Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/323830333a666138303a3a2f33322d3634203d3e20323632393334.roa
File:                     323830333a666138303a3a2f33322d3634203d3e20323632393334.roa (raw, json)
Hash identifier:          7DL76mh2fyAI5hvReBvDQrIMqjRiolgWmYGJP2Mk4ng=
Subject key identifier:   BE:05:88:C2:A8:68:6A:A6:22:0C:E9:D4:3B:62:9A:37:A8:31:93:98
Certificate issuer:       /CN=071E98A75F67AF0AC72FFE00A1889291589B7570
Certificate serial:       5C35C87B4C87C7822997BA9AD6845F14743E893E
Authority key identifier: 07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/323830333a666138303a3a2f33322d3634203d3e20323632393334.roa
Signing time:             Tue 05 Mar 2024 18:16:33 +0000
ROA not before:           Tue 05 Mar 2024 18:11:33 +0000
ROA not after:            Tue 04 Mar 2025 18:16:33 +0000
asID:                     262934
IP address blocks:        2803:fa80::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:35:c8:7b:4c:87:c7:82:29:97:ba:9a:d6:84:5f:14:74:3e:89:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=071E98A75F67AF0AC72FFE00A1889291589B7570
        Validity
            Not Before: Mar  5 18:11:33 2024 GMT
            Not After : Mar  4 18:16:33 2025 GMT
        Subject: CN=BE0588C2A8686AA6220CE9D43B629A37A8319398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:6a:9a:aa:68:a4:d9:a3:59:c8:9f:23:85:
                    4d:a2:db:37:d1:ec:7c:a9:8c:b5:8b:ae:cb:6b:4f:
                    87:f0:ae:eb:8f:ea:5c:72:dc:5d:65:7e:f1:64:1c:
                    9c:9f:78:c1:f6:ce:30:20:e5:d8:31:cb:dc:a7:39:
                    2b:80:a8:c9:ed:6e:4d:62:e5:42:68:f7:92:02:c5:
                    a6:45:50:14:40:80:79:6a:e9:8b:3b:07:75:f0:b7:
                    0a:2c:cd:98:6f:b8:e1:50:78:b2:28:dc:09:3f:fb:
                    e9:f8:46:ff:46:35:ed:93:be:9a:fa:38:10:64:de:
                    5c:60:fa:ed:82:be:17:10:79:54:bf:d4:05:7b:af:
                    c4:75:01:18:35:87:18:d4:82:ec:fb:9f:2e:24:f7:
                    8b:78:c0:de:e3:6a:b1:37:c8:da:d6:fe:18:54:5a:
                    fd:88:d3:4b:80:69:dd:e0:23:c1:26:b8:0e:83:75:
                    5f:32:02:7a:df:9d:5a:fc:11:7d:f8:66:13:77:40:
                    5b:42:93:9a:52:20:a5:2c:27:c8:34:b8:65:a5:88:
                    52:71:e3:1d:51:d5:15:08:18:8a:f4:90:03:d0:a4:
                    bc:5e:69:66:4d:fb:50:19:3f:19:94:6b:1c:78:82:
                    fa:2c:e4:1b:d4:58:67:6a:e0:a2:6b:33:67:32:d5:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:05:88:C2:A8:68:6A:A6:22:0C:E9:D4:3B:62:9A:37:A8:31:93:98
            X509v3 Authority Key Identifier:
                keyid:07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/323830333a666138303a3a2f33322d3634203d3e20323632393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa80::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:40:6b:50:f9:18:48:d4:1e:2f:df:c5:ba:3b:15:1a:9f:81:
         d5:68:df:79:8d:2d:09:8a:e7:3d:db:ee:99:e3:3c:fb:7f:30:
         ff:ad:ba:41:65:9e:79:c7:8a:94:75:68:04:75:5c:c6:b6:30:
         0b:cd:73:87:93:34:4c:9d:03:45:8a:23:fa:b3:f1:2d:7b:d2:
         9b:ea:d1:3c:a1:d5:2c:84:b5:d1:da:77:a4:15:46:82:65:b0:
         46:13:85:2b:55:ac:4f:4e:81:6e:d7:00:8a:a4:82:03:72:cf:
         d8:9e:b9:4f:17:87:09:82:07:d4:19:62:f1:0e:cd:7b:dc:d9:
         dc:f9:53:86:31:55:14:f3:59:bd:c7:15:02:15:42:64:48:2f:
         fc:f4:3f:69:4d:92:f7:b8:37:ac:17:d2:78:97:cd:a7:be:b1:
         67:88:2a:c0:7a:5c:da:89:d3:c8:21:3c:3f:45:51:8c:5d:4c:
         60:3f:0c:55:44:1c:8c:5e:45:53:b5:7c:d7:73:38:51:8e:af:
         e4:38:bd:a2:67:0e:b2:78:ee:0b:cd:93:90:df:fe:bd:7a:5f:
         05:23:4d:4c:26:1d:75:e9:f2:8a:f0:c8:9b:3a:46:2b:31:e6:
         7c:66:24:b5:d8:b4:58:e1:37:fd:b1:73:e9:29:19:f8:05:94:
         4a:32:6c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----