Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3438203d3e20323639393130.roa
File:                     323830333a656365303a3a2f33322d3438203d3e20323639393130.roa (raw, json)
Hash identifier:          fM33ZucOOW5WUNDJvuv8VfaGK5ErBvKFmGwjT7v1N40=
Subject key identifier:   F6:7D:91:0D:E4:B2:AC:AC:5E:49:C7:B1:81:9B:DC:BC:A5:FE:29:2D
Certificate issuer:       /CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Certificate serial:       74E0DB99AB678D8DD3E5B7F61B8FA90DDF69FC64
Authority key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3438203d3e20323639393130.roa
Signing time:             Tue 05 Mar 2024 18:23:18 +0000
ROA not before:           Tue 05 Mar 2024 18:18:18 +0000
ROA not after:            Tue 04 Mar 2025 18:23:18 +0000
asID:                     269910
IP address blocks:        2803:ece0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e0:db:99:ab:67:8d:8d:d3:e5:b7:f6:1b:8f:a9:0d:df:69:fc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
        Validity
            Not Before: Mar  5 18:18:18 2024 GMT
            Not After : Mar  4 18:23:18 2025 GMT
        Subject: CN=F67D910DE4B2ACAC5E49C7B1819BDCBCA5FE292D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6f:16:af:32:63:b9:bf:0e:e2:96:aa:ef:3b:
                    b0:15:4c:8b:d0:be:3f:8b:3a:53:bc:ac:2c:a8:b7:
                    9e:5a:bb:bb:a5:67:2d:d8:c5:12:58:f5:83:61:cc:
                    bf:e2:cd:01:36:3e:72:3f:11:46:83:64:eb:58:3b:
                    62:d6:b5:24:ea:34:82:ec:5d:ff:d0:81:45:32:f2:
                    bd:2e:e7:46:49:12:70:d5:11:24:f4:9d:37:29:ba:
                    5f:88:c5:2a:3f:6c:d9:d7:21:c8:fe:43:2f:99:02:
                    1c:40:0e:3d:f6:3a:ea:69:e5:21:bb:79:0b:1f:b4:
                    c5:c4:b6:14:9a:e8:17:75:88:97:01:cd:12:2b:e7:
                    4a:18:08:0c:e4:c3:c6:03:db:cb:0a:2b:89:75:af:
                    5a:0b:1e:b1:cd:51:7e:26:06:69:ed:a3:1c:7e:a3:
                    ee:6b:b5:a7:06:60:63:bf:39:d2:75:3b:86:1c:88:
                    e3:90:4e:b7:13:cc:4d:64:f0:b9:bb:7f:0d:34:65:
                    da:d6:9d:ab:75:40:bd:ac:19:4e:3b:7f:f1:6b:5e:
                    c2:f5:be:67:26:bd:21:8f:7b:bc:fa:c6:1c:17:b1:
                    5c:14:de:21:91:aa:ea:18:37:68:92:c8:20:cf:83:
                    7d:72:3d:fd:33:b2:52:80:2e:ae:8e:82:11:60:4e:
                    2c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7D:91:0D:E4:B2:AC:AC:5E:49:C7:B1:81:9B:DC:BC:A5:FE:29:2D
            X509v3 Authority Key Identifier:
                keyid:91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3438203d3e20323639393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:7f:79:87:c8:e5:9c:1f:50:1c:e8:1c:df:d6:b4:c6:80:bf:
         7e:47:6f:87:53:fb:00:67:5a:ce:55:09:b5:d6:06:de:d3:58:
         95:3d:b0:c4:6c:00:5d:f2:dc:d4:9a:bf:cf:54:17:e2:e7:bd:
         b1:8f:cb:3c:73:17:aa:42:b1:7d:58:07:24:cc:7e:b0:28:75:
         21:da:73:24:3c:fb:7a:7a:1a:69:a8:2d:8c:00:5c:8e:d0:13:
         fa:b8:f8:7f:44:0f:ad:e6:56:39:b7:86:16:c8:b7:d1:a2:3b:
         15:a5:d8:bd:51:db:64:c9:99:a6:e0:aa:4d:d7:e0:d8:fc:df:
         0d:28:74:70:27:bb:4a:c9:bc:e7:e6:14:b4:65:c8:70:05:1c:
         f1:96:64:28:53:d3:42:ca:bd:1d:64:dc:48:78:40:c3:a9:89:
         44:93:6b:c3:76:15:95:b7:ef:52:51:e1:29:bc:52:ea:ac:4a:
         22:12:fa:04:91:24:e7:59:60:4b:a1:33:77:5c:5c:70:84:7c:
         b7:bd:4d:23:7c:9f:8c:67:bd:cd:39:90:31:42:35:29:41:b2:
         b6:46:45:b3:a7:54:46:4d:a3:22:dc:55:78:ff:c8:09:fd:e9:
         3c:6c:c3:d3:e7:3b:a3:c6:2b:ab:d3:05:df:3c:a2:3b:e6:bf:
         51:f2:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----