Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/323830333a356565303a3a2f33322d3438203d3e20323639393836.roa
File:                     323830333a356565303a3a2f33322d3438203d3e20323639393836.roa (raw, json)
Hash identifier:          Or7oF3ejSqfk2sFKBfnXZHdby1VuIGpp+g8CHGLpR4k=
Subject key identifier:   37:6A:59:44:53:AF:1B:AF:4F:52:9A:9D:06:D9:23:BA:02:34:93:D4
Certificate issuer:       /CN=172635E11B9F8AA76EFCB8104AD5A4078D472DBD
Certificate serial:       0C4A9C357AB680A46575651CDB068C5875392FBA
Authority key identifier: 17:26:35:E1:1B:9F:8A:A7:6E:FC:B8:10:4A:D5:A4:07:8D:47:2D:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172635E11B9F8AA76EFCB8104AD5A4078D472DBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/323830333a356565303a3a2f33322d3438203d3e20323639393836.roa
Signing time:             Tue 05 Mar 2024 17:46:24 +0000
ROA not before:           Tue 05 Mar 2024 17:41:24 +0000
ROA not after:            Tue 04 Mar 2025 17:46:24 +0000
asID:                     269986
IP address blocks:        2803:5ee0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4a:9c:35:7a:b6:80:a4:65:75:65:1c:db:06:8c:58:75:39:2f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172635E11B9F8AA76EFCB8104AD5A4078D472DBD
        Validity
            Not Before: Mar  5 17:41:24 2024 GMT
            Not After : Mar  4 17:46:24 2025 GMT
        Subject: CN=376A594453AF1BAF4F529A9D06D923BA023493D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:21:62:fc:35:f7:7d:f6:45:0d:2f:ca:f2:
                    e4:79:53:47:61:9d:61:ab:ab:22:79:f4:ce:18:b1:
                    1f:e6:8a:f5:72:59:06:98:85:85:d6:86:3d:ce:3d:
                    1a:df:42:c4:b5:8d:99:ef:00:73:b0:9c:9c:72:08:
                    bf:48:22:da:7c:9d:10:86:81:3a:e0:90:b8:80:4c:
                    c6:bd:64:f6:d4:77:fd:87:93:31:34:5b:aa:44:56:
                    aa:2e:47:98:29:95:45:74:e7:6e:64:20:3a:ff:c6:
                    10:63:21:be:12:51:b3:1e:06:a8:6f:cb:f5:b0:9e:
                    fb:da:f5:d2:4a:f9:83:28:51:23:5e:41:83:8b:5c:
                    c2:49:be:05:2b:7d:13:b5:57:97:15:66:0e:58:7e:
                    86:ce:55:10:de:e3:0a:28:22:4d:bd:6e:8f:1a:40:
                    16:f9:dc:2c:80:65:c6:7d:67:02:4f:6b:c3:81:b7:
                    52:9b:c4:19:ff:68:57:47:d0:e8:3a:f2:9b:04:8a:
                    14:2b:ac:86:e0:06:de:95:18:09:a8:40:ae:78:95:
                    2c:bb:2e:52:1a:5b:f5:31:c0:45:4a:e8:28:56:db:
                    ed:2e:14:0a:01:9b:56:7f:10:56:98:b9:2f:76:2c:
                    37:9f:15:26:91:ee:fc:ac:1a:56:1a:39:ce:e1:d1:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6A:59:44:53:AF:1B:AF:4F:52:9A:9D:06:D9:23:BA:02:34:93:D4
            X509v3 Authority Key Identifier:
                keyid:17:26:35:E1:1B:9F:8A:A7:6E:FC:B8:10:4A:D5:A4:07:8D:47:2D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/172635E11B9F8AA76EFCB8104AD5A4078D472DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172635E11B9F8AA76EFCB8104AD5A4078D472DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/323830333a356565303a3a2f33322d3438203d3e20323639393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:d3:80:0e:f0:81:21:0b:a3:21:3e:a6:38:51:8e:f8:74:51:
         7c:05:52:13:56:f0:1e:a3:30:db:8b:6e:58:a3:9b:f0:4f:6d:
         32:50:c9:79:5c:6e:22:36:bd:12:67:0b:4a:63:6a:76:ff:5c:
         cc:76:f4:22:56:3e:f5:be:d3:94:8a:99:6f:d3:25:30:48:d1:
         da:ba:31:5d:33:63:0b:7f:21:20:7b:90:44:fb:4a:55:3b:df:
         2a:06:36:dd:b2:92:a0:ee:a7:d3:50:59:a9:31:d2:23:cb:ba:
         14:a0:be:7c:a2:80:39:74:01:ce:c9:87:4b:0b:ed:69:c8:40:
         0b:c9:8f:46:4c:94:da:2f:56:95:aa:4f:49:b1:66:00:a3:bf:
         6d:14:56:63:6e:a2:b6:1a:85:2f:ec:64:8f:4d:ec:1b:dc:71:
         32:5c:94:ab:73:67:a8:b6:ac:99:a0:7e:35:6f:2b:70:72:fa:
         16:39:ef:f4:dd:09:12:08:37:da:a1:b7:73:9e:98:81:bd:c7:
         b9:97:6d:3d:62:2d:44:82:a1:bf:4b:01:bb:a3:f8:36:14:68:
         e0:b1:c1:ac:02:43:a1:9e:e6:9b:84:dc:4f:1e:0e:0d:32:c3:
         5b:94:7f:24:7f:70:5e:bc:7e:c2:d4:9c:9e:3b:12:b6:9c:d7:
         76:5b:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----