2f33362d3336203d3e20323732313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d090:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:af:51:bf:66:83:ae:ad:af:8c:4a:e1:00:6a:25:3e:cd:b8:
         4d:4d:7e:e3:d4:81:a6:d5:8e:12:32:17:e9:05:c8:10:94:74:
         90:a8:7a:64:2d:2a:5c:ec:99:e5:fd:dd:bb:01:a2:20:07:af:
         3d:0e:32:6c:74:03:d3:58:58:91:19:f5:cb:53:01:50:77:dd:
         76:a5:08:c5:3c:5d:f1:ad:87:e9:80:15:bd:a1:e2:4f:11:e3:
         3e:ee:96:2b:67:19:be:16:6b:c3:0b:25:25:a9:2c:1c:32:68:
         58:c5:2f:cb:94:19:09:f7:bc:ef:d9:4f:8e:b8:5a:86:a8:43:
         2b:cb:0c:dc:c4:a5:7e:da:ac:61:0a:60:c2:13:38:1b:3c:4f:
         e5:af:a1:61:19:a6:92:42:d7:0c:74:ad:47:51:f3:08:c9:74:
         bc:ee:2d:c6:30:bf:66:e5:de:9a:39:26:57:be:fe:bd:ba:9f:
         b5:10:90:3b:0b:47:bb:32:80:e2:00:5a:d3:85:a2:21:39:bd:
         4b:c5:da:8a:04:fc:3a:d6:1b:60:70:18:c4:06:aa:79:65:9b:
         e5:2a:14:bb:3e:e9:64:aa:dc:e0:c2:04:43:b1:ac:66:77:7e:
         0d:c8:5f:f6:2a:bf:ca:82:86:44:0b:d3:56:99:fc:12:4c:c2:
         69:d5:af:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----