Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/323830333a633965303a3a2f33322d3334203d3e20323730303132.roa
File:                     323830333a633965303a3a2f33322d3334203d3e20323730303132.roa (raw, json)
Hash identifier:          mt/IHt2Mu4QJSFkSSBsEeJnSH/4Aph+EgFN12dQ4fnU=
Subject key identifier:   BF:DC:35:6B:2F:AF:27:C2:0E:B9:05:5B:3B:5D:55:73:23:B1:30:A2
Certificate issuer:       /CN=C49792A535C3870BDA2A89A00898F9EA1F1F61F0
Certificate serial:       6801B6E1BC6C7E5242E4510B283CF7846171B925
Authority key identifier: C4:97:92:A5:35:C3:87:0B:DA:2A:89:A0:08:98:F9:EA:1F:1F:61:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/323830333a633965303a3a2f33322d3334203d3e20323730303132.roa
Signing time:             Tue 05 Mar 2024 17:45:21 +0000
ROA not before:           Tue 05 Mar 2024 17:40:21 +0000
ROA not after:            Tue 04 Mar 2025 17:45:21 +0000
asID:                     270012
IP address blocks:        2803:c9e0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:01:b6:e1:bc:6c:7e:52:42:e4:51:0b:28:3c:f7:84:61:71:b9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49792A535C3870BDA2A89A00898F9EA1F1F61F0
        Validity
            Not Before: Mar  5 17:40:21 2024 GMT
            Not After : Mar  4 17:45:21 2025 GMT
        Subject: CN=BFDC356B2FAF27C20EB9055B3B5D557323B130A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d4:2b:48:59:fa:6f:2f:99:7b:12:f3:6f:fb:
                    f4:22:9c:f4:68:62:4b:f1:69:19:e9:40:36:d8:4d:
                    7b:a2:4a:60:74:28:5e:85:6b:3a:5f:69:3e:84:12:
                    d6:97:42:63:97:a3:3a:ba:c1:75:7f:a3:42:f5:a0:
                    eb:6b:c3:31:6d:d1:56:52:bb:08:6b:f5:27:15:86:
                    ac:07:d1:01:6e:70:9d:e7:a0:9b:cf:6b:0a:3d:b9:
                    b1:9c:30:3d:83:e4:e2:32:93:b7:d4:2e:bd:75:56:
                    3a:4a:ae:d7:3a:9c:70:72:e6:1d:6e:63:7b:97:f5:
                    9e:16:d9:d8:71:9f:26:b9:51:f4:37:e1:7f:7c:62:
                    e7:f7:10:2e:f6:dd:5a:3d:48:ef:0a:fe:09:63:4f:
                    b5:e9:f3:5d:fe:0a:d9:da:f3:66:1a:16:3e:36:bc:
                    97:f9:ec:3f:bf:c3:04:38:69:07:de:27:c8:f1:b3:
                    66:97:ef:fc:92:00:a8:bf:38:51:f3:ed:68:c7:c5:
                    ce:8f:2e:74:87:ba:93:4b:39:d8:32:13:cd:69:59:
                    b7:8c:d7:39:7a:15:a7:f2:1b:78:6b:d4:d8:a5:a1:
                    0d:86:ac:34:ed:d6:51:7a:81:8b:dc:28:f3:40:92:
                    44:70:f0:c9:18:11:a2:44:e1:e8:ae:b7:2c:38:87:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DC:35:6B:2F:AF:27:C2:0E:B9:05:5B:3B:5D:55:73:23:B1:30:A2
            X509v3 Authority Key Identifier:
                keyid:C4:97:92:A5:35:C3:87:0B:DA:2A:89:A0:08:98:F9:EA:1F:1F:61:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49792A535C3870BDA2A89A00898F9EA1F1F61F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E5FDB59006F1F42ECD187BE769E3CFA507E34FB73C0492C5BB04543CD43109C/0/323830333a633965303a3a2f33322d3334203d3e20323730303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:49:9a:e1:1e:ca:f4:0e:96:7f:bc:40:7e:ff:95:96:18:
         c6:20:16:32:59:33:7b:f0:03:84:db:85:6f:e4:30:54:74:92:
         28:c2:7f:f8:bd:bb:99:4a:3d:ea:86:5d:ad:b9:f2:c6:93:73:
         12:bc:08:0d:72:71:64:34:16:ed:51:71:06:df:12:80:63:82:
         4b:0a:ed:03:8e:d8:f4:67:a9:ff:32:80:07:a9:28:f3:f4:2f:
         c4:3a:eb:78:89:91:9f:67:17:68:a8:d2:e7:37:96:48:5c:05:
         f3:72:12:a8:86:55:a0:5b:2b:6b:a9:ff:18:a3:da:62:a3:a6:
         1b:b4:98:e2:2f:93:c3:34:60:87:e4:f1:c1:ad:cc:fe:f2:fe:
         73:52:af:f3:b0:b3:35:de:ec:b2:1a:b9:d3:80:cd:4c:94:b7:
         dc:99:aa:c8:35:46:a3:2c:21:b0:fb:36:86:59:9a:28:e4:a2:
         ff:33:3f:9c:a6:7e:27:8d:35:7b:a8:e9:99:ca:3f:2d:5e:a1:
         06:3c:38:59:9a:e0:d8:c8:8c:d6:d6:09:b0:a2:3e:57:c9:41:
         51:95:65:c9:e8:71:3a:55:ac:71:4b:25:a3:77:4d:d5:cc:d3:
         a6:d3:bd:f3:82:c7:03:13:7e:1e:5d:60:8c:06:2c:93:a7:2a:
         e0:39:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----