Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a353030303a3a2f33362d3336203d3e20323639383039.roa
File:                     323830333a633465303a353030303a3a2f33362d3336203d3e20323639383039.roa (raw, json)
Hash identifier:          CrGslOtPg6KOUSF55jvD/dx/OSwc4cIG5iMGgqCc5Cw=
Subject key identifier:   43:CC:B9:5E:94:36:0B:A2:55:19:4B:C5:17:F2:19:F0:8C:36:4C:E0
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       45CD3CE84FA2BEC655D035EBD3A3D51E4F4BF99D
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a353030303a3a2f33362d3336203d3e20323639383039.roa
Signing time:             Tue 05 Mar 2024 18:06:33 +0000
ROA not before:           Tue 05 Mar 2024 18:01:33 +0000
ROA not after:            Tue 04 Mar 2025 18:06:33 +0000
asID:                     269809
IP address blocks:        2803:c4e0:5000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cd:3c:e8:4f:a2:be:c6:55:d0:35:eb:d3:a3:d5:1e:4f:4b:f9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Mar  5 18:01:33 2024 GMT
            Not After : Mar  4 18:06:33 2025 GMT
        Subject: CN=43CCB95E94360BA255194BC517F219F08C364CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:a2:20:43:ad:f2:e8:a6:0a:24:34:e5:89:
                    02:94:4b:39:ac:0d:a8:31:30:bb:79:0d:ed:ca:ba:
                    5d:19:07:22:15:10:3a:a1:c5:77:e7:4a:8e:12:7a:
                    88:d6:45:75:27:11:ef:64:80:b1:96:2b:34:ee:bf:
                    fa:2a:c5:9e:63:18:33:e1:a7:14:1d:ef:c9:56:a9:
                    e5:20:cc:da:6f:cc:b5:bc:ca:22:fe:93:d9:20:7b:
                    dc:c5:8b:3c:18:84:7f:6a:e2:f8:2e:a6:ba:8a:78:
                    a1:f4:f9:95:ed:81:a3:be:5a:a9:d9:d3:de:62:2a:
                    25:cf:e7:76:dd:55:c0:6a:c4:86:d5:27:e3:5a:37:
                    ec:29:b9:e4:b3:77:87:99:7c:e7:84:a9:65:d7:aa:
                    5a:e9:32:2f:46:bc:9a:b7:54:0c:79:dc:fb:43:b7:
                    4c:a5:26:8b:d1:d1:0f:8f:c6:b6:46:0e:b3:bf:bc:
                    e9:9c:77:79:a1:2e:75:e3:f7:59:8f:29:43:94:ef:
                    29:65:70:0c:ba:e4:49:a4:de:a9:2b:c0:d8:96:e3:
                    3d:d3:9f:01:9d:4f:8a:11:2f:df:d1:bc:25:56:d9:
                    61:00:47:98:27:b0:38:c9:01:77:d9:49:f5:30:8a:
                    6a:12:05:7f:f7:0b:3d:a6:44:72:5b:b4:43:04:5e:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CC:B9:5E:94:36:0B:A2:55:19:4B:C5:17:F2:19:F0:8C:36:4C:E0
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a353030303a3a2f33362d3336203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:02:75:09:d9:63:65:07:a4:d3:b4:95:fa:1a:7b:ef:5c:0e:
         e3:d1:2e:c3:3b:70:00:6b:f0:8b:4e:d0:01:a5:ad:c9:75:af:
         ce:12:15:cb:dd:d2:2d:ba:2d:a8:59:48:18:f6:c3:69:3a:a8:
         f4:8d:ca:da:25:e3:73:c4:13:8b:25:29:83:bd:43:69:73:ce:
         ed:7c:7c:2b:a3:d2:6f:64:5d:ac:dc:14:c9:e0:e7:54:78:3a:
         18:5b:f3:b8:bc:b6:53:86:50:96:28:d1:b3:94:65:ac:c1:10:
         62:a9:e9:00:a7:dc:b3:ff:cf:cc:97:8b:19:bb:f4:86:9e:1a:
         ce:13:f1:1f:88:8e:1f:9c:92:ac:13:31:83:9a:3b:3e:e6:01:
         ec:4e:07:f5:87:d5:2c:44:b1:70:bb:44:18:dc:29:e9:89:3d:
         84:91:79:0a:72:fc:a9:ed:f6:a4:db:19:17:c4:60:18:f2:6c:
         0d:e5:7e:4f:4c:3a:b4:56:d1:8f:03:c6:9f:4b:09:57:15:86:
         dc:a7:89:e6:62:a4:ab:62:41:e3:55:5d:a3:61:e4:a8:d5:6c:
         e2:da:7c:74:7c:d6:04:34:79:a9:bf:7d:f2:d1:dd:1c:a8:6d:
         01:ab:a9:8c:f9:d6:3d:05:fc:fe:58:fa:c8:c8:59:60:6b:16:
         6b:50:38:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----