Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/323030313a313338383a3a2f33322d3438203d3e20323634363834.roa
File:                     323030313a313338383a3a2f33322d3438203d3e20323634363834.roa (raw, json)
Hash identifier:          hSnD+DiVhok5ZIs0y1u4aoUPAuNdGSf6KTYZ9znGhKA=
Subject key identifier:   CC:AF:08:E7:E1:C5:3F:ED:4E:91:DF:A8:0D:C4:10:E7:AA:69:B7:ED
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       2EA0B076BB7C8B3561505CAC985CCE013A70F6D7
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/323030313a313338383a3a2f33322d3438203d3e20323634363834.roa
Signing time:             Tue 05 Mar 2024 18:20:59 +0000
ROA not before:           Tue 05 Mar 2024 18:15:59 +0000
ROA not after:            Tue 04 Mar 2025 18:20:59 +0000
asID:                     264684
IP address blocks:        2001:1388::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a0:b0:76:bb:7c:8b:35:61:50:5c:ac:98:5c:ce:01:3a:70:f6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Mar  5 18:15:59 2024 GMT
            Not After : Mar  4 18:20:59 2025 GMT
        Subject: CN=CCAF08E7E1C53FED4E91DFA80DC410E7AA69B7ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:c8:01:19:3d:a9:f4:f3:67:aa:f5:54:c3:
                    70:2b:55:6e:6c:70:64:26:6e:8a:7e:8c:c3:31:9d:
                    e1:56:a3:24:c6:43:91:1f:af:a8:8b:b6:f9:c4:b0:
                    3f:b4:8d:fa:68:8e:34:d8:1a:54:dd:b6:04:d5:70:
                    12:5e:d8:0c:c6:e0:85:b8:f5:ef:99:68:d1:96:bd:
                    fd:0c:18:2c:ca:47:27:33:d6:20:f2:56:ee:20:9e:
                    fc:8c:ac:0c:e8:3d:3b:89:e5:52:16:8a:23:64:11:
                    90:5f:ee:8a:1e:1c:e4:3b:18:74:07:27:15:5f:68:
                    ce:55:54:32:b8:e0:3e:99:0f:c9:48:ed:fb:52:14:
                    04:0b:c7:15:5f:c8:52:66:52:57:17:0c:2c:a2:11:
                    d0:17:32:1f:fa:81:f0:df:a6:19:d8:b2:c8:b0:22:
                    0d:9a:d4:15:72:7d:50:10:34:ef:1a:b9:78:bf:1a:
                    f8:ed:0a:65:ba:4b:fc:4c:4a:e8:7b:67:4e:34:fa:
                    83:9d:e1:46:55:63:4c:64:59:17:08:77:df:72:b2:
                    a3:5f:eb:ec:51:d2:b9:a2:5e:88:40:e1:56:55:fa:
                    28:ae:37:a8:1a:b3:62:c1:d4:36:df:45:bc:83:12:
                    36:73:91:fc:b8:7b:3f:d1:b5:74:b4:d2:1f:1c:ec:
                    ed:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AF:08:E7:E1:C5:3F:ED:4E:91:DF:A8:0D:C4:10:E7:AA:69:B7:ED
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/323030313a313338383a3a2f33322d3438203d3e20323634363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1388::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:ad:03:be:72:ca:66:0a:05:01:05:81:98:83:8f:7f:49:1c:
         3e:f8:a9:e7:c6:f6:45:df:e3:b9:ab:09:b0:99:a1:a0:71:0a:
         74:df:74:ea:c3:84:5b:8f:f2:82:7d:0c:d4:9f:e2:51:c9:3b:
         c7:31:5c:e7:42:c3:a6:a0:4b:74:d6:d2:97:eb:71:f9:05:c4:
         08:64:e3:49:61:90:5e:e2:ed:8a:6b:43:c9:d7:73:f6:67:af:
         f2:13:9e:91:3e:72:65:92:88:28:80:e7:33:45:9a:5b:64:d8:
         a9:26:db:9b:cf:94:78:04:cb:7d:83:65:f9:4d:50:37:4d:45:
         ff:a6:10:94:5a:8f:ba:ab:26:f3:86:21:b6:44:b2:fb:18:a6:
         a3:2a:37:7f:5a:42:bd:7d:0d:69:76:63:6c:90:40:b2:bf:97:
         a8:8c:81:80:7f:77:ea:9c:4b:1b:b2:9a:6e:06:44:1a:fd:87:
         94:f6:25:c4:14:72:a0:e7:43:00:41:41:9b:e3:3a:e4:8a:33:
         ae:2b:31:f7:79:aa:55:f6:6d:7f:7c:1f:5b:f0:0d:af:c5:84:
         b7:f1:6f:a2:9c:df:ec:52:3a:6a:74:a2:df:59:cc:2f:1c:89:
         fb:97:f7:83:1c:10:2d:0d:3a:d3:d6:06:2c:14:5e:a8:56:21:
         74:a1:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----