Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a3a2f33322d3332203d3e20323639383039.roa
File:                     323830333a633465303a3a2f33322d3332203d3e20323639383039.roa (raw, json)
Hash identifier:          V6huHJ00P7eltb/7X3Ps9RsC8dEOxGQpUXPYpjqpWQo=
Subject key identifier:   D2:CA:8E:24:69:88:59:26:88:6B:91:D5:0C:BF:99:63:C3:EC:1C:81
Certificate issuer:       /CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
Certificate serial:       2C4D068FF4CADB10FFB7F044139AFB2DC8D5D6C8
Authority key identifier: 3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a3a2f33322d3332203d3e20323639383039.roa
Signing time:             Tue 05 Mar 2024 18:06:35 +0000
ROA not before:           Tue 05 Mar 2024 18:01:35 +0000
ROA not after:            Tue 04 Mar 2025 18:06:35 +0000
asID:                     269809
IP address blocks:        2803:c4e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:06:8f:f4:ca:db:10:ff:b7:f0:44:13:9a:fb:2d:c8:d5:d6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D77237A7C9B2196D17146B7FDD8C031BE81DBF4
        Validity
            Not Before: Mar  5 18:01:35 2024 GMT
            Not After : Mar  4 18:06:35 2025 GMT
        Subject: CN=D2CA8E2469885926886B91D50CBF9963C3EC1C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:da:bd:bc:21:88:7a:22:37:cc:9f:34:07:
                    35:1a:50:c2:c0:3b:f3:a7:69:bc:f3:04:0a:ad:06:
                    35:76:2d:e0:c5:0d:4e:01:c8:2f:c2:cf:93:bc:03:
                    a3:79:42:69:ee:03:0b:8d:3c:52:1b:b5:80:68:fb:
                    a2:f1:83:ff:6b:d0:76:07:d4:2e:cc:63:ec:8f:cb:
                    89:df:70:a6:9b:a6:57:09:87:e3:ec:1f:d9:7d:42:
                    95:68:be:6c:fb:b1:79:16:89:55:92:b3:aa:39:f8:
                    7e:c4:0b:aa:c4:f8:ea:1c:6e:04:b4:91:ee:16:a6:
                    a8:6b:af:d5:06:dc:4e:e6:cc:a7:8d:ec:22:b0:54:
                    e3:69:c5:42:e7:73:16:61:4a:63:92:80:e4:c6:01:
                    26:09:7a:db:c1:3b:2d:7e:65:a9:f0:d2:c9:d4:77:
                    ad:42:ed:4f:18:f1:6a:f2:ad:a0:d7:d3:0e:58:10:
                    ba:be:ab:8f:5a:d3:d3:24:d9:e9:5e:82:5a:f4:0d:
                    74:fb:19:59:dd:34:c6:f4:45:97:ca:68:e0:11:37:
                    d5:53:2e:b5:f7:74:2a:bc:9c:82:55:20:a3:d2:9c:
                    99:35:2c:b9:75:3c:f3:3a:82:1f:45:d5:d9:4a:e7:
                    cf:b7:98:4f:37:e2:1a:57:36:b1:5f:bb:e0:be:de:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CA:8E:24:69:88:59:26:88:6B:91:D5:0C:BF:99:63:C3:EC:1C:81
            X509v3 Authority Key Identifier:
                keyid:3D:77:23:7A:7C:9B:21:96:D1:71:46:B7:FD:D8:C0:31:BE:81:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D77237A7C9B2196D17146B7FDD8C031BE81DBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0584C0A79D263758AD366ABC70AEE595CCAACB41A6F6A9C77347396AA83FBBAF/0/323830333a633465303a3a2f33322d3332203d3e20323639383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:16:1f:d8:97:77:44:0b:07:e1:e8:0f:3b:5f:8a:ed:cb:4b:
         50:a4:49:51:e0:1b:73:1b:f7:ef:ca:76:a3:89:ed:7e:6e:32:
         a2:86:24:08:9c:af:2e:60:8c:9c:cb:1c:3f:5e:2d:82:d7:f2:
         a5:b7:0d:36:a5:29:3b:49:62:cf:22:47:8a:96:7c:83:63:da:
         89:81:33:fc:d8:87:08:65:45:9f:73:2e:84:b8:f3:86:0b:51:
         e5:10:6c:52:f0:23:1d:8e:02:17:13:8e:bc:9d:b5:5c:fc:6b:
         2a:39:f6:3c:a3:35:95:b8:6b:87:c9:c9:48:c4:67:aa:14:85:
         64:88:21:95:b3:d4:a2:ba:59:10:44:a8:49:9b:fb:89:ae:27:
         6b:0a:07:fd:86:0a:e1:df:e5:3d:35:7a:1b:58:ff:6b:be:37:
         12:bd:f6:ac:74:22:bf:4c:e7:30:34:5f:c3:85:35:af:a9:83:
         98:c1:c8:15:e1:73:91:8a:0b:46:df:90:62:07:f9:6c:ef:f3:
         de:62:45:90:bd:d9:42:35:3f:3d:27:a3:d3:8e:8d:8a:fd:7e:
         d9:83:60:20:be:e4:b4:ac:70:72:ff:8b:f3:0e:da:26:01:d8:
         05:e7:ae:24:58:2f:e7:07:3a:11:a5:02:02:ff:10:2e:52:88:
         44:bc:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----