Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/323830363a3330303a3a2f33322d3438203d3e203238333837.roa
File:                     323830363a3330303a3a2f33322d3438203d3e203238333837.roa (raw, json)
Hash identifier:          j6Dkm3xlBzIGsJOytRi4iTE6jLKhzx4i/QwZterlIaM=
Subject key identifier:   16:75:14:42:CC:37:F5:B5:9A:66:8E:E5:77:78:24:0E:7D:96:59:66
Certificate issuer:       /CN=F120FD76709C67C88845B1BB9132720E6262A870
Certificate serial:       37D92B4817B50D814D1EC677A7D860484B48A506
Authority key identifier: F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/323830363a3330303a3a2f33322d3438203d3e203238333837.roa
Signing time:             Mon 06 May 2024 15:10:00 +0000
ROA not before:           Mon 06 May 2024 15:05:00 +0000
ROA not after:            Mon 05 May 2025 15:10:00 +0000
asID:                     28387
IP address blocks:        2806:300::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d9:2b:48:17:b5:0d:81:4d:1e:c6:77:a7:d8:60:48:4b:48:a5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F120FD76709C67C88845B1BB9132720E6262A870
        Validity
            Not Before: May  6 15:05:00 2024 GMT
            Not After : May  5 15:10:00 2025 GMT
        Subject: CN=16751442CC37F5B59A668EE57778240E7D965966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:b0:71:51:08:db:af:a7:dd:c2:d3:a2:7c:
                    5c:8c:87:ae:33:63:ed:f5:12:2c:9d:c7:2a:75:3c:
                    b6:6d:6a:4c:e6:c8:dc:e7:37:f8:19:cb:96:b5:af:
                    53:e9:e9:46:4b:0b:57:7a:92:1b:29:c4:46:5c:2e:
                    71:a6:e5:ac:5e:21:74:07:f2:79:e3:3d:cc:e0:c9:
                    41:df:bd:13:5b:6c:04:8d:fa:c1:40:c4:d8:d3:d4:
                    c7:22:37:5f:07:47:de:f0:c0:fc:50:0a:47:2e:6a:
                    c6:4c:90:2c:e7:93:1c:b6:07:0c:15:cf:e2:5d:e9:
                    ab:e6:69:7b:c0:2d:e4:09:97:8e:c0:25:70:37:dd:
                    83:4b:91:f1:f1:16:91:1f:01:a4:d5:66:61:84:30:
                    ef:54:4d:0a:eb:98:8c:cc:c7:06:1f:ea:17:84:bc:
                    8d:6e:05:6f:94:6c:34:18:b5:a8:75:69:0f:6a:e0:
                    c9:34:a7:26:ea:15:b3:3a:eb:66:fc:46:ee:76:2a:
                    ac:02:d2:3b:28:b3:10:ff:ca:e3:d6:6b:3e:7c:a1:
                    91:47:d9:17:9d:ed:be:df:64:80:c2:2b:34:b9:7c:
                    45:a9:50:76:3d:d5:33:94:76:36:d6:ea:9d:91:7e:
                    c4:6d:d5:fd:a7:03:59:51:5f:12:9d:42:c2:4d:3c:
                    a4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:75:14:42:CC:37:F5:B5:9A:66:8E:E5:77:78:24:0E:7D:96:59:66
            X509v3 Authority Key Identifier:
                keyid:F1:20:FD:76:70:9C:67:C8:88:45:B1:BB:91:32:72:0E:62:62:A8:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/F120FD76709C67C88845B1BB9132720E6262A870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F120FD76709C67C88845B1BB9132720E6262A870.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2C099A025DF24EB1B85190FF5FC025A43AF3169B338B2C531BAF72FBF8F691D8/0/323830363a3330303a3a2f33322d3438203d3e203238333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:79:0f:41:68:fe:48:b3:11:0f:6a:01:f2:39:b1:43:fe:
         7f:e0:26:00:eb:60:11:cc:0a:d7:e8:6d:e4:49:cc:2c:a3:29:
         48:f7:ce:e0:25:04:26:96:1c:66:10:86:45:5c:bd:35:ac:e0:
         af:07:eb:ae:5b:aa:4c:3e:92:13:db:1a:a1:f4:d3:5b:94:17:
         95:73:9d:ab:a8:6d:6a:bd:a9:32:75:83:d0:78:0c:75:00:c9:
         c3:1e:d3:f6:40:11:3f:76:1c:12:6b:ae:c0:3d:e8:55:35:a5:
         08:be:cd:62:3f:40:08:a7:4f:7a:eb:c3:0e:25:cc:3e:fd:aa:
         88:ef:ca:05:7f:4b:f1:7c:4b:82:6f:27:37:33:8a:ab:d4:7a:
         7c:22:79:f1:a6:2d:f2:b9:81:0d:b5:56:85:98:f9:a0:b4:88:
         73:48:6a:51:33:de:ec:7c:25:8f:84:64:2e:31:41:08:68:b1:
         4f:17:f1:6b:7f:66:c5:f8:f9:35:9c:2a:24:59:eb:d9:5d:d4:
         c9:c8:2c:cf:42:50:98:8b:32:e4:84:87:76:69:d7:60:4a:24:
         3c:8e:ad:5f:c6:8d:07:96:95:9b:67:57:9f:b7:32:18:ad:11:
         a4:49:66:ab:f8:7a:fc:0f:36:be:49:4a:27:fd:89:58:bf:3a:
         a0:a8:df:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----