Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a333a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a333a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          b5dX/EF/l9ZWKdQqhyVNJAC+5osoIZCN8xeQm21D9ac=
Subject key identifier:   07:F3:E3:D9:19:3A:A3:D0:A9:04:56:BF:FE:01:49:B7:67:C1:D8:D3
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       57C020302022EAC9448360A9F2C43A94D2D98602
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a333a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 16 Dec 2024 11:30:00 +0000
ROA not before:           Mon 16 Dec 2024 11:25:00 +0000
ROA not after:            Mon 15 Dec 2025 11:30:00 +0000
asID:                     262249
IP address blocks:        2801:140:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c0:20:30:20:22:ea:c9:44:83:60:a9:f2:c4:3a:94:d2:d9:86:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 11:25:00 2024 GMT
            Not After : Dec 15 11:30:00 2025 GMT
        Subject: CN=07F3E3D9193AA3D0A90456BFFE0149B767C1D8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:00:5b:96:5b:68:a4:20:8c:1e:89:9f:97:
                    88:ad:12:3c:14:3c:72:e6:b8:8d:ea:ba:ff:e6:60:
                    67:95:f7:dc:50:4a:37:42:11:37:6f:4b:49:c9:a6:
                    80:aa:37:69:18:18:23:90:d7:ca:e2:2b:11:24:1f:
                    52:33:93:39:b6:0b:2c:a3:e8:19:1e:5c:b2:c6:e2:
                    fa:5e:99:87:ae:bf:30:30:86:e0:1f:14:bd:ea:c2:
                    41:92:a5:2f:92:1e:e3:45:1d:83:26:b5:f2:c8:56:
                    49:34:cd:ee:25:66:a9:33:de:e7:e8:39:b4:7d:1d:
                    cb:8b:db:99:f5:3c:fb:99:a6:a4:e6:d8:16:93:8e:
                    91:c1:39:e3:67:a8:b6:c4:c3:58:da:d9:e9:22:57:
                    73:f9:ec:c4:1b:86:55:74:2d:4c:a8:35:80:ef:d8:
                    36:e0:2a:bb:40:79:ae:75:80:38:d3:50:fb:27:25:
                    93:4f:e7:8c:cf:19:ff:03:a3:4d:65:34:78:26:42:
                    a5:20:9a:41:f7:a4:88:52:eb:cc:86:0f:61:72:23:
                    20:23:30:b7:d3:41:38:2a:17:e3:c1:8f:8e:b8:17:
                    fd:fc:0c:bc:91:07:1a:b0:72:0f:05:63:f5:d8:c2:
                    a3:b3:25:de:29:78:84:c9:ff:35:b8:f5:85:45:f0:
                    ab:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:E3:D9:19:3A:A3:D0:A9:04:56:BF:FE:01:49:B7:67:C1:D8:D3
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a333a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:d9:6e:6e:e8:49:da:5e:d5:2d:38:41:b9:7c:5c:bd:ba:40:
         b9:7a:38:8a:25:be:2e:8e:91:b1:fa:72:8b:d1:61:1a:23:6b:
         62:ad:fd:68:18:7a:a1:ac:5e:e8:8f:20:95:fc:9b:94:a0:a9:
         62:f7:99:4a:ae:90:97:63:40:72:09:be:15:01:4e:72:57:db:
         93:db:a5:fe:c0:2f:3c:2f:70:27:64:44:7f:4e:f9:af:5c:91:
         f5:a9:71:0e:d1:c2:30:36:b5:3e:a6:3e:c4:6e:0c:52:9f:da:
         c7:45:01:44:a3:f2:ee:f2:cb:a6:aa:0e:bc:0b:ec:03:1d:12:
         d0:3a:95:fd:90:b5:02:a3:42:26:63:dc:83:ab:f6:14:14:a5:
         a8:3b:c9:d3:22:84:c8:3e:dd:1c:7a:b1:d7:bb:b9:88:40:60:
         c4:99:a9:de:45:46:20:ba:6f:4f:6d:f2:d1:ec:e4:ec:3e:6b:
         1d:5a:c0:b4:ab:d7:12:9e:ad:dc:64:1d:8e:a7:48:73:a1:ad:
         27:de:c4:89:51:3a:e0:10:3c:90:19:6a:d9:32:57:28:84:7b:
         03:6e:fb:de:26:0d:7b:81:43:d7:ea:d4:33:d4:d2:a9:5f:db:
         4a:e1:89:cf:cb:4e:2d:ed:08:74:f3:2b:8a:31:12:87:44:d0:
         da:a2:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----