Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/323830303a3839303a3a2f33322d3438203d3e203134373534.roa
File:                     323830303a3839303a3a2f33322d3438203d3e203134373534.roa (raw, json)
Hash identifier:          F8M0jXS9MAtRZG/Q7R98cL+HmtEB+yJfuO+CVmkLmx0=
Subject key identifier:   F3:98:BE:03:CE:2E:E5:D2:01:61:14:30:53:1D:9F:8B:0F:4B:D5:3A
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       749035EBDC10A00E333F8D118F03B94B0ED4E6FA
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/323830303a3839303a3a2f33322d3438203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:38 +0000
ROA not before:           Tue 05 Mar 2024 17:37:38 +0000
ROA not after:            Tue 04 Mar 2025 17:42:38 +0000
asID:                     14754
IP address blocks:        2800:890::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:90:35:eb:dc:10:a0:0e:33:3f:8d:11:8f:03:b9:4b:0e:d4:e6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:38 2024 GMT
            Not After : Mar  4 17:42:38 2025 GMT
        Subject: CN=F398BE03CE2EE5D201611430531D9F8B0F4BD53A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:0b:0e:13:ad:cf:ea:10:f2:39:25:b1:1f:
                    26:8e:2c:c7:9c:3a:ac:b5:53:6c:03:59:e4:13:3e:
                    6f:21:5b:04:35:1f:ac:da:ad:12:ae:41:cc:36:f7:
                    b3:c8:1e:b5:04:ce:f8:db:55:93:68:82:a7:c1:e4:
                    7b:61:4b:71:c2:fc:83:61:f0:ff:c7:cc:f4:76:ce:
                    92:b2:89:2d:33:60:dd:9e:5c:3c:3b:6b:97:d5:98:
                    ca:f0:9b:76:b6:7e:02:70:15:80:8a:81:1c:ea:3e:
                    a8:ad:17:e4:5f:2f:1a:f3:89:00:5b:ea:18:dd:a6:
                    ba:6a:ea:e8:ed:7a:3f:25:58:cb:12:10:17:58:11:
                    dc:1f:60:32:54:06:f7:2c:fc:d0:6a:95:8f:70:c4:
                    9e:10:2f:f6:19:ba:e0:ea:ba:09:b0:01:9d:f7:54:
                    ee:6a:5d:e3:15:0b:e0:9b:76:f4:92:30:da:9f:76:
                    24:5a:e0:97:ca:f9:46:1b:08:46:8f:2e:8c:b1:e5:
                    65:0b:d3:91:e2:55:51:11:fe:21:dc:44:ea:e0:33:
                    57:f3:10:61:3c:43:a4:59:f5:d7:41:3d:c0:15:a8:
                    f5:6b:ce:0d:c5:69:b2:39:ad:80:95:2e:8c:24:be:
                    a7:9b:8b:77:a1:79:c1:66:ce:11:c0:29:d5:fb:9f:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:98:BE:03:CE:2E:E5:D2:01:61:14:30:53:1D:9F:8B:0F:4B:D5:3A
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/323830303a3839303a3a2f33322d3438203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:890::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:44:f5:fe:05:f8:82:84:1c:05:b1:7c:bb:d6:4a:d2:e9:a3:
         de:5b:63:3b:ba:dc:62:9c:58:7a:f1:c2:71:0e:67:57:ac:d8:
         26:32:5f:0c:1d:a7:f9:f4:73:34:02:b5:8a:52:37:d7:6d:b5:
         74:6c:90:3d:c1:35:db:49:c6:56:8a:0e:e1:64:c8:5c:e0:45:
         38:4f:9e:0f:e9:f8:b5:7a:79:1a:02:36:71:86:9b:0f:b3:12:
         9d:5f:4d:d4:ef:26:79:14:82:19:a2:d7:da:f4:2b:88:5b:53:
         55:50:dc:0d:9b:a4:05:ef:22:fa:71:cc:50:9e:6a:83:3a:6b:
         3a:68:21:44:87:3d:c9:29:99:55:ba:a6:2d:06:d8:2e:10:58:
         ad:60:d1:cd:2a:df:fa:4a:4f:89:15:8e:08:bc:13:c1:c7:8a:
         e9:f7:bb:35:43:9d:ad:6e:f2:0a:74:fd:b8:cf:0b:79:32:db:
         1f:bc:4a:53:1c:69:7b:01:82:64:a5:82:5a:24:2a:ca:dd:b6:
         3c:44:90:83:81:eb:7d:ec:3b:32:79:89:ac:5c:b1:d9:bf:1b:
         fd:a3:10:26:67:29:17:5b:ef:78:ae:fd:15:29:32:e6:fd:e2:
         89:c9:c7:b9:66:37:f6:89:41:60:48:e8:99:10:4a:a8:ce:03:
         69:c0:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----