Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/323830303a3431303a3a2f33322d3336203d3e203130323639.roa
File:                     323830303a3431303a3a2f33322d3336203d3e203130323639.roa (raw, json)
Hash identifier:          44pfYmgrIOGn8AKRm8WJ1tS5ujyQENAq5OrEURyL+8Y=
Subject key identifier:   C2:1C:E8:46:73:0F:D5:1B:9B:59:21:78:FC:EB:B8:8F:12:A0:90:08
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       26034A14F5714F996D27F59D7BEB72F5D166D173
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/323830303a3431303a3a2f33322d3336203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:29 +0000
ROA not before:           Tue 05 Mar 2024 17:41:29 +0000
ROA not after:            Tue 04 Mar 2025 17:46:29 +0000
asID:                     10269
IP address blocks:        2800:410::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:03:4a:14:f5:71:4f:99:6d:27:f5:9d:7b:eb:72:f5:d1:66:d1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:29 2024 GMT
            Not After : Mar  4 17:46:29 2025 GMT
        Subject: CN=C21CE846730FD51B9B592178FCEBB88F12A09008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:70:21:64:08:05:cc:e4:56:8a:e5:fd:b2:3b:
                    00:8b:72:38:ca:c2:a1:61:6f:37:7e:18:4f:36:94:
                    35:9a:e0:46:05:af:d5:40:80:a1:45:47:8e:4a:da:
                    08:7c:0e:f1:db:57:07:ee:6d:14:77:d6:43:75:cb:
                    be:c4:f9:ec:ba:d4:26:49:63:52:da:4a:38:ef:79:
                    bb:da:7c:9e:74:4e:6f:c5:8c:f9:2e:8a:c5:a9:ce:
                    45:e5:62:bb:48:98:ed:20:04:39:a2:92:38:3f:5f:
                    d8:aa:73:ba:7f:c6:90:9c:6b:88:22:9e:9a:81:d2:
                    f6:52:c7:0b:c0:09:d0:55:a5:01:88:6d:9a:ec:88:
                    a5:55:7b:6c:92:bc:cf:d6:cd:6b:0f:52:6f:bf:be:
                    cb:23:84:d7:27:54:01:0b:c0:cd:7e:e2:f1:85:ca:
                    d2:58:3c:36:25:d1:92:ad:dc:f0:73:92:8b:85:28:
                    65:ca:14:e8:25:94:02:02:71:0f:28:e2:dd:22:08:
                    7e:41:b9:c8:76:79:15:6e:31:73:d7:92:1a:7a:d2:
                    1e:56:9f:45:02:7a:e9:cb:f0:6b:3b:7d:8a:c3:58:
                    cb:e4:a2:5f:15:fd:bc:68:ae:38:df:dd:c1:78:0d:
                    3e:b5:46:26:1e:12:80:d8:ee:f1:1e:93:59:dd:ec:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1C:E8:46:73:0F:D5:1B:9B:59:21:78:FC:EB:B8:8F:12:A0:90:08
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/323830303a3431303a3a2f33322d3336203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:410::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:de:bb:2f:ff:a7:84:fd:f2:d4:2d:a9:e3:8a:6f:4d:af:
