Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a623030303a3a2f33362d3336203d3e20323639383030.roa
File:                     323830333a373336303a623030303a3a2f33362d3336203d3e20323639383030.roa (raw, json)
Hash identifier:          5hHzHL6qy5EkgLWzGzXGKQBlwT2UWGK+av5mHWC7HQ0=
Subject key identifier:   48:E1:BB:D6:68:13:55:8E:85:81:E6:77:32:46:F1:FD:7D:A7:67:39
Certificate issuer:       /CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5
Certificate serial:       0A2C67CC1E6BDE2379498B402F76EB459AB00D29
Authority key identifier: 0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a623030303a3a2f33362d3336203d3e20323639383030.roa
Signing time:             Tue 05 Mar 2024 17:49:26 +0000
ROA not before:           Tue 05 Mar 2024 17:44:26 +0000
ROA not after:            Tue 04 Mar 2025 17:49:26 +0000
asID:                     269800
IP address blocks:        2803:7360:b000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2c:67:cc:1e:6b:de:23:79:49:8b:40:2f:76:eb:45:9a:b0:0d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5
        Validity
            Not Before: Mar  5 17:44:26 2024 GMT
            Not After : Mar  4 17:49:26 2025 GMT
        Subject: CN=48E1BBD66813558E8581E6773246F1FD7DA76739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:aa:a8:ad:39:41:53:d7:e2:1c:e6:e4:2b:
                    2b:99:bc:46:62:19:1b:f8:1f:3b:6b:93:b8:1e:1f:
                    25:23:b7:86:20:52:b8:0b:f2:98:96:ff:4f:44:79:
                    89:9f:be:a9:1b:81:eb:74:8f:aa:67:1e:66:b6:ca:
                    c5:60:f5:bf:c6:e7:9f:3e:c6:1c:d0:4c:e6:c3:11:
                    9f:7f:06:3c:11:86:b2:94:af:42:6a:96:54:78:ec:
                    76:70:98:94:75:c6:67:b9:97:cb:be:b9:cd:12:3a:
                    09:e1:01:01:7e:bf:65:56:97:a4:cd:88:a2:43:6b:
                    7e:a5:6f:6b:39:47:eb:8c:46:65:a8:27:a0:01:ba:
                    1b:d9:9d:b5:5c:36:31:6b:ce:af:d5:75:b7:9c:bb:
                    03:ad:c6:f7:85:8b:36:69:9c:a4:90:14:01:ee:60:
                    6d:0f:b5:1a:4b:b5:f7:d8:42:7e:08:d6:a0:c6:be:
                    b0:cc:7a:72:6c:4d:03:27:ec:4a:fc:9b:e5:66:bd:
                    74:f8:eb:ef:dd:dd:4e:cb:50:58:f7:1c:3a:16:72:
                    66:f9:31:b8:76:a7:b7:d1:c3:1d:02:9b:e2:49:a7:
                    93:56:28:3e:64:79:b8:b5:27:d0:21:97:b9:bb:b7:
                    d0:a3:eb:52:ea:96:64:ae:8c:3a:1b:34:e1:7e:f3:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E1:BB:D6:68:13:55:8E:85:81:E6:77:32:46:F1:FD:7D:A7:67:39
            X509v3 Authority Key Identifier:
                keyid:0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/323830333a373336303a623030303a3a2f33362d3336203d3e20323639383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7360:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1f:f9:c5:24:7b:f4:55:7e:56:6d:9a:e5:b8:46:6a:a8:68:ff:
         e1:b0:25:28:90:3f:f6:97:18:35:a7:2c:8e:13:9d:d4:09:76:
         ad:dd:6a:bf:06:8a:43:48:fa:19:91:fe:3f:86:f3:0c:4d:30:
         09:97:78:58:3d:c3:8b:3d:42:0c:7d:6f:e1:76:fc:d0:f7:cd:
         a7:c9:27:53:a7:02:a6:a5:23:e4:be:49:2c:de:a3:d9:d1:ce:
         48:72:84:dd:43:9f:41:0d:9e:ee:0f:6b:f0:bc:96:9f:ea:02:
         88:80:18:d1:5a:a1:d6:99:02:35:c0:79:36:ae:03:7c:6a:ad:
         e9:44:8b:ba:01:3b:54:2b:c5:4a:32:ed:9a:cd:ab:09:ce:93:
         80:49:2b:14:97:e2:7b:07:33:f3:24:cf:df:34:74:1a:df:36:
         15:b5:af:86:51:18:45:6f:ae:6d:cd:81:ab:b7:83:d8:09:e4:
         f2:7c:58:58:a0:92:e7:24:79:b6:37:fd:6b:c9:91:6a:66:0c:
         49:56:bd:a3:cd:38:92:2a:17:fc:30:72:95:f4:d2:e1:96:f9:
         8f:b6:10:ad:7c:1a:a9:ce:9d:a1:7d:5f:1d:8e:30:e2:58:6e:
         ec:79:6e:3a:f5:f4:91:d4:80:09:86:e6:54:cb:a8:4b:1e:bf:
         f1:03:66:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----