Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/323830333a633430303a3a2f33322d3332203d3e203532333038.roa
File:                     323830333a633430303a3a2f33322d3332203d3e203532333038.roa (raw, json)
Hash identifier:          C8hWAXP4fXoq7jN0QtGBcNnXdwGV9pu31rMLnohBJM8=
Subject key identifier:   13:C1:6B:C7:DC:C5:B4:DB:C8:E1:97:83:19:08:50:E1:11:2C:F4:40
Certificate issuer:       /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial:       546677F4DE22492EB33FEB1DBEB5A2E044AA4CCD
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/323830333a633430303a3a2f33322d3332203d3e203532333038.roa
Signing time:             Tue 05 Mar 2024 18:00:02 +0000
ROA not before:           Tue 05 Mar 2024 17:55:02 +0000
ROA not after:            Tue 04 Mar 2025 18:00:02 +0000
asID:                     52308
IP address blocks:        2803:c400::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:66:77:f4:de:22:49:2e:b3:3f:eb:1d:be:b5:a2:e0:44:aa:4c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
        Validity
            Not Before: Mar  5 17:55:02 2024 GMT
            Not After : Mar  4 18:00:02 2025 GMT
        Subject: CN=13C16BC7DCC5B4DBC8E19783190850E1112CF440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:0d:37:a0:2a:d3:52:ea:83:96:20:8c:54:
                    6c:a9:35:64:a8:a7:ea:fb:f4:8e:c1:f5:34:c6:75:
                    ed:14:64:0f:b4:c2:c4:5b:5d:58:8f:e1:79:21:2e:
                    4c:fd:ed:28:c1:ab:4e:06:82:44:56:50:f3:7e:21:
                    65:fb:5c:0e:e5:16:b3:80:20:b4:02:5d:25:3f:c9:
                    f7:c0:ad:8b:56:2e:aa:e2:13:4b:95:ee:63:b1:14:
                    9e:c6:80:c4:9f:c9:b6:95:fc:8c:0d:3a:3e:3b:4d:
                    1b:7f:13:ba:58:72:73:a1:7c:ca:8b:29:6b:5b:51:
                    18:ad:6d:1c:a8:2d:7e:9a:22:f6:c4:85:b8:7a:da:
                    b9:5b:ea:a3:13:6a:ec:40:e1:18:46:8d:ac:54:0f:
                    24:5c:fd:b0:8c:6e:e4:f9:18:53:03:2c:eb:4c:7f:
                    19:1e:8c:10:85:8a:be:9e:60:a2:e8:cc:c6:87:9e:
                    bc:37:4d:ae:49:2c:8a:b8:dc:52:41:fe:f6:0a:66:
                    73:3a:a5:8f:98:7b:52:cd:58:00:0b:0b:4a:94:c9:
                    fc:28:69:f3:cd:b4:76:91:e4:10:bd:ca:d2:f9:88:
                    5f:60:57:a8:41:30:ce:1f:4b:8f:85:e7:34:b1:9e:
                    65:26:f0:71:9a:e4:d9:53:f0:5f:bb:59:49:79:58:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C1:6B:C7:DC:C5:B4:DB:C8:E1:97:83:19:08:50:E1:11:2C:F4:40
            X509v3 Authority Key Identifier:
                keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/323830333a633430303a3a2f33322d3332203d3e203532333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c400::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:00:8b:24:35:9b:05:0f:a9:ed:ca:c2:43:4d:80:30:ac:d6:
         e1:e7:1e:fb:0d:a1:f1:42:59:12:41:fa:a4:0c:13:5f:6b:22:
         7a:8b:a9:a6:23:be:f7:59:61:1a:4e:ac:33:e9:a0:1b:c0:eb:
         32:27:e0:d2:4b:c1:ba:2b:0f:df:6e:2f:74:76:d3:f7:04:fe:
         9c:84:72:e3:7c:de:fa:71:00:a7:6e:4a:cf:56:7d:6a:6a:b6:
         80:e6:30:dc:19:f4:db:c0:5e:69:07:28:72:73:0f:71:df:36:
         5e:6c:89:19:c1:1d:09:b3:3a:34:ad:33:df:3e:12:37:6a:a9:
         b0:88:74:57:6e:da:f5:23:0f:79:e8:1c:d6:87:4c:b5:8c:4e:
         14:a2:3a:2b:0f:e2:13:78:9a:b7:cb:07:10:f9:46:ea:51:66:
         70:02:f0:62:9d:74:9f:78:17:c4:bc:5d:45:70:fb:14:17:83:
         89:be:23:35:0b:0a:a5:8d:94:12:45:5b:1d:aa:a4:22:0c:30:
         b0:90:3a:fb:6f:ab:c1:11:2c:2b:1d:dc:db:c7:c0:79:f1:98:
         d8:0b:73:e4:b1:cf:4d:af:e1:63:c0:82:9b:7c:6d:3c:7a:33:
         f7:85:20:89:88:c6:89:e6:fb:c7:e6:69:f8:73:e7:80:24:c0:
         4e:79:7a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----