Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/323830333a326230303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a326230303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          3Nk77hqaq6vwS3Xvo3FS78bwRFXG4kIfjLp0/ZxHJn8=
Subject key identifier:   A3:DC:79:2C:15:AA:20:E8:B8:04:E4:EA:E7:57:D7:54:92:98:39:43
Certificate issuer:       /CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
Certificate serial:       23498BB8DA85ED5AD7F8476BF07EC16BCF10A90F
Authority key identifier: 15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/323830333a326230303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:59:01 +0000
ROA not before:           Tue 05 Mar 2024 17:54:01 +0000
ROA not after:            Tue 04 Mar 2025 17:59:01 +0000
asID:                     52468
IP address blocks:        2803:2b00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:49:8b:b8:da:85:ed:5a:d7:f8:47:6b:f0:7e:c1:6b:cf:10:a9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A
        Validity
            Not Before: Mar  5 17:54:01 2024 GMT
            Not After : Mar  4 17:59:01 2025 GMT
        Subject: CN=A3DC792C15AA20E8B804E4EAE757D75492983943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:70:4c:e3:ba:12:e0:c4:0d:d8:2f:25:04:
                    56:d7:ad:40:c5:92:ed:f9:59:57:4d:ff:2e:ec:39:
                    13:68:c7:c5:d4:0a:02:9c:bc:12:30:31:68:54:47:
                    34:e5:1c:ba:c5:a4:5e:d6:cc:b2:b6:67:29:a5:ea:
                    24:07:d8:cd:3c:d0:aa:e2:10:4f:bc:45:b8:25:b1:
                    c8:bc:ed:69:d7:ea:94:6c:fe:ad:7a:03:1e:51:47:
                    52:fb:a0:82:bc:19:3e:42:80:ad:24:e1:30:f3:8b:
                    82:56:42:f9:4e:66:9c:a7:d8:6c:10:7e:c2:0a:0e:
                    b1:8f:ae:32:73:e2:5e:2e:1d:37:dc:a7:10:5b:58:
                    b6:8a:23:97:c3:17:b0:41:3e:3d:e9:ad:37:e2:ec:
                    15:a7:6f:e3:13:62:f8:03:7c:71:e0:a8:33:54:a8:
                    77:ac:4b:1e:a3:d1:74:b0:a7:93:f7:c6:73:d6:6d:
                    60:5d:60:23:b8:cd:a5:7f:80:29:78:0a:1f:5b:e9:
                    83:10:fd:b6:69:b5:1b:ba:6b:bf:a6:49:05:25:37:
                    aa:46:76:b0:f9:7c:f7:80:00:0d:a4:eb:91:5b:34:
                    e4:6f:48:5b:3f:fe:49:ea:d4:75:ff:27:6e:42:3b:
                    6b:e9:77:71:d8:52:e3:cf:34:70:47:83:dd:ba:1f:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DC:79:2C:15:AA:20:E8:B8:04:E4:EA:E7:57:D7:54:92:98:39:43
            X509v3 Authority Key Identifier:
                keyid:15:A0:EC:F9:98:6E:4E:D2:D8:E7:03:E1:C0:F7:64:70:A6:A9:1F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A0ECF9986E4ED2D8E703E1C0F76470A6A91F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467CA131098E1BC8222571EDD2A1800F00015E7F803B88714751949BFEDC3313/0/323830333a326230303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:20:53:25:4e:ac:be:4c:66:e3:9f:a3:b6:0b:e9:99:7a:
         07:b7:1b:aa:41:37:55:d0:7e:6a:d2:4e:51:73:bf:55:ec:63:
         b3:d4:73:ae:3c:c2:1b:0a:9d:b9:97:4e:44:49:1b:9c:68:19:
         25:f3:22:4f:40:16:75:b1:54:2c:eb:74:96:bb:ce:34:c9:88:
         1d:f0:78:7a:d5:c7:a6:af:76:b4:b1:a3:09:c8:ba:48:52:63:
         aa:d6:80:f5:4b:aa:36:ab:69:3b:58:32:4e:b8:9b:eb:88:41:
         14:a7:b0:fc:c6:5f:9d:fd:97:93:b7:76:1c:fe:79:74:8a:52:
         26:c2:a8:2e:be:88:fe:9e:18:36:40:cb:7b:8d:20:5d:5c:f8:
         be:32:57:5a:d0:65:df:64:41:6b:13:22:d8:15:a0:28:57:d4:
         1a:ea:2e:5c:29:5d:9e:98:8e:a7:52:72:d7:15:24:48:74:9f:
         20:d1:39:b5:2d:7b:af:26:b4:3c:bf:b7:a6:9e:aa:62:c5:3c:
         77:96:aa:f0:ec:26:50:78:cd:41:51:a5:0e:df:d6:17:90:c2:
         1b:b6:e8:05:9f:97:34:97:c7:35:03:d1:09:39:a6:20:dc:d8:
         a0:7f:99:42:51:e9:38:60:e8:f0:62:fb:db:d6:17:3f:f3:59:
         d6:ea:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----