Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/323830333a3938303a3a2f33322d3332203d3e203233343536.roa
File:                     323830333a3938303a3a2f33322d3332203d3e203233343536.roa (raw, json)
Hash identifier:          tHY1ibqaYO5SSWmke/swruXE9ZqSSHnU+pQkFALan0k=
Subject key identifier:   C6:35:53:06:43:61:1B:6B:03:B3:4B:29:F0:F3:36:4C:A8:F0:0A:C6
Certificate issuer:       /CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
Certificate serial:       16610ABFF264ABB901FE8344BD62ED13F7D7A4BF
Authority key identifier: A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/323830333a3938303a3a2f33322d3332203d3e203233343536.roa
Signing time:             Tue 05 Mar 2024 17:40:52 +0000
ROA not before:           Tue 05 Mar 2024 17:35:52 +0000
ROA not after:            Tue 04 Mar 2025 17:40:52 +0000
asID:                     23456
IP address blocks:        2803:980::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:61:0a:bf:f2:64:ab:b9:01:fe:83:44:bd:62:ed:13:f7:d7:a4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EC8475F98014B965F34B25A2A68F58AAEE199B
        Validity
            Not Before: Mar  5 17:35:52 2024 GMT
            Not After : Mar  4 17:40:52 2025 GMT
        Subject: CN=C635530643611B6B03B34B29F0F3364CA8F00AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:38:89:7c:3e:f3:b9:f5:5c:57:45:5f:40:61:
                    c8:6c:52:df:b9:e2:ff:7d:7b:78:4b:b2:1d:dd:f2:
                    26:88:7c:9b:0b:28:6c:08:2a:f1:39:47:8f:53:d7:
                    cc:9d:60:98:d5:d5:79:69:e1:59:cd:73:3a:44:37:
                    c0:2f:02:31:0d:7a:e6:74:bb:92:ec:6f:e7:ff:46:
                    cc:37:5e:38:51:a1:c6:75:17:b3:3f:5e:ec:a4:f8:
                    05:09:23:19:c1:94:90:39:04:8a:cc:1a:59:d7:1e:
                    2d:ee:31:fe:85:af:15:51:38:95:08:d7:9b:0e:3b:
                    aa:8e:de:8f:39:40:ab:d6:2d:45:d0:56:67:6f:e6:
                    5d:22:06:76:51:ae:27:50:d4:e4:4c:e9:a8:2a:7a:
                    b3:d8:ac:91:88:79:b6:23:f7:6a:f5:f1:65:0b:88:
                    f0:d6:f9:eb:39:4c:95:58:bb:e3:94:91:94:41:3c:
                    f8:a1:d0:60:51:2e:14:f4:c0:91:20:c7:ba:3e:77:
                    bf:d0:f7:6d:90:3d:24:b3:f5:a3:5e:6e:60:5e:73:
                    a6:2e:08:48:b4:29:64:28:10:e1:1c:31:7e:cc:43:
                    2e:92:03:fe:98:41:5a:cd:44:3e:2d:1b:9c:37:31:
                    3c:f7:10:d8:c2:be:bf:b6:bb:90:e1:e5:94:9b:8c:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:35:53:06:43:61:1B:6B:03:B3:4B:29:F0:F3:36:4C:A8:F0:0A:C6
            X509v3 Authority Key Identifier:
                keyid:A4:EC:84:75:F9:80:14:B9:65:F3:4B:25:A2:A6:8F:58:AA:EE:19:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4EC8475F98014B965F34B25A2A68F58AAEE199B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C966AF2D667C71DB8F7DC6CBE7AA3B54C9A1341ACA871B57B438DF8EAC761DC/0/323830333a3938303a3a2f33322d3332203d3e203233343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:980::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:0c:64:14:40:a7:3f:6a:ba:f3:97:72:a7:e1:58:a4:7b:
         7d:7a:b0:59:4c:6f:45:ed:90:f7:86:ec:c8:23:8a:f9:71:68:
         ac:ce:68:22:9a:ff:9e:80:4c:c1:ac:17:77:9c:bc:0b:c2:1b:
         ca:45:20:d9:9f:ef:74:5a:05:4b:0c:2b:aa:83:84:e2:c2:28:
         fa:19:82:5a:01:20:27:45:b3:dd:57:19:3f:aa:68:ef:2f:a9:
         35:13:11:da:f8:a1:41:e4:86:b8:de:b6:9a:14:b3:da:48:e4:
         b7:5c:3c:d2:2c:ad:90:4c:b1:dc:8f:dc:61:06:7c:17:60:12:
         04:e3:c0:0a:19:5b:ad:2b:98:c6:07:55:99:f2:5f:99:b3:0a:
         f9:89:5b:ac:73:3f:9e:d3:32:7a:b2:45:bd:2a:a6:aa:6b:3d:
         83:c4:cf:22:3e:7b:80:d8:7f:7b:fe:d9:77:ef:d6:24:63:19:
         d7:3c:c3:f1:64:c0:b7:8d:ed:f1:49:18:e2:e6:75:cb:a1:e3:
         41:b5:b9:29:6f:dd:bd:d6:07:36:98:7f:2c:10:cb:f8:ab:c0:
         6b:31:f7:b9:6a:d8:28:a9:e7:bb:fd:90:84:f3:88:39:ee:42:
         ee:ba:d9:49:94:94:ca:35:f1:c6:fe:91:f2:5e:0d:46:8f:67:
         de:d0:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----