Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a333a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131313a333a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          WZcnIsxP/1AR5/AXJfDjabKNvXJblMw4jFhjO0hgejQ=
Subject key identifier:   CE:FC:C9:69:B8:3B:45:35:98:5B:E3:8F:CA:5B:2C:ED:0F:B0:1E:A8
Certificate issuer:       /CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
Certificate serial:       7374AFBD2282348565B6188BEDE30539CAB6E928
Authority key identifier: 0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a333a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:41:30 +0000
ROA not before:           Tue 05 Mar 2024 17:36:30 +0000
ROA not after:            Tue 04 Mar 2025 17:41:30 +0000
asID:                     18747
IP address blocks:        2801:111:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:74:af:bd:22:82:34:85:65:b6:18:8b:ed:e3:05:39:ca:b6:e9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E48AFD9B71B883E7D0F953CC116B1F94E953785
        Validity
            Not Before: Mar  5 17:36:30 2024 GMT
            Not After : Mar  4 17:41:30 2025 GMT
        Subject: CN=CEFCC969B83B4535985BE38FCA5B2CED0FB01EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:e5:a0:3e:7c:ab:cf:33:45:83:f8:e0:87:
                    14:54:1b:80:50:43:ac:23:f5:42:d5:d9:fe:55:4f:
                    f3:bb:10:51:60:5b:bf:80:4c:03:4f:58:6f:07:90:
                    b0:e1:ea:32:20:7b:1a:a5:35:9e:30:63:67:88:2b:
                    92:57:91:f9:88:0c:5b:74:4f:05:b3:a6:9f:43:3c:
                    b4:e4:c5:73:58:92:85:2a:73:b2:0a:b1:1b:58:3f:
                    72:43:9a:d2:bf:b5:61:d0:33:d3:c7:d2:2c:25:6f:
                    5f:93:1e:e7:25:ba:cc:79:79:a4:df:c5:a5:72:67:
                    9c:d7:24:40:38:6d:1f:72:1b:35:23:41:2f:78:0e:
                    03:4a:79:38:94:d3:55:3a:01:38:4c:6d:31:38:f8:
                    4c:25:79:68:66:9e:bd:08:0b:90:f4:7a:ea:f2:55:
                    e5:d6:e5:82:72:3b:39:fe:c4:30:a8:55:03:0f:e0:
                    f4:9c:69:2d:bf:92:e9:98:3b:2f:df:67:0d:28:fa:
                    1c:99:67:83:26:6a:e1:5c:70:f9:ce:aa:ce:16:36:
                    0f:12:4a:d2:39:05:08:84:82:59:8c:44:0a:7d:7d:
                    41:d7:5a:67:34:c4:ce:cf:17:d4:ce:4e:93:f1:0d:
                    3f:0a:3c:af:16:57:03:bf:24:36:c5:7f:5d:32:31:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FC:C9:69:B8:3B:45:35:98:5B:E3:8F:CA:5B:2C:ED:0F:B0:1E:A8
            X509v3 Authority Key Identifier:
                keyid:0E:48:AF:D9:B7:1B:88:3E:7D:0F:95:3C:C1:16:B1:F9:4E:95:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E48AFD9B71B883E7D0F953CC116B1F94E953785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FA9A01EB0CE8B2F041DFC1BCF2D08012BBD0A240A37DAA06510C30AD9CE6160/0/323830313a3131313a333a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:111:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:b7:c5:13:c4:e5:8f:9d:f3:4e:42:69:31:23:91:84:2d:e5:
         78:4b:57:9f:df:49:03:4d:4f:41:84:85:fe:3b:62:af:4c:94:
         30:a3:c9:72:9c:b6:6f:20:1c:40:b6:56:f7:98:1e:04:76:8f:
         ff:b4:5c:4c:22:87:f6:56:4a:1b:c8:33:c9:45:d9:7f:16:8d:
         aa:c2:4c:43:05:36:04:8d:20:f6:3e:13:45:49:6d:fe:33:e0:
         d9:5d:79:e8:b3:0f:18:ce:43:c4:d2:86:53:29:46:e8:74:39:
         55:9f:72:ce:3d:04:e3:81:88:50:9d:8a:6c:ea:68:ca:a1:b3:
         81:ed:ea:b8:e6:4d:58:27:70:72:dc:c0:42:88:17:d3:2e:49:
         62:ac:96:c3:ec:30:69:f5:8a:9d:c1:f4:79:1d:14:df:53:25:
         d6:09:7f:cd:97:40:e5:87:aa:21:ba:7e:42:a7:1f:29:81:3f:
         cf:06:1f:ab:37:5c:c3:53:16:8e:6e:5c:72:89:a6:31:37:a4:
         d0:12:d1:7b:b8:81:54:77:bc:72:31:ea:b2:9f:0f:6c:f8:b8:
         67:40:89:dc:12:fc:86:45:52:b9:b1:ec:3c:c9:35:a5:73:cb:
         67:97:7f:3e:2a:39:f7:c7:ec:2a:a1:b1:ee:88:89:32:26:ca:
         3a:5d:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----