Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16F04F49098269C7AE45E7884292E5EDA9D2ACC4167A67F0D74D5FBF78198103/0/323830333a313034303a3a2f33322d3438203d3e20323633373531.roa
File:                     323830333a313034303a3a2f33322d3438203d3e20323633373531.roa (raw, json)
Hash identifier:          uulkniahymVOaxdCNSJlAtN950Ng+7dZo0KZisRuuMs=
Subject key identifier:   53:4E:CB:3C:F4:38:03:57:A4:41:85:00:71:D2:09:14:1B:DE:14:8E
Certificate issuer:       /CN=84B2102857DD9312F9D75A5E7F972DCBBD0799CC
Certificate serial:       2E720DEB97594FC3F03A8938C3F5EEA9DDF79B60
Authority key identifier: 84:B2:10:28:57:DD:93:12:F9:D7:5A:5E:7F:97:2D:CB:BD:07:99:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B2102857DD9312F9D75A5E7F972DCBBD0799CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16F04F49098269C7AE45E7884292E5EDA9D2ACC4167A67F0D74D5FBF78198103/0/323830333a313034303a3a2f33322d3438203d3e20323633373531.roa
Signing time:             Thu 11 Apr 2024 14:25:00 +0000
ROA not before:           Thu 11 Apr 2024 14:20:00 +0000
ROA not after:            Thu 10 Apr 2025 14:25:00 +0000
asID:                     263751
IP address blocks:        2803:1040::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:72:0d:eb:97:59:4f:c3:f0:3a:89:38:c3:f5:ee:a9:dd:f7:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B2102857DD9312F9D75A5E7F972DCBBD0799CC
        Validity
            Not Before: Apr 11 14:20:00 2024 GMT
            Not After : Apr 10 14:25:00 2025 GMT
        Subject: CN=534ECB3CF4380357A441850071D209141BDE148E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:09:30:48:61:8e:1e:c3:13:0d:cf:bd:86:
                    c0:54:e5:77:1c:9a:25:1d:be:57:7c:04:b0:d9:68:
                    b0:b5:47:ba:92:bd:da:e5:51:d7:e2:88:d7:6b:88:
                    fa:d1:0a:56:ff:67:80:c5:ee:82:b4:b8:b0:f1:57:
                    c8:1d:de:9c:92:16:cd:8e:11:94:9d:85:53:bf:da:
                    39:95:f3:e9:b1:06:c9:77:6c:96:30:28:93:e1:f1:
                    4d:5d:f6:b0:2a:c8:c3:8e:21:08:ea:88:47:ef:48:
                    bc:98:4b:bc:86:a6:11:77:65:51:25:ee:69:08:32:
                    b3:8e:92:89:9d:b0:e0:e5:8e:93:45:8e:3d:d0:99:
                    07:74:28:2f:ca:b0:47:71:85:dc:2e:f7:01:bd:d1:
                    7b:70:66:c4:cf:45:f7:47:e0:1c:df:3c:af:6f:05:
                    f4:7b:ed:e5:8d:61:25:20:2a:21:be:b4:0c:16:f5:
                    bd:b0:dd:92:75:b7:cd:57:0e:f0:ad:37:24:13:9c:
                    eb:19:b6:a5:73:79:ef:05:5d:bb:25:fc:ee:02:61:
                    d3:bb:f9:0e:0e:6f:84:29:2e:98:b1:91:40:54:02:
                    8f:02:27:37:0c:0a:c1:ba:5f:9f:65:5b:eb:db:93:
                    b6:4b:5f:7b:ed:07:8f:e5:6b:bf:12:85:95:49:23:
                    c4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4E:CB:3C:F4:38:03:57:A4:41:85:00:71:D2:09:14:1B:DE:14:8E
            X509v3 Authority Key Identifier:
                keyid:84:B2:10:28:57:DD:93:12:F9:D7:5A:5E:7F:97:2D:CB:BD:07:99:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16F04F49098269C7AE45E7884292E5EDA9D2ACC4167A67F0D74D5FBF78198103/0/84B2102857DD9312F9D75A5E7F972DCBBD0799CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B2102857DD9312F9D75A5E7F972DCBBD0799CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16F04F49098269C7AE45E7884292E5EDA9D2ACC4167A67F0D74D5FBF78198103/0/323830333a313034303a3a2f33322d3438203d3e20323633373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1040::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:26:fa:59:b3:bf:95:94:28:90:15:42:0e:42:80:af:a0:5e:
         fb:43:d0:65:54:24:3a:31:bb:6b:42:67:25:7c:7e:69:25:db:
         6f:01:b2:01:07:f8:b3:a6:66:38:56:85:44:80:54:f6:d3:c4:
         f6:d0:6a:58:77:fe:54:97:86:e9:d8:63:d7:e4:34:81:ea:e1:
         ed:27:24:50:07:d7:2d:9b:ea:d3:48:ef:5c:58:e0:c9:e4:1a:
         40:87:5f:83:56:89:da:02:43:7f:91:88:1c:0e:dd:61:54:51:
         77:de:7d:78:20:bd:ea:db:6c:b8:2a:ad:7f:71:a2:e4:a6:d5:
         8d:5a:21:a2:cb:de:d6:61:26:a7:fc:64:d6:d8:c1:4f:98:92:
         dd:25:8b:79:23:90:43:5b:02:df:f2:41:27:57:9e:84:0e:63:
         4b:09:ad:95:8a:ca:c2:ee:3b:4a:26:43:61:04:60:91:54:58:
         99:d2:d2:83:fb:04:fe:bb:46:ab:c9:f1:98:90:4a:db:77:e2:
         94:bf:3d:80:96:ab:b1:fd:c4:0c:a4:5d:05:e9:0e:06:cb:12:
         1c:b0:fa:8b:1e:cb:86:62:58:01:ea:8e:f2:24:40:fb:dd:f6:
         e6:17:7a:b3:8f:46:8b:76:f7:71:b9:d8:b8:dd:ad:f7:d6:8f:
         f6:fb:ac:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----