Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/323830333a3836303a3a2f33322d3438203d3e203532333939.roa
File:                     323830333a3836303a3a2f33322d3438203d3e203532333939.roa (raw, json)
Hash identifier:          l+3ZbZLmDGPdZkDLlV0NeNUK1U/m812jxzTaLjZIPco=
Subject key identifier:   9C:B4:55:BC:4F:84:3B:5C:67:97:36:2E:F9:49:EA:5B:E5:D9:69:3D
Certificate issuer:       /CN=0A205E1E925EE30681B338EF41B0939B89AE8FB5
Certificate serial:       0AF38ED364FB2C702CD264C36409B31E65C9683E
Authority key identifier: 0A:20:5E:1E:92:5E:E3:06:81:B3:38:EF:41:B0:93:9B:89:AE:8F:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/323830333a3836303a3a2f33322d3438203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 18:16:22 +0000
ROA not before:           Tue 05 Mar 2024 18:11:22 +0000
ROA not after:            Tue 04 Mar 2025 18:16:22 +0000
asID:                     52399
IP address blocks:        2803:860::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f3:8e:d3:64:fb:2c:70:2c:d2:64:c3:64:09:b3:1e:65:c9:68:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A205E1E925EE30681B338EF41B0939B89AE8FB5
        Validity
            Not Before: Mar  5 18:11:22 2024 GMT
            Not After : Mar  4 18:16:22 2025 GMT
        Subject: CN=9CB455BC4F843B5C6797362EF949EA5BE5D9693D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:2a:3e:75:92:60:44:1b:bd:1f:75:95:09:
                    43:d9:55:62:bb:31:92:47:68:9b:22:97:4f:7f:a9:
                    2e:37:21:33:73:f7:f0:c0:d6:50:fe:07:17:3a:65:
                    69:77:84:8f:1b:69:49:5d:ac:be:a1:f0:05:47:21:
                    4e:1e:b0:66:dd:c8:7e:7d:93:76:cc:44:dc:f9:cd:
                    d0:e9:5c:e7:61:25:48:cd:a8:07:df:00:d5:34:5c:
                    9d:f3:79:d9:cb:26:94:d3:f5:11:1c:3d:1d:a2:01:
                    c9:41:12:9c:e4:f4:a1:e1:fb:98:74:a4:0d:e7:6a:
                    f2:f8:e4:1c:71:b6:dd:b9:68:6c:3d:08:95:0a:f7:
                    b9:90:ad:5b:d6:02:ad:6d:c8:59:ba:ae:a8:25:28:
                    5a:cb:5b:18:9b:f3:89:5c:ef:98:20:80:14:d6:22:
                    ed:e4:68:0d:d8:a9:54:9e:28:18:7b:8d:dd:9c:3e:
                    f0:cb:4d:23:53:a9:d0:72:e5:61:34:81:e1:99:d8:
                    0e:3f:e2:2d:8c:bb:0f:14:6c:8d:8f:74:b7:4c:9e:
                    4c:7e:01:85:c8:ca:f3:77:c4:25:d4:c5:da:c9:e5:
                    b0:b3:2c:08:e8:2a:89:94:32:5c:69:4f:a4:50:c5:
                    22:fe:c9:b7:2e:59:85:ad:ea:c6:bd:56:59:1d:d1:
                    31:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B4:55:BC:4F:84:3B:5C:67:97:36:2E:F9:49:EA:5B:E5:D9:69:3D
            X509v3 Authority Key Identifier:
                keyid:0A:20:5E:1E:92:5E:E3:06:81:B3:38:EF:41:B0:93:9B:89:AE:8F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A205E1E925EE30681B338EF41B0939B89AE8FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FC5A7998A9BECC6EB7251611FF8F04BFF65CDD862A8D5C6CE86542753A77108/0/323830333a3836303a3a2f33322d3438203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:860::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:41:8e:15:6b:c5:a1:be:45:05:af:13:9a:d0:52:14:1a:b0:
         ea:ce:1f:9c:db:9f:13:49:30:4a:f4:53:fa:32:de:37:4f:67:
         2f:81:fa:57:11:52:45:56:5d:9f:26:6a:79:fa:58:4f:09:45:
         59:52:ae:75:40:44:6b:85:06:20:54:cb:b8:14:da:25:df:f1:
         20:8d:a8:aa:77:23:c1:6f:73:56:07:c1:ea:49:c2:75:eb:1d:
         c4:b7:76:3c:3c:f1:b0:37:38:31:da:7b:b1:a0:50:2c:c8:80:
         2a:3c:ab:ef:1e:55:c7:16:09:cd:b4:b0:3b:2d:13:6a:70:6d:
         e5:8e:fd:a7:7c:8d:dc:ef:4f:3c:23:52:8d:17:cc:86:59:0f:
         e9:cd:3c:21:a1:4b:ce:14:43:11:4f:e8:48:e5:df:78:8d:bf:
         9f:66:7f:46:59:89:50:04:42:a2:58:5c:14:d4:e4:fc:82:72:
         a8:a5:ff:b7:51:36:e0:c8:b8:a7:ba:9b:cb:4a:54:24:dd:b1:
         8e:29:bb:c7:2a:ac:9a:56:d8:e2:18:ab:80:94:80:32:be:3d:
         12:21:44:e9:d5:2d:ad:90:1e:1b:bf:7e:9d:c0:b6:bf:f2:70:
         cd:6f:11:16:b5:41:ba:5e:8e:19:c8:5c:e7:c3:00:08:3d:e6:
         4c:f6:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----