Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a3a2f33322d3438203d3e20323730303935.roa
File:                     323830333a383765303a3a2f33322d3438203d3e20323730303935.roa (raw, json)
Hash identifier:          mSCas6k5prF70mTCaaOTQmeLQLO//D001KfZNn5XwRU=
Subject key identifier:   1D:11:E7:64:9F:B0:6D:F0:6D:5F:B6:16:54:5F:D7:62:2C:9E:F7:A9
Certificate issuer:       /CN=D8A18733999685921EBB92D26BE397469451AF8B
Certificate serial:       504CF380B1F9A2473F05DC118F1E11600363A47A
Authority key identifier: D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a3a2f33322d3438203d3e20323730303935.roa
Signing time:             Fri 07 Jun 2024 16:40:00 +0000
ROA not before:           Fri 07 Jun 2024 16:35:00 +0000
ROA not after:            Fri 06 Jun 2025 16:40:00 +0000
asID:                     270095
IP address blocks:        2803:87e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4c:f3:80:b1:f9:a2:47:3f:05:dc:11:8f:1e:11:60:03:63:a4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A18733999685921EBB92D26BE397469451AF8B
        Validity
            Not Before: Jun  7 16:35:00 2024 GMT
            Not After : Jun  6 16:40:00 2025 GMT
        Subject: CN=1D11E7649FB06DF06D5FB616545FD7622C9EF7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:d7:b4:eb:39:f2:6b:df:11:bf:cb:33:4f:
                    4e:25:16:84:e2:20:0e:42:43:e4:6b:63:45:f9:f7:
                    6d:4e:1e:b5:03:1a:ba:37:b4:ea:03:4a:2e:47:40:
                    c3:05:3f:08:33:b0:97:8a:50:ab:72:18:1a:3b:e7:
                    42:69:a1:8d:a0:56:5d:38:cf:0d:48:4c:41:f6:c6:
                    29:4b:24:b5:e4:23:a7:3a:02:5c:e8:59:4e:e0:3d:
                    38:bc:8f:89:08:53:6f:46:ac:cc:2a:7b:9c:a4:0e:
                    49:a7:f0:c9:77:d7:e0:8c:5e:27:21:dd:a1:64:93:
                    00:8e:10:c7:f1:4e:90:b7:4b:79:a3:f9:fb:5d:79:
                    dc:cd:fd:d3:c3:87:ee:12:d2:e1:00:ce:8a:4a:9a:
                    1d:61:a4:9d:14:e5:54:5b:69:36:77:f9:93:3b:74:
                    b3:7d:cb:47:04:c5:ac:c7:a8:4e:32:a4:ba:cd:36:
                    47:66:df:08:a1:30:7e:fb:6f:86:8e:02:d0:5b:b3:
                    33:2c:94:11:e8:cc:1b:c8:c5:00:1c:f5:1e:9d:e9:
                    2f:84:93:d8:87:53:3e:73:f0:6f:2c:12:9e:52:b8:
                    31:e2:c0:cd:1f:9c:60:dc:cc:bf:60:4e:f9:2f:d2:
                    dd:0d:8d:5b:7a:21:8c:3c:cc:a0:e9:7b:f7:a7:90:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:11:E7:64:9F:B0:6D:F0:6D:5F:B6:16:54:5F:D7:62:2C:9E:F7:A9
            X509v3 Authority Key Identifier:
                keyid:D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a3a2f33322d3438203d3e20323730303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:20:2f:9d:06:0a:2a:32:16:3d:8d:16:3e:88:d3:58:98:80:
         46:68:d0:69:22:6f:e5:6f:fe:fc:fd:40:50:65:d4:7f:67:e9:
         3b:36:99:63:f6:19:cf:bf:a5:6a:bf:4a:16:83:a4:99:76:31:
         be:80:bf:fc:23:46:1d:fd:ab:98:cc:96:c5:47:ab:63:e9:84:
         a4:70:dd:31:c0:d4:a8:e8:30:e0:ab:7c:52:a3:6d:8c:83:d7:
         c0:19:19:c8:bf:d2:b8:a4:9d:fe:44:60:c3:98:ae:3f:d4:54:
         48:7b:b0:2e:02:41:21:00:19:f4:db:c3:0f:08:56:46:3a:7e:
         bb:e3:cb:a3:b1:eb:f4:f9:b6:0c:f9:2d:6b:af:bb:fa:f7:11:
         1b:a9:0d:b8:ff:15:73:b9:42:7a:cc:6b:d9:12:c2:77:d4:41:
         d2:a0:f6:dd:49:e5:82:d2:d0:3e:b4:5f:d3:96:a9:77:08:d7:
         33:ff:7b:d4:14:93:9b:aa:7f:8e:d4:57:35:f9:79:6a:6c:93:
         ff:98:82:eb:91:2f:e3:c7:e2:ec:d8:c7:98:32:ee:61:5e:4b:
         df:fb:e5:2c:18:c9:fd:88:c3:61:96:2b:98:72:b1:35:96:65:
         50:d3:6d:f2:6c:d8:27:12:22:af:35:f9:93:92:13:78:bc:3b:
         6d:3f:ae:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----