Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a613a3a2f34382d3438203d3e20323732303832.roa
File:                     323830333a396231303a613a3a2f34382d3438203d3e20323732303832.roa (raw, json)
Hash identifier:          bEL/yOxz6hlzS+Y5519+cjFu10l8c/ZGtSyq1DrJpUY=
Subject key identifier:   26:92:AE:F1:E8:0C:EF:06:58:9A:91:2D:91:11:FC:C5:6E:93:3D:95
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       607A871EE618E09B26D03E70FA683F4EA8101C7B
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a613a3a2f34382d3438203d3e20323732303832.roa
Signing time:             Tue 05 Mar 2024 18:22:34 +0000
ROA not before:           Tue 05 Mar 2024 18:17:34 +0000
ROA not after:            Tue 04 Mar 2025 18:22:34 +0000
asID:                     272082
IP address blocks:        2803:9b10:a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7a:87:1e:e6:18:e0:9b:26:d0:3e:70:fa:68:3f:4e:a8:10:1c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Mar  5 18:17:34 2024 GMT
            Not After : Mar  4 18:22:34 2025 GMT
        Subject: CN=2692AEF1E80CEF06589A912D9111FCC56E933D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:52:fa:a1:c5:d3:67:0d:4f:bb:82:76:cd:
                    58:52:3f:1e:1b:ce:a0:26:de:ce:f5:14:d3:cd:95:
                    d1:66:21:87:8d:0f:4a:50:7e:8e:93:2a:43:af:d2:
                    25:04:b9:dc:52:5d:b8:f5:e9:27:34:0e:06:49:62:
                    52:03:f6:f7:9a:35:23:84:10:86:36:ac:5e:28:af:
                    45:d2:7b:c0:28:13:ac:ea:29:95:26:9a:3c:08:36:
                    b6:dd:3f:90:ca:e9:52:23:2d:1d:af:b3:c6:03:b7:
                    92:d8:6f:51:37:15:0a:90:a4:1a:11:3e:2a:5a:ea:
                    d8:54:35:b9:25:a5:ee:39:2a:46:2d:61:bc:70:33:
                    ca:fc:92:c1:11:92:02:73:b1:b0:a1:29:9e:01:2d:
                    87:c3:d0:40:10:53:59:d8:3b:7c:72:c7:02:5a:81:
                    4a:0c:ad:bb:8b:ab:2b:82:f5:b2:46:36:07:04:17:
                    67:b4:72:52:fa:1b:5f:c4:dd:64:ea:7c:98:4b:f9:
                    07:bd:7e:22:46:3c:34:78:c7:a3:32:3d:f7:4c:18:
                    cb:c0:22:6a:a6:25:a0:e2:ed:2e:e5:60:17:fc:cf:
                    1f:27:a4:b1:ab:31:27:31:9f:4c:db:55:2b:7f:4e:
                    81:e1:e1:f4:59:77:4a:09:ce:b9:f0:5c:4a:83:41:
                    03:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:92:AE:F1:E8:0C:EF:06:58:9A:91:2D:91:11:FC:C5:6E:93:3D:95
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a613a3a2f34382d3438203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:0d:21:5d:01:c1:6c:6b:b9:e3:de:c6:39:ea:e8:35:47:
         2e:44:59:79:87:b8:f0:64:37:ba:99:ce:6a:37:26:86:a9:44:
         c4:e5:e4:db:d0:c1:aa:d8:d0:c4:9d:eb:d7:ea:a6:1c:11:28:
         1d:9f:e9:0b:e7:9e:55:c8:07:ac:ee:b9:83:5f:3d:b6:60:05:
         0b:09:04:c3:b8:da:f3:4c:3f:1f:3d:d4:f4:c0:ae:26:c5:88:
         df:31:41:02:2b:f9:e2:2d:35:42:a3:a8:13:73:f1:5f:f8:78:
         74:a6:03:4e:bf:f7:1e:2d:d9:46:b3:20:f4:77:7b:9d:3c:88:
         f4:fc:32:1f:a1:f8:79:01:f8:db:1c:44:45:b4:e4:50:c4:ca:
         28:13:d4:4e:44:3c:dd:ec:2d:37:c2:fe:b7:f7:c1:63:1a:79:
         9a:4e:94:ee:17:e6:c2:33:de:c0:ac:76:0d:d7:88:0f:79:df:
         7f:e4:e6:73:e3:09:bd:35:27:13:91:82:00:3d:34:1f:56:18:
         57:0f:65:79:ae:52:85:b7:f6:fc:6a:03:68:c6:d0:13:54:08:
         52:74:83:28:ab:97:68:2a:d6:7b:92:75:eb:9d:6f:f9:0b:e3:
         0b:49:7d:29:6c:be:09:35:c2:87:b9:9a:fd:22:0e:10:cf:63:
         77:fc:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----