Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/323830333a623365303a3a2f33322d3438203d3e20323730303736.roa
File:                     323830333a623365303a3a2f33322d3438203d3e20323730303736.roa (raw, json)
Hash identifier:          f51NsW7d8Ql+s7md0oxsPH4tYxY/DaRZCr5chgsPNLo=
Subject key identifier:   FD:18:13:4E:3A:24:EE:8E:D2:65:6E:25:AC:CB:8D:18:C3:A9:C9:06
Certificate issuer:       /CN=CA031C4B7AEACDEFD1937A04646041A208257DB5
Certificate serial:       183CF4884058C961185B34A5FDA8A9E3720BC931
Authority key identifier: CA:03:1C:4B:7A:EA:CD:EF:D1:93:7A:04:64:60:41:A2:08:25:7D:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/323830333a623365303a3a2f33322d3438203d3e20323730303736.roa
Signing time:             Tue 05 Mar 2024 18:07:23 +0000
ROA not before:           Tue 05 Mar 2024 18:02:23 +0000
ROA not after:            Tue 04 Mar 2025 18:07:23 +0000
asID:                     270076
IP address blocks:        2803:b3e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3c:f4:88:40:58:c9:61:18:5b:34:a5:fd:a8:a9:e3:72:0b:c9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA031C4B7AEACDEFD1937A04646041A208257DB5
        Validity
            Not Before: Mar  5 18:02:23 2024 GMT
            Not After : Mar  4 18:07:23 2025 GMT
        Subject: CN=FD18134E3A24EE8ED2656E25ACCB8D18C3A9C906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:1b:04:4b:7f:91:93:02:b7:ea:ac:16:20:
                    1a:41:96:13:3e:37:0a:06:b9:4f:28:3d:de:91:f6:
                    55:75:85:94:9c:04:9a:24:43:96:55:09:a1:80:d8:
                    12:ff:d4:cc:a9:cd:69:da:19:bb:57:1c:21:f6:2e:
                    97:6d:bc:2e:29:ff:87:84:40:f6:f9:2b:02:00:0f:
                    a6:ab:78:9b:54:72:81:0c:5d:fd:8c:1a:31:80:18:
                    1a:66:79:28:94:61:ce:01:23:dd:cf:7a:7c:9a:a4:
                    28:86:fc:57:f7:a5:94:0d:c0:39:49:5e:ce:95:c4:
                    68:bf:c5:9f:89:cc:8a:ad:47:d8:79:6a:15:26:c8:
                    34:e4:55:fd:68:da:28:b3:9a:0e:ee:f8:2f:b7:71:
                    ad:b5:59:44:f0:8d:28:64:28:eb:35:bb:03:69:54:
                    ac:74:f6:1b:1b:9a:cd:c7:fa:46:2e:0d:ae:3f:62:
                    f3:8b:89:be:f7:0f:42:9d:b6:48:2e:54:73:6c:62:
                    8f:8d:22:ff:b2:f4:42:1d:fb:45:9e:e6:99:f0:2d:
                    43:76:d2:c8:c0:c0:33:f8:9c:b7:60:9b:a3:65:01:
                    93:42:4a:8a:81:7d:97:4a:bb:10:5c:b6:e7:64:c7:
                    e2:d5:80:58:16:de:e1:b4:3e:c6:48:03:79:6d:e0:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:18:13:4E:3A:24:EE:8E:D2:65:6E:25:AC:CB:8D:18:C3:A9:C9:06
            X509v3 Authority Key Identifier:
                keyid:CA:03:1C:4B:7A:EA:CD:EF:D1:93:7A:04:64:60:41:A2:08:25:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA031C4B7AEACDEFD1937A04646041A208257DB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27450BA390275F5256D667986A349FCEF2BC9239D566B73B60F80FEC60F2049B/0/323830333a623365303a3a2f33322d3438203d3e20323730303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:d5:b6:e9:81:51:ed:37:01:5a:1a:e6:b4:2e:c6:b1:f3:de:
         5b:f4:a8:8d:d5:db:c8:17:a7:56:13:38:95:2a:5a:6f:8c:72:
         9c:3b:33:df:ef:4d:10:7e:03:c1:4c:e3:33:4a:20:88:95:ed:
         46:09:7f:5b:05:76:b4:6f:04:1c:65:a2:a9:b3:e8:4a:c0:66:
         90:8f:78:c3:fe:5a:c7:f5:3f:9b:df:c8:6b:f6:99:8e:d4:98:
         24:1c:81:25:12:15:a1:7d:bd:c4:6e:6d:8e:71:25:1c:1a:a0:
         c5:76:f7:d6:e6:9d:f5:a3:a3:20:79:7a:ab:b9:1a:a8:0b:cc:
         f6:af:25:04:5b:26:4b:fb:2f:fc:89:1b:8d:49:b0:53:01:64:
         b1:d8:66:f0:d7:97:88:f8:1c:44:ab:36:98:ac:74:99:d9:40:
         1e:8f:0b:a4:6a:80:ae:ce:11:03:de:fa:48:75:26:d0:df:af:
         97:dc:d4:ec:df:eb:ca:39:12:16:e7:bd:29:f7:59:08:08:d0:
         cb:c7:92:5d:18:06:d5:e4:7e:55:0d:f8:10:9e:f0:e5:af:be:
         16:53:d4:46:20:c6:1a:8f:33:6d:96:80:aa:a5:f4:7b:26:f7:
         cb:aa:39:40:42:c7:97:84:e9:fc:51:33:7a:ae:2b:a8:4f:a9:
         b5:a0:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----