Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a3a2f33322d3332203d3e203532323738.roa
File:                     323830333a653939303a3a2f33322d3332203d3e203532323738.roa (raw, json)
Hash identifier:          g/uCZDN7URYGSGlVVwcKFZrFZjDBrmG2TYfu/UYNNYE=
Subject key identifier:   56:93:DE:32:74:42:88:6F:7D:14:8C:61:81:DB:3D:00:C9:2F:4E:B0
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       124D19F4B79EBCB90FF2C1C6762C7A8D86E9AA35
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a3a2f33322d3332203d3e203532323738.roa
Signing time:             Tue 05 Mar 2024 18:01:38 +0000
ROA not before:           Tue 05 Mar 2024 17:56:38 +0000
ROA not after:            Tue 04 Mar 2025 18:01:38 +0000
asID:                     52278
IP address blocks:        2803:e990::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4d:19:f4:b7:9e:bc:b9:0f:f2:c1:c6:76:2c:7a:8d:86:e9:aa:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Mar  5 17:56:38 2024 GMT
            Not After : Mar  4 18:01:38 2025 GMT
        Subject: CN=5693DE327442886F7D148C6181DB3D00C92F4EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f8:45:a2:8e:74:da:97:18:78:4c:1d:e2:af:
                    6d:a9:d6:5f:98:b4:0c:79:48:1d:a1:a9:c0:8d:0f:
                    d6:e4:11:93:a3:3f:ed:36:23:31:44:d7:1a:76:9c:
                    b7:9a:8b:ac:3d:c9:22:4a:9f:e0:14:fe:69:4c:a6:
                    55:f8:b1:62:58:14:61:4c:05:79:bc:0e:51:01:0c:
                    25:10:63:80:b9:31:0f:df:a4:89:71:44:62:f4:c7:
                    74:69:87:60:70:20:f4:17:51:da:2e:df:0d:da:bc:
                    d1:fa:b8:c5:64:7a:74:3e:48:ec:f7:9f:07:dc:74:
                    ea:45:45:cf:4e:ff:de:5b:43:ef:74:82:84:bf:71:
                    68:26:65:94:10:60:0b:c6:6c:26:1a:0a:c6:08:6b:
                    6a:65:b5:6e:22:b8:6c:73:4e:44:46:94:32:6a:07:
                    28:77:6f:a2:4b:02:25:d9:f5:18:1a:f5:64:9f:92:
                    72:20:3a:fd:04:5f:e4:80:e5:4f:52:7b:e9:5f:cb:
                    26:05:ba:fb:b3:f7:21:6e:40:59:40:7d:5b:83:46:
                    ea:c6:41:16:76:6e:12:72:7f:0c:9a:51:f8:26:1e:
                    f9:39:0b:5d:99:a8:da:e3:db:6b:5b:5f:e8:55:b6:
                    cf:fc:b3:59:fc:57:0b:e4:7b:c5:f7:2e:20:36:c8:
                    5d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:93:DE:32:74:42:88:6F:7D:14:8C:61:81:DB:3D:00:C9:2F:4E:B0
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a3a2f33322d3332203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e990::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:91:5d:39:cb:df:06:37:39:92:7b:15:fa:da:06:0a:7e:15:
         cd:7e:8c:76:58:c5:97:79:8b:8a:f0:78:da:c9:03:84:94:6f:
         ea:fe:1e:c5:b6:d4:bb:05:63:cd:b5:28:79:88:af:10:d7:35:
         f7:de:57:d0:1c:f8:39:02:61:59:cb:1f:d9:ba:8b:19:09:64:
         05:aa:45:8d:89:a8:86:36:e1:01:45:8e:08:f0:ab:4b:87:4b:
         3f:45:06:b5:72:48:71:b3:3b:db:40:6b:b0:da:6c:26:57:28:
         5d:a4:10:a9:0f:5c:e6:11:d3:77:e4:f2:64:c9:cd:79:d8:82:
         b4:c1:1c:46:4f:a3:7a:01:fd:74:2b:53:82:c4:b9:c3:79:69:
         49:d8:78:86:a5:83:46:83:47:44:7f:ec:ae:9e:c1:31:59:66:
         6d:b7:6b:79:a1:0b:91:79:58:cc:a2:a5:21:91:89:9e:d3:cd:
         31:cb:15:c1:22:56:c8:3c:9b:0a:56:ce:2a:c1:50:ec:ba:c5:
         8b:d6:75:5a:77:e9:99:74:78:35:1b:af:62:db:33:6e:5d:c9:
         c7:12:50:94:ce:dc:d9:11:b2:b9:32:e7:ac:c4:55:7a:db:43:
         30:d4:66:bf:d3:d2:38:7b:30:be:cf:bd:be:4c:f3:e7:7f:dd:
         9b:ac:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----