Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/323830333a386432303a3a2f33322d3438203d3e20333934363834.roa
File:                     323830333a386432303a3a2f33322d3438203d3e20333934363834.roa (raw, json)
Hash identifier:          OF29ICV13neYSZs5QEi3pYFGSsrYfyl8b27Lg92u+xM=
Subject key identifier:   CC:69:D7:1C:02:97:CD:D0:8F:2E:9B:B1:6B:C8:E7:A9:E4:2C:6F:5E
Certificate issuer:       /CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
Certificate serial:       6D48F50EF12412C194898B029F06B6CD99BCFDD5
Authority key identifier: F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/323830333a386432303a3a2f33322d3438203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 18:17:36 +0000
ROA not before:           Tue 05 Mar 2024 18:12:36 +0000
ROA not after:            Tue 04 Mar 2025 18:17:36 +0000
asID:                     394684
IP address blocks:        2803:8d20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:48:f5:0e:f1:24:12:c1:94:89:8b:02:9f:06:b6:cd:99:bc:fd:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
        Validity
            Not Before: Mar  5 18:12:36 2024 GMT
            Not After : Mar  4 18:17:36 2025 GMT
        Subject: CN=CC69D71C0297CDD08F2E9BB16BC8E7A9E42C6F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:5d:e5:b0:8d:49:22:63:5d:f4:5a:91:ff:
                    bc:88:9c:b6:f3:96:60:8c:33:90:68:cc:f7:90:d0:
                    bd:0e:71:37:36:3d:ea:e2:b0:c8:43:1e:bf:86:a0:
                    19:8f:d3:90:4a:69:ba:f2:f2:b7:90:6a:b6:f6:2e:
                    d3:c4:2a:b1:8a:68:ba:12:56:c8:b9:6b:ee:06:63:
                    ec:72:66:5a:65:ed:38:de:79:aa:d3:f3:b1:f0:72:
                    92:5b:52:ba:9b:b9:46:df:d3:52:d1:9a:97:6a:ac:
                    70:88:a6:14:97:9f:26:5a:1a:79:64:59:fb:d9:9a:
                    32:c2:ca:70:4b:c7:6d:2d:c6:75:2c:4e:5b:5d:6d:
                    45:ba:66:0e:a1:bb:a3:ad:d3:af:f0:e1:32:41:18:
                    93:c4:a6:0c:3b:78:99:ac:f1:8f:5c:62:0c:7a:ef:
                    3d:e0:fe:5c:53:10:fe:fe:7c:fc:1b:9f:bd:76:62:
                    9a:9e:da:b3:b7:81:46:1d:ed:8c:5e:d9:83:84:98:
                    89:1d:15:69:f3:d4:11:79:05:41:63:a4:12:1e:e0:
                    02:ee:ce:01:aa:b2:77:a0:f0:0a:2b:1c:40:46:20:
                    c1:bd:0a:12:3a:3e:0f:f3:6f:92:39:8c:43:d0:21:
                    e8:50:28:0e:6c:dd:9e:a1:13:08:1a:21:c1:d7:26:
                    31:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:69:D7:1C:02:97:CD:D0:8F:2E:9B:B1:6B:C8:E7:A9:E4:2C:6F:5E
            X509v3 Authority Key Identifier:
                keyid:F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/323830333a386432303a3a2f33322d3438203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:58:88:9f:20:a8:1e:9b:46:d7:bf:71:b8:ad:67:a1:6b:
         b8:7d:f9:c5:31:23:cb:f4:e6:5f:4e:9a:e1:a6:19:70:3a:62:
         43:e6:f2:53:28:81:9d:96:25:d6:f4:4a:8b:39:85:9c:d9:aa:
         b4:15:da:59:33:78:1d:3d:7c:14:73:bd:a6:0a:f6:ee:1e:97:
         20:ad:f9:16:b5:bb:b0:3b:bd:30:64:06:99:6d:3a:7c:87:31:
         bc:05:a0:83:a4:a9:24:24:21:a8:6b:c2:35:01:7c:46:55:a8:
         71:79:ac:49:e0:1e:57:80:d9:de:f9:c4:01:cc:7d:4b:9f:2a:
         08:49:8b:f7:41:81:b7:8c:9b:0e:d0:af:69:c3:f6:c3:b5:f9:
         09:8a:f3:08:ca:db:2c:91:d7:b2:fa:8c:69:93:a6:d9:34:91:
         4f:e5:9c:91:9b:2c:93:be:7d:76:8d:97:6e:da:1d:13:5f:48:
         e9:3f:1f:68:77:90:af:43:89:09:40:c7:6d:24:15:b1:c5:e8:
         b0:7e:21:3c:d9:74:44:22:e1:70:ef:36:d6:76:ba:c3:98:97:
         30:40:5f:5d:d6:49:a4:77:43:87:1d:de:7a:bb:64:23:dc:2e:
         df:fe:80:8b:b9:da:f3:4b:ee:51:c8:c3:0b:16:85:ad:3a:b4:
         7e:59:ab:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----