Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3332203d3e203237383839.roa
File:                     323830303a3530303a3a2f33322d3332203d3e203237383839.roa (raw, json)
Hash identifier:          RYfkhznsmCe0nU4L3de6pBjqC5cCilhyTh8DhK7SF6k=
Subject key identifier:   DA:E2:61:60:0D:05:2B:8E:16:FA:11:AE:5C:6C:A1:11:4E:2D:46:1B
Certificate issuer:       /CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
Certificate serial:       7F02594B2B1AA6EE2E99B4726DBE59652AFD1350
Authority key identifier: 3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3332203d3e203237383839.roa
Signing time:             Tue 05 Mar 2024 18:18:27 +0000
ROA not before:           Tue 05 Mar 2024 18:13:27 +0000
ROA not after:            Tue 04 Mar 2025 18:18:27 +0000
asID:                     27889
IP address blocks:        2800:500::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:02:59:4b:2b:1a:a6:ee:2e:99:b4:72:6d:be:59:65:2a:fd:13:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2C065C974E700B1369EDF4ADBE1BD11272B09A
        Validity
            Not Before: Mar  5 18:13:27 2024 GMT
            Not After : Mar  4 18:18:27 2025 GMT
        Subject: CN=DAE261600D052B8E16FA11AE5C6CA1114E2D461B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:1d:39:b8:bc:64:f4:08:79:98:ab:38:e0:
                    33:f7:72:ad:2f:0b:da:69:c4:c9:30:2c:ef:a5:23:
                    39:df:aa:59:32:b5:55:a3:ca:00:0f:6a:f2:b2:85:
                    1a:38:3b:00:13:b2:c5:5f:ba:52:87:57:25:27:d8:
                    d8:97:1b:67:a2:3a:5d:d3:24:3f:56:c4:3c:b2:24:
                    b4:cd:13:35:bc:af:03:3f:55:01:47:e4:94:b6:be:
                    f4:99:82:cf:fb:70:47:fc:68:9d:05:a4:7c:8b:8e:
                    af:ef:e1:80:d0:9d:52:8b:6f:3a:40:1a:69:3d:8a:
                    e7:95:c9:c6:04:32:8b:c5:ed:f8:90:fb:fc:98:96:
                    d2:3f:59:ce:8a:6d:f7:af:75:75:7a:ca:5e:da:fe:
                    1d:0c:f9:d0:b3:40:e0:a7:83:87:7a:80:0c:f0:d9:
                    3e:37:28:14:04:c9:68:cd:21:e7:53:52:3f:e9:bf:
                    98:cb:8c:52:aa:95:a1:d2:c4:82:87:c3:0a:df:8b:
                    b5:88:58:96:af:6b:ed:ff:53:ce:c0:e2:9b:29:ca:
                    a0:99:ae:6c:ee:02:be:fc:2a:b3:71:2d:a4:ea:63:
                    1f:30:3f:e5:60:6e:e7:ad:2f:4d:02:a9:22:7e:ed:
                    08:4e:06:ab:d2:5d:00:60:bc:40:59:25:5e:b3:c5:
                    62:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E2:61:60:0D:05:2B:8E:16:FA:11:AE:5C:6C:A1:11:4E:2D:46:1B
            X509v3 Authority Key Identifier:
                keyid:3D:2C:06:5C:97:4E:70:0B:13:69:ED:F4:AD:BE:1B:D1:12:72:B0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D2C065C974E700B1369EDF4ADBE1BD11272B09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F174878F65C3099DEE26EA2965185DD2C010153C5DC343723B50A4060A8A0EA/0/323830303a3530303a3a2f33322d3332203d3e203237383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:a6:dc:98:7c:37:3d:02:7d:51:62:cb:32:17:d6:db:ba:8d:
         ba:34:22:e0:bf:5b:10:c8:1a:26:9c:78:d6:a6:31:34:81:6b:
         5f:53:8e:bc:50:35:09:84:a9:da:ed:77:07:0e:5d:a8:5a:d8:
         2e:ff:4f:84:ac:ad:c1:37:f4:2d:ca:8a:e9:a8:95:a9:96:d6:
         41:5c:52:cb:4e:44:8f:4f:9e:1c:e2:ab:7b:59:e6:ce:64:20:
         10:27:0e:9c:05:62:9a:30:c9:0c:33:c0:9c:24:b2:7d:87:a6:
         4f:0f:6d:67:6d:9d:2f:d4:73:2e:f3:a5:ce:2a:91:f0:0d:bf:
         fc:38:4d:c3:59:ee:c4:61:4d:40:cd:c3:9a:e6:30:16:3f:2e:
         84:88:68:26:48:aa:a2:c2:7b:dc:eb:a1:a9:59:b0:9c:69:54:
         01:09:b1:f0:6f:c0:4c:09:a9:fc:01:92:19:19:54:d6:67:4b:
         a8:be:7e:a7:b6:ae:3a:db:d9:44:fb:6d:b6:71:07:17:e2:38:
         b2:4d:87:4a:aa:b8:e7:8b:bd:e0:54:2b:dd:f1:3b:99:c0:ba:
         59:5b:7b:4e:8b:1b:d4:54:f8:2c:b7:77:9f:59:fa:00:aa:77:
         db:b6:70:86:0d:65:21:b1:86:1a:46:20:41:4f:96:df:af:d1:
         ec:79:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----