Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030313a3a2f34382d3438203d3e20323730303935.roa
File:                     323830333a383765303a633030313a3a2f34382d3438203d3e20323730303935.roa (raw, json)
Hash identifier:          gbSLDxyaLLI5njcnaAT6mMHmrPyEpuAN8Ma1epGLLvs=
Subject key identifier:   2F:8E:F1:D9:58:BC:F1:7F:78:11:CF:1D:46:31:48:06:40:A9:1E:C8
Certificate issuer:       /CN=D8A18733999685921EBB92D26BE397469451AF8B
Certificate serial:       7B38D401AC5D9A7A486D4ED2D1B543AD4C02903F
Authority key identifier: D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030313a3a2f34382d3438203d3e20323730303935.roa
Signing time:             Fri 07 Jun 2024 16:45:00 +0000
ROA not before:           Fri 07 Jun 2024 16:40:00 +0000
ROA not after:            Fri 06 Jun 2025 16:45:00 +0000
asID:                     270095
IP address blocks:        2803:87e0:c001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:38:d4:01:ac:5d:9a:7a:48:6d:4e:d2:d1:b5:43:ad:4c:02:90:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A18733999685921EBB92D26BE397469451AF8B
        Validity
            Not Before: Jun  7 16:40:00 2024 GMT
            Not After : Jun  6 16:45:00 2025 GMT
        Subject: CN=2F8EF1D958BCF17F7811CF1D4631480640A91EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:87:df:15:69:4e:bc:94:03:e1:2d:9e:1c:
                    3d:54:83:4b:3b:4c:8f:ce:83:87:92:a2:2f:f6:6d:
                    b7:59:2e:9f:c2:7a:5f:d8:86:3f:63:b5:06:ba:52:
                    b3:c9:48:bc:90:23:bd:a9:8d:38:17:76:09:29:5a:
                    1c:4c:99:7e:e1:a6:bc:8e:4a:3d:6c:36:25:a6:86:
                    48:66:fd:6a:de:cd:02:62:2f:0f:a7:ca:76:65:f3:
                    f5:83:53:f7:56:14:87:bf:07:63:5b:fc:17:87:3e:
                    2a:e5:53:a7:29:d4:9f:74:cb:9e:2c:22:2c:0e:35:
                    3c:3a:9e:86:6e:1c:07:27:48:71:5a:52:ea:dc:4d:
                    9d:de:b8:a5:76:1c:f1:88:27:f4:30:e3:cf:c3:f8:
                    ab:84:97:19:aa:1d:0d:a5:92:46:a2:2b:f0:35:12:
                    21:9c:44:7b:cc:22:6a:c0:0f:1a:ac:2f:51:12:a5:
                    a9:4d:8f:96:c9:7f:54:9a:ea:89:88:06:e4:5e:22:
                    30:da:5d:65:e0:7b:22:a3:5c:5a:f6:e8:8e:d4:21:
                    95:c2:65:e6:cb:73:32:06:bc:fc:cb:53:58:2f:ed:
                    6e:cc:68:80:1f:01:b4:ab:a5:53:a9:c6:9c:8a:78:
                    7c:75:10:26:9d:a9:39:2a:06:3b:72:2f:91:63:62:
                    9c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8E:F1:D9:58:BC:F1:7F:78:11:CF:1D:46:31:48:06:40:A9:1E:C8
            X509v3 Authority Key Identifier:
                keyid:D8:A1:87:33:99:96:85:92:1E:BB:92:D2:6B:E3:97:46:94:51:AF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/D8A18733999685921EBB92D26BE397469451AF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8A18733999685921EBB92D26BE397469451AF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118A2D9DB7BA5EC118AB3858AFF62E6C21C769CD839007C3844359790CAB056/0/323830333a383765303a633030313a3a2f34382d3438203d3e20323730303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:87e0:c001::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:b6:db:08:69:6c:5c:85:ba:de:79:af:b0:1a:cd:37:2a:
         54:fd:ac:37:84:2c:32:1a:54:15:b8:7d:09:22:07:6b:93:b0:
         36:a7:35:56:2b:6c:0b:f5:54:a9:48:73:80:ce:3e:ba:bb:99:
         74:d5:73:42:51:72:01:0f:de:c5:cd:06:dc:2f:fe:c4:34:b8:
         7f:6d:49:c6:e2:0e:e5:d0:af:7a:02:fe:08:d8:d3:50:22:0a:
         32:b0:49:8c:02:5f:05:e1:8a:b1:1d:8d:8c:2c:c7:73:2d:df:
         a1:88:80:f3:44:3c:30:ef:7e:58:b8:8e:78:ba:11:aa:e8:ce:
         e1:5e:d7:2d:7b:1c:50:c3:af:ba:15:43:7b:e9:89:b5:69:bf:
         62:ab:b1:66:ed:e3:c7:f5:79:9f:c4:30:94:6f:66:3c:0e:02:
         51:1b:b4:59:b9:cf:c1:95:4e:20:55:90:9f:ef:88:70:df:e3:
         e6:85:8f:f0:54:bc:7e:4a:5d:9b:31:f2:ac:0e:7e:cd:40:14:
         db:cc:d8:4e:fc:7f:70:20:f6:d1:59:d2:29:17:85:2d:87:48:
         2b:d7:aa:c5:50:1e:ed:87:f5:da:30:58:36:a0:0f:a7:df:6d:
         11:d7:7a:8c:b4:95:18:e2:a0:27:a4:a5:09:d0:42:fc:8b:8e:
         86:c0:f0:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----