Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e203131383330.roa
File:                     323830303a643330303a3a2f32392d3438203d3e203131383330.roa (raw, json)
Hash identifier:          sIjsbLqU81o+mhBHTwHmwtAb7IEd+D9tSfZ8rYcD0wg=
Subject key identifier:   68:AC:12:98:A4:A3:F0:E1:33:88:4E:3B:CA:C0:E7:D1:60:AC:E5:79
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       419B33F87D3DE29A72415BF86A933D19E79A2358
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e203131383330.roa
Signing time:             Tue 05 Mar 2024 18:02:48 +0000
ROA not before:           Tue 05 Mar 2024 17:57:48 +0000
ROA not after:            Tue 04 Mar 2025 18:02:48 +0000
asID:                     11830
IP address blocks:        2800:d300::/29 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9b:33:f8:7d:3d:e2:9a:72:41:5b:f8:6a:93:3d:19:e7:9a:23:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:48 2024 GMT
            Not After : Mar  4 18:02:48 2025 GMT
        Subject: CN=68AC1298A4A3F0E133884E3BCAC0E7D160ACE579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:eb:0f:5e:2b:e2:fa:a1:d4:fc:41:23:b0:
                    a0:df:28:53:de:ae:89:80:61:b7:bd:97:8b:02:40:
                    53:86:79:b4:b8:1e:8e:da:86:d1:b5:c0:a7:38:12:
                    70:ab:79:36:1f:02:3b:04:70:1c:79:b8:8b:52:21:
                    3f:c8:f7:28:10:43:f1:36:ee:7a:d1:49:22:d0:4a:
                    76:74:a3:62:0c:75:e1:ac:0e:a5:62:7c:d1:5b:ca:
                    70:2e:f0:38:f5:09:3d:a1:92:4d:cf:c5:f1:39:2f:
                    2a:b2:fc:78:e7:8a:bc:66:7c:34:09:52:ec:0e:d3:
                    8f:9a:7a:fa:1b:7c:ef:0a:f3:51:37:83:3a:ef:42:
                    c7:16:c9:a4:1a:d1:2a:6e:b2:86:ad:3d:a4:c6:39:
                    f5:13:43:96:a6:91:68:03:46:d4:06:28:26:f7:4e:
                    99:d6:4a:fc:81:18:0b:93:38:48:fb:ee:b5:0f:e3:
                    14:3e:50:c2:9e:94:0a:9d:d2:ac:2a:c7:b8:04:fc:
                    01:20:49:44:35:33:52:98:83:10:c6:26:6c:5a:68:
                    72:81:eb:3e:33:18:c4:1c:af:02:18:41:9a:ba:c2:
                    bd:39:2f:b7:f2:02:61:e7:bb:e9:f9:f1:cf:b0:d0:
                    fb:c8:4a:f4:24:76:30:52:f3:ac:57:2c:48:69:f6:
                    36:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AC:12:98:A4:A3:F0:E1:33:88:4E:3B:CA:C0:E7:D1:60:AC:E5:79
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830303a643330303a3a2f32392d3438203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:d300::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:65:d7:fb:87:60:94:c6:b1:5d:72:4a:72:52:48:3b:c7:f0:
         c8:d2:5c:b6:c7:f1:e0:d4:42:49:05:53:86:6c:cf:c3:1a:1b:
         57:19:5a:e6:9a:59:62:bc:d5:15:00:af:1d:63:f0:c7:a9:02:
         1d:ef:9a:ab:bb:39:f0:d2:fa:a4:e9:27:14:25:31:62:29:73:
         ed:e7:40:fc:c5:18:05:45:00:65:8d:27:93:f4:dc:0b:0e:11:
         74:76:a4:a8:85:c0:e3:c4:ba:24:07:fc:fd:78:26:29:1c:0c:
         53:33:46:11:66:b0:dc:ef:de:61:b5:d9:7b:d4:6c:d4:1b:fc:
         9f:77:4f:7e:88:1b:69:54:9d:35:c0:3c:ba:86:dc:ad:0d:5c:
         5c:9e:04:4b:db:a3:d8:f6:25:63:4f:58:01:83:cc:c7:f7:08:
         62:55:84:ac:c6:1c:83:2d:cb:fc:94:35:fe:40:7c:aa:2b:d3:
         c9:94:93:30:18:73:e2:27:05:0a:7f:2e:48:c5:a9:b7:d0:34:
         63:76:22:27:aa:3a:4c:61:b1:96:9f:11:4e:f1:54:82:c4:8e:
         59:ac:1c:d5:cc:dd:26:3c:0c:72:ea:fc:8f:d6:77:66:46:08:
         f6:b3:45:62:97:a6:c9:f8:80:d3:4a:9c:51:53:21:b6:0b:59:
         11:26:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----