         80:34:eb:62:c1:f8:99:62:68:10:e1:91:34:d6:9f:3b:07:b5:
         3d:f4:3b:1d:dd:f2:ff:b6:03:9d:c2:42:ff:58:ae:a2:02:9d:
         b2:76:98:f8:98:68:b1:ee:65:21:fd:35:02:b3:53:0c:4a:3b:
         2f:ad:a0:9f:1f:42:04:07:a4:d5:14:49:1a:66:b5:a9:68:76:
         41:5c:30:dd:11:82:7a:ea:e5:73:e4:f0:fe:a8:45:32:3c:f4:
         c2:ae:b7:6d:b1:90:a9:3c:2a:a6:69:37:a5:b9:f7:d9:ea:49:
         a2:39:23:7e:8a:09:78:6c:a6:b1:20:90:0b:f9:bf:99:c9:f7:
         88:14:44:df:9f:79:3d:b8:8a:49:ce:37:76:77:e9:2e:ea:2b:
         73:b8:fd:dd:a1:06:bd:04:a2:4b:b1:59:d3:7e:90:fb:68:15:
         2c:ac:d3:76:f1:85:9e:1a:0a:c3:60:b7:41:d9:36:4d:69:1c:
         c6:fc:b7:e0:65:d3:26:b2:bb:af:00:4b:4c:da:d5:4c:72:01:
         9e:12:ef:67:5a:cf:6e:b0:cd:56:fc:29:4e:26:74:1a:71:f6:
         f0:46:9b:a2:b6:e7:9b:a9:55:bc:53:c0:af:8e:b8:5f:7f:9f:
         3e:86:53:ac
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUJgNKFPVxT5ltJ/Wde+ty9dFm0XMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBFOUE2MkI3MTg4OTg2N0JEOTM2QTA1RjA1ODc0QzBG
NDhFODQ5MjAeFw0yNDAzMDUxNzQxMjlaFw0yNTAzMDQxNzQ2MjlaMDMxMTAvBgNV
BAMTKEMyMUNFODQ2NzMwRkQ1MUI5QjU5MjE3OEZDRUJCODhGMTJBMDkwMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKcCFkCAXM5FaK5f2yOwCLcjjK
wqFhbzd+GE82lDWa4EYFr9VAgKFFR45K2gh8DvHbVwfubRR31kN1y77E+ey61CZJ
Y1LaSjjvebvafJ50Tm/FjPkuisWpzkXlYrtImO0gBDmikjg/X9iqc7p/xpCca4gi
npqB0vZSxwvACdBVpQGIbZrsiKVVe2ySvM/WzWsPUm+/vssjhNcnVAELwM1+4vGF
ytJYPDYl0ZKt3PBzkouFKGXKFOgllAICcQ8o4t0iCH5Buch2eRVuMXPXkhp60h5W
n0UCeunL8Gs7fYrDWMvkol8V/bxorjjf3cF4DT61RiYeEoDY7vEek1nd7Od7AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUwhzoRnMP1RubWSF4/Ou4jxKgkAgwHwYDVR0j
BBgwFoAUUOmmK3GImGe9k2oF8Fh0wPSOhJIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDFERTVFQTAxNDU2RjM2NTIwQUFFRTQzNjM4MDVFMDY5
QjcxMkVDRkM3QzE1N0EzOTlCNTk3RkYxQTgyNEUxLzAvNTBFOUE2MkI3MTg4OTg2
N0JEOTM2QTA1RjA1ODc0QzBGNDhFODQ5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MEU5QTYyQjcxODg5ODY3QkQ5
MzZBMDVGMDU4NzRDMEY0OEU4NDkyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxREU1RUEwMTQ1NkYzNjUyMEFBRUU0MzYzODA1RTA2OUI3MTJFQ0ZD
N0MxNTdBMzk5QjU5N0ZGMUE4MjRFMS8wLzMyMzgzMDMwM2EzNDMxMzAzYTNhMmYz
MzMyMmQzMzM2MjAzZDNlMjAzMTMwMzIzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAEEDANBgkq
hkiG9w0BAQsFAAOCAQEAZ7Peuy//p4T98tQtqeOKb02vgDTrYsH4mWJoEOGRNNaf
Owe1PfQ7Hd3y/7YDncJC/1iuogKdsnaY+Jhose5lIf01ArNTDEo7L62gnx9CBAek
1RRJGma1qWh2QVww3RGCeurlc+Tw/qhFMjz0wq63bbGQqTwqpmk3pbn32epJojkj
fooJeGymsSCQC/m/mcn3iBRE3595PbiKSc43dnfpLuorc7j93aEGvQSiS7FZ036Q
+2gVLKzTdvGFnhoKw2C3Qdk2TWkcxvy34GXTJrK7rwBLTNrVTHIBnhLvZ1rPbrDN
VvwpTiZ0GnH28Eaborbnm6lVvFPAr464X3+fPoZTrA==
-----END CERTIFICATE-----