Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa
File:                     323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa (raw, json)
Hash identifier:          QIUnk8BpmR7+7Mx+lWL3FFqGDvJBckaMrj5OzhCOPAs=
Subject key identifier:   70:98:4F:B7:21:03:51:3B:50:3C:49:6C:19:21:64:E1:10:A7:58:2E
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       052E45FCA61421BB6FA028A3E08C35DA5EE5435D
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:11 +0000
ROA not before:           Tue 05 Mar 2024 17:50:11 +0000
ROA not after:            Tue 04 Mar 2025 17:55:11 +0000
asID:                     52458
IP address blocks:        2803:480:22::/47 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2e:45:fc:a6:14:21:bb:6f:a0:28:a3:e0:8c:35:da:5e:e5:43:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:11 2024 GMT
            Not After : Mar  4 17:55:11 2025 GMT
        Subject: CN=70984FB72103513B503C496C192164E110A7582E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:87:c5:b6:94:61:09:12:a0:52:cf:af:8f:
                    20:66:ff:95:5c:ef:9b:c2:70:80:01:2b:bb:06:55:
                    87:73:0e:1e:c1:e0:eb:64:f0:96:59:6d:32:b6:ff:
                    3f:63:68:30:29:70:6d:c0:60:9a:c3:1d:dd:c1:8b:
                    fa:d2:34:9a:a1:51:a2:07:ad:79:a7:18:bb:e0:13:
                    8c:11:53:e2:27:f3:15:b3:ae:ba:67:a2:3e:ce:35:
                    4f:af:2a:3a:0c:93:26:42:fc:43:cd:5d:69:80:06:
                    bf:c8:0e:5c:16:f9:65:cc:f1:10:03:15:22:5b:bf:
                    d0:21:3a:50:e2:d4:a2:ed:37:2e:7c:4f:1f:f9:24:
                    a6:02:cd:2b:49:bc:3d:08:40:21:49:64:81:ee:a6:
                    fb:45:21:ef:0d:2a:ef:0f:f3:c4:41:3c:41:9d:c6:
                    ea:6f:a2:14:4b:39:b4:12:93:f8:ca:51:a5:f7:40:
                    4b:56:74:69:1d:4f:72:98:87:17:6c:0d:7f:4c:98:
                    f8:63:f8:f7:84:9f:e5:c7:a9:a6:59:b9:00:a1:c6:
                    35:3c:5e:c5:43:e5:3d:c2:81:11:20:6b:53:85:8d:
                    28:25:ae:e7:2b:2d:b2:55:32:4e:2b:8d:3f:64:7d:
                    70:b3:a0:ae:4e:74:75:39:05:56:01:bb:b9:77:1c:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:98:4F:B7:21:03:51:3B:50:3C:49:6C:19:21:64:E1:10:A7:58:2E
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/323830333a3438303a32323a3a2f34372d3634203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480:22::/47

    Signature Algorithm: sha256WithRSAEncryption
         27:74:52:a4:68:89:93:3b:fc:4d:c2:34:e9:0d:55:16:33:1e:
         c6:d2:89:d3:d4:31:37:25:4a:00:a9:4e:f2:63:a2:65:0e:e3:
         2f:fd:d6:cb:7c:70:65:89:5a:11:dc:da:2f:f2:e2:bb:70:93:
         59:d6:84:9e:a9:78:dc:59:fa:76:1c:6d:a2:82:0b:0f:7d:6a:
         7a:27:b6:07:d3:4e:3f:94:a7:27:5f:92:58:17:74:93:4b:e6:
         31:12:7e:08:d5:1a:33:ff:85:d2:a7:b9:83:16:16:6c:f6:40:
         ab:27:16:3e:1d:52:bb:f8:2e:45:42:37:63:27:68:26:2d:c1:
         3b:5b:86:a1:03:eb:7c:9b:25:c8:7c:c4:c9:41:1f:76:81:5d:
         fa:a9:cf:4c:5d:2b:e8:20:e2:64:7b:fa:e3:dc:9c:2d:bb:9a:
         95:91:f9:a5:16:56:eb:fe:18:e7:ab:4e:e0:ba:35:e8:0a:83:
         80:85:c2:b3:56:08:35:65:88:2f:59:32:d7:7e:9e:72:be:7f:
         54:e4:92:14:23:d2:b2:f1:6d:43:3d:93:e4:f8:0d:6a:e4:32:
         e4:ae:08:30:19:46:e6:5b:f0:3e:97:5a:aa:9c:85:1f:3f:bb:
         5d:28:41:d2:dd:d4:37:b9:fb:a2:3f:19:68:77:a1:8b:5b:71:
         61:fc:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----