Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/323830303a6431303a3a2f33322d3438203d3e203532333837.roa
File:                     323830303a6431303a3a2f33322d3438203d3e203532333837.roa (raw, json)
Hash identifier:          fHI2yejF7qXLwjwt/gn2hW+f0bO9dMxbgPYYWFCiDIU=
Subject key identifier:   07:F6:F2:21:84:25:46:B5:27:EC:17:31:B7:53:05:74:4B:40:4C:1C
Certificate issuer:       /CN=159503B8FACEE08EF85A04D3D6C0322CCD9E2F81
Certificate serial:       782AFD74C33C0746874CDD922865B25397625C6E
Authority key identifier: 15:95:03:B8:FA:CE:E0:8E:F8:5A:04:D3:D6:C0:32:2C:CD:9E:2F:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/323830303a6431303a3a2f33322d3438203d3e203532333837.roa
Signing time:             Tue 05 Mar 2024 18:23:25 +0000
ROA not before:           Tue 05 Mar 2024 18:18:25 +0000
ROA not after:            Tue 04 Mar 2025 18:23:25 +0000
asID:                     52387
IP address blocks:        2800:d10::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2a:fd:74:c3:3c:07:46:87:4c:dd:92:28:65:b2:53:97:62:5c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159503B8FACEE08EF85A04D3D6C0322CCD9E2F81
        Validity
            Not Before: Mar  5 18:18:25 2024 GMT
            Not After : Mar  4 18:23:25 2025 GMT
        Subject: CN=07F6F221842546B527EC1731B75305744B404C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:0d:92:28:ff:a2:27:04:c7:c2:ad:47:ea:
                    7a:a3:eb:f8:64:f4:e9:f0:05:51:fb:d6:b3:0e:79:
                    f3:0e:9e:df:0c:c1:e9:2e:6e:e7:9c:2b:96:37:2e:
                    a0:a5:9a:67:5e:55:d1:67:ab:c9:8a:5d:13:15:c8:
                    7e:80:3a:1f:ee:d3:95:e3:47:04:46:10:73:d9:90:
                    ca:18:cc:ba:54:56:33:78:7d:0b:ea:31:bb:ac:08:
                    4f:2a:b2:a8:2a:08:b7:ec:b3:34:de:20:36:eb:f6:
                    f7:8e:08:1d:af:8a:e2:78:da:ac:8c:0f:00:5c:4f:
                    77:71:38:3c:28:1b:2c:69:bc:85:74:ef:b9:b9:b5:
                    0c:62:ad:22:72:4c:72:c5:a2:1e:7b:23:59:36:74:
                    46:f6:6a:01:b5:d0:ac:33:4a:bc:d8:cd:44:b8:fd:
                    68:bc:17:98:73:e2:cb:77:d5:fd:19:88:9c:eb:d8:
                    16:a6:ef:26:e3:e4:0d:c7:f6:0c:4f:ce:ff:f1:9c:
                    1f:2d:b3:97:b6:4e:86:1e:2f:b6:a7:9c:8b:45:22:
                    69:c9:e9:1d:f5:0c:9a:ed:a0:7c:ea:4f:ad:63:ad:
                    f0:1f:9c:ac:9d:12:7a:eb:55:6f:1e:d2:57:f4:4b:
                    00:9d:9c:59:1c:ca:ea:f0:e7:3e:05:52:d6:0f:43:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F6:F2:21:84:25:46:B5:27:EC:17:31:B7:53:05:74:4B:40:4C:1C
            X509v3 Authority Key Identifier:
                keyid:15:95:03:B8:FA:CE:E0:8E:F8:5A:04:D3:D6:C0:32:2C:CD:9E:2F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/323830303a6431303a3a2f33322d3438203d3e203532333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:19:c9:9f:2f:bd:f9:97:58:af:82:34:f7:a6:e8:a8:4b:ab:
         ea:40:41:80:d6:c0:6f:3f:44:3d:01:6f:ed:fb:f3:73:8b:9a:
         02:ad:9d:72:36:7a:19:fa:90:65:bb:5f:47:fe:2e:3c:da:6c:
         2c:d8:e8:67:f7:8f:d7:6e:2d:2c:1e:88:2c:32:4d:fa:6a:d9:
         fa:f0:8c:0a:91:01:18:e7:c7:43:67:ed:d1:05:57:06:fd:f5:
         e3:37:b5:ec:b2:db:bb:c7:89:17:94:cf:e6:0d:e7:5a:35:bb:
         0b:99:9d:89:44:0f:77:0e:aa:4e:62:a8:42:a1:aa:1f:41:f9:
         b8:77:f5:2e:e2:06:cb:35:89:60:5a:6c:69:20:ec:2f:8a:75:
         74:14:c2:7a:29:7a:67:78:8b:81:bb:81:ad:f4:1d:fb:ae:d9:
         e6:92:ef:a3:0d:15:0c:bc:fc:4f:51:47:63:4b:13:19:2f:3a:
         39:73:c0:35:af:82:ce:ca:b7:95:45:29:25:53:fa:b5:b7:e2:
         3c:99:94:ac:ba:f2:c2:40:54:cf:9a:72:60:1a:7f:88:60:75:
         53:65:77:42:fc:bf:7f:a3:54:6d:be:da:fc:c2:b3:9d:d7:61:
         88:2d:8d:5a:12:96:37:5c:b2:99:99:0f:18:99:60:84:d8:c3:
         e1:8b:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----