Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41FE651CDFCDFFBE7732AD718D68A50718AEB42A61EC0B565FC4A4A6CFF4660C/0/323830333a656661303a3a2f33322d3438203d3e20323637373932.roa
File:                     323830333a656661303a3a2f33322d3438203d3e20323637373932.roa (raw, json)
Hash identifier:          PDoUuulldklJelNyQw1Q1iQ6ZtBuwYTiHy5pvVjEi8M=
Subject key identifier:   3C:78:90:99:3D:68:59:0E:E4:F3:AE:2A:00:5B:91:80:29:36:B2:AA
Certificate issuer:       /CN=A8C4E5871207B44EC0821058200C507D53B96E50
Certificate serial:       2A2C352DE2CE20809BCE19D8362DFF783CF0BD2D
Authority key identifier: A8:C4:E5:87:12:07:B4:4E:C0:82:10:58:20:0C:50:7D:53:B9:6E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8C4E5871207B44EC0821058200C507D53B96E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41FE651CDFCDFFBE7732AD718D68A50718AEB42A61EC0B565FC4A4A6CFF4660C/0/323830333a656661303a3a2f33322d3438203d3e20323637373932.roa
Signing time:             Tue 05 Mar 2024 18:12:54 +0000
ROA not before:           Tue 05 Mar 2024 18:07:54 +0000
ROA not after:            Tue 04 Mar 2025 18:12:54 +0000
asID:                     267792
IP address blocks:        2803:efa0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2c:35:2d:e2:ce:20:80:9b:ce:19:d8:36:2d:ff:78:3c:f0:bd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8C4E5871207B44EC0821058200C507D53B96E50
        Validity
            Not Before: Mar  5 18:07:54 2024 GMT
            Not After : Mar  4 18:12:54 2025 GMT
        Subject: CN=3C7890993D68590EE4F3AE2A005B91802936B2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:e1:e5:09:6b:1a:6b:8b:88:80:a7:65:31:
                    06:4a:13:8a:ce:c7:01:15:17:d3:9c:bf:2a:85:fc:
                    50:5d:57:e5:41:2a:1e:17:fa:fa:f9:d8:25:12:d4:
                    75:26:16:d1:02:b4:25:15:de:6b:85:d7:2c:3a:9a:
                    53:f6:fc:32:6a:99:e0:a0:7b:e9:40:83:96:11:9f:
                    b4:7b:ef:98:5f:c8:ff:ad:b0:75:0f:f9:57:76:87:
                    1b:ae:82:b8:e1:ec:ee:33:06:29:05:43:f0:09:a5:
                    53:72:b5:23:c7:81:75:1b:44:10:23:df:cf:92:43:
                    dc:65:d1:cb:c4:57:47:0f:23:e9:fc:3d:06:db:b5:
                    b9:b2:30:1a:62:d8:b2:f8:7c:ba:a8:e1:ba:86:0e:
                    73:57:a2:e7:62:db:f0:38:27:7b:43:ce:e2:69:b5:
                    c4:2d:14:d0:4f:93:11:80:80:d8:da:f1:8e:1f:fd:
                    02:86:de:da:67:b7:3d:e8:6a:4e:50:1d:39:6f:06:
                    26:18:4c:a3:1f:be:01:21:7e:32:df:bc:1f:2a:ea:
                    5c:47:35:12:ae:94:76:06:a4:0c:fa:65:d3:62:61:
                    d9:38:63:d6:1a:b8:10:1b:bd:98:93:9f:08:cd:c7:
                    ba:63:76:a1:ee:ce:83:12:54:a8:c3:41:83:11:f4:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:78:90:99:3D:68:59:0E:E4:F3:AE:2A:00:5B:91:80:29:36:B2:AA
            X509v3 Authority Key Identifier:
                keyid:A8:C4:E5:87:12:07:B4:4E:C0:82:10:58:20:0C:50:7D:53:B9:6E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41FE651CDFCDFFBE7732AD718D68A50718AEB42A61EC0B565FC4A4A6CFF4660C/0/A8C4E5871207B44EC0821058200C507D53B96E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8C4E5871207B44EC0821058200C507D53B96E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41FE651CDFCDFFBE7732AD718D68A50718AEB42A61EC0B565FC4A4A6CFF4660C/0/323830333a656661303a3a2f33322d3438203d3e20323637373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:efa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:d2:65:57:dc:6a:b0:6a:80:0e:91:3e:ff:0b:ff:ba:ab:8d:
         0d:91:44:b2:ca:37:32:b1:4a:77:8f:34:fa:ba:f1:b1:9d:e5:
         9e:e4:a2:b1:0a:77:0d:96:4e:a0:9a:ed:ba:29:9e:bb:3f:f8:
         8c:ae:25:d3:c1:e1:3d:bf:5e:c0:b7:fb:ac:c6:92:64:25:6f:
         f8:db:36:7d:35:9e:dc:4c:e6:da:20:8b:9d:97:51:7b:13:61:
         ee:96:65:27:65:de:7e:9c:c2:6e:b8:81:94:ee:68:f0:ee:eb:
         c8:80:c1:70:c7:b8:3d:4f:92:24:1d:53:c7:81:03:8d:df:fa:
         e3:ea:19:38:4d:59:f9:a5:5d:0a:d9:a7:a8:29:3f:31:46:45:
         f4:cc:bc:88:89:1a:6f:5f:f1:3b:d2:f2:6c:83:ea:2b:38:a1:
         9a:08:8e:ed:c8:1f:95:64:e2:99:18:9f:c4:63:83:f3:f3:91:
         8d:f4:05:76:90:2d:c8:92:a9:25:1c:10:db:69:ec:45:9f:e5:
         9a:4d:26:99:8c:fe:7e:e4:aa:95:c4:ff:fb:41:30:79:88:87:
         f2:f8:d8:e3:08:aa:d8:d3:14:40:44:f4:8c:62:7c:dd:fa:ec:
         95:bf:d9:64:b2:79:34:05:01:d7:9f:57:18:ac:b5:c5:67:51:
         47:68:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----