Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/323830333a396530303a3a2f33322d3438203d3e203532333939.roa
File:                     323830333a396530303a3a2f33322d3438203d3e203532333939.roa (raw, json)
Hash identifier:          9yZaofp+gGeghT37OYvqCfmNMWctnSxZ5k3bbFTQzKo=
Subject key identifier:   42:D0:DF:7A:8A:9E:2E:95:54:DA:4C:61:A4:B0:11:2B:53:18:48:1B
Certificate issuer:       /CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
Certificate serial:       32F438E8BCCF8A0F867C3753A0410CC8304C44FB
Authority key identifier: C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/323830333a396530303a3a2f33322d3438203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 17:42:59 +0000
ROA not before:           Tue 05 Mar 2024 17:37:59 +0000
ROA not after:            Tue 04 Mar 2025 17:42:59 +0000
asID:                     52399
IP address blocks:        2803:9e00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f4:38:e8:bc:cf:8a:0f:86:7c:37:53:a0:41:0c:c8:30:4c:44:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B7A28859947C52A387BB628764F91AAA1D05B9
        Validity
            Not Before: Mar  5 17:37:59 2024 GMT
            Not After : Mar  4 17:42:59 2025 GMT
        Subject: CN=42D0DF7A8A9E2E9554DA4C61A4B0112B5318481B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:ff:cc:a0:52:23:38:96:26:1a:ba:96:24:
                    dd:9b:ff:28:ae:4a:7d:c7:1b:ff:cc:1f:53:3a:18:
                    c7:b4:5e:ef:f0:7d:cf:76:1c:bf:eb:01:58:36:d6:
                    30:f2:d2:73:31:62:9a:cf:4e:b5:6b:f2:57:1d:2a:
                    89:1e:a1:df:70:21:6f:9c:03:90:1b:d8:d9:8e:ba:
                    72:93:40:0f:6f:91:92:59:e9:07:24:cf:f6:0f:96:
                    1f:bb:23:00:90:1e:d5:c4:70:bc:d8:fc:6d:dd:84:
                    14:31:85:83:97:07:11:97:63:d9:a1:37:0c:f5:42:
                    f8:ce:fc:f7:46:a2:60:8f:00:ab:b8:df:24:ff:ec:
                    49:12:f5:b3:3f:0b:28:dc:91:0e:cf:25:d3:67:42:
                    01:ae:5b:69:fa:f5:ed:d0:05:af:de:db:e6:bb:eb:
                    cb:d5:ff:99:eb:07:63:a7:b5:a8:26:65:b6:66:c7:
                    40:a6:bf:a2:42:48:aa:07:64:c0:92:e0:a2:a2:3e:
                    50:ab:62:47:f2:8c:2b:ed:78:fd:d0:d7:da:3f:bc:
                    76:93:2a:f6:4e:09:fd:27:88:17:00:60:dd:35:65:
                    77:d2:0e:3a:7b:1f:39:96:6a:8b:e1:27:13:ff:86:
                    19:8c:8a:a8:4b:c0:96:e7:f3:9b:8f:b5:e9:dc:20:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D0:DF:7A:8A:9E:2E:95:54:DA:4C:61:A4:B0:11:2B:53:18:48:1B
            X509v3 Authority Key Identifier:
                keyid:C2:B7:A2:88:59:94:7C:52:A3:87:BB:62:87:64:F9:1A:AA:1D:05:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B7A28859947C52A387BB628764F91AAA1D05B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/342AB48DF24F4D85DAA49BDAB77609E5DB5B37712CFD9DE7A5CE9F98076010F2/0/323830333a396530303a3a2f33322d3438203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:81:f5:ea:13:53:0b:ed:94:12:0d:df:4c:e3:70:38:d1:ae:
         39:56:b9:b7:c0:56:80:ee:9b:07:57:17:b6:f1:1a:fa:eb:92:
         8d:ab:de:33:36:7f:65:d6:e2:6b:6a:81:b4:91:5f:0a:80:7b:
         37:ae:e9:8b:7e:4c:de:66:76:ad:54:ba:56:8d:80:b5:be:e7:
         ad:7d:6f:44:aa:7f:d0:51:16:c7:47:67:2c:aa:20:5f:78:27:
         40:54:5d:31:7f:78:cc:04:3a:71:9b:7e:64:54:77:19:61:a5:
         bf:5f:97:95:92:8c:11:04:0d:48:e6:2c:e5:f4:07:89:9d:79:
         73:52:ec:dd:3a:7b:b2:f2:e2:cc:48:e7:f3:78:9d:e9:62:37:
         30:47:b3:a4:09:30:01:0e:fe:34:ee:36:1e:88:d6:91:10:9e:
         62:04:63:0b:85:51:47:47:7c:4e:73:11:46:ae:f2:cc:f1:1e:
         93:48:80:00:43:93:97:d7:3c:f5:8f:98:e0:ea:96:49:90:cf:
         4c:87:d5:08:22:9c:c9:b5:82:4e:85:11:c0:95:dc:ea:e8:8d:
         07:8d:db:1a:19:b1:50:1f:33:51:33:06:fa:31:a2:65:f7:05:
         41:dc:87:c9:f1:d2:0e:c9:ee:ac:90:3d:e6:e5:34:a9:9e:6f:
         8f:2f:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----