Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a3a2f33322d3438203d3e203233303331.roa
File:                     323830333a633331303a3a2f33322d3438203d3e203233303331.roa (raw, json)
Hash identifier:          5L2AqoIMy6IodBJJewr51k/gEB+V/cARF/vRaJKvjpc=
Subject key identifier:   00:08:9E:57:DF:CD:97:CF:82:30:1B:FF:13:66:80:D4:52:E0:74:4B
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       1685BA9B73672A841B70F61419E582F0319D56BB
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a3a2f33322d3438203d3e203233303331.roa
Signing time:             Tue 05 Mar 2024 17:54:51 +0000
ROA not before:           Tue 05 Mar 2024 17:49:51 +0000
ROA not after:            Tue 04 Mar 2025 17:54:51 +0000
asID:                     23031
IP address blocks:        2803:c310::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:85:ba:9b:73:67:2a:84:1b:70:f6:14:19:e5:82:f0:31:9d:56:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Mar  5 17:49:51 2024 GMT
            Not After : Mar  4 17:54:51 2025 GMT
        Subject: CN=00089E57DFCD97CF82301BFF136680D452E0744B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:e8:4e:8b:b8:1e:ea:75:f0:0d:c7:68:01:
                    46:08:bd:cc:1c:47:d5:3c:1d:c1:e2:d9:40:68:15:
                    4d:18:23:d1:2e:07:62:42:27:27:4a:8a:02:93:f4:
                    f7:99:79:19:6e:d5:4e:2c:82:bf:c1:36:a7:23:68:
                    f6:ba:d7:94:ff:14:bd:b6:69:1c:f3:ff:8a:72:29:
                    ec:6d:2c:d5:5e:40:3f:10:18:14:a4:3c:89:f1:1f:
                    df:75:fc:48:2b:82:f5:83:9b:b0:48:9d:fa:f9:95:
                    c0:f1:1c:c3:f2:31:d2:e3:97:07:73:31:fa:99:1c:
                    2a:90:da:9c:85:aa:33:64:cd:a5:cc:ee:04:ba:d4:
                    f5:23:05:49:4e:84:f8:db:80:7e:b8:b2:75:2c:5a:
                    65:51:64:6d:08:e1:36:1a:d5:cc:83:a3:a2:87:dc:
                    02:74:56:8a:ff:f9:c0:11:36:5f:6c:03:e5:a7:b6:
                    c5:f7:53:bc:1c:52:d4:e8:e7:ae:60:6d:3a:c9:22:
                    95:70:c0:e8:58:24:28:8b:77:8b:1e:e8:a9:36:53:
                    61:19:26:c5:0c:17:f0:3f:eb:c7:8c:32:fc:3f:b4:
                    5a:bf:47:1d:79:6c:94:72:29:02:7e:44:a0:15:0c:
                    bb:96:b8:3c:ab:98:4e:c3:34:a7:84:44:d4:17:be:
                    b1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:08:9E:57:DF:CD:97:CF:82:30:1B:FF:13:66:80:D4:52:E0:74:4B
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a3a2f33322d3438203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c310::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:f7:fa:3c:06:6a:8b:be:80:29:17:37:f1:ca:ea:e7:74:d5:
         b6:95:fc:67:63:e4:9b:05:36:28:83:0e:23:25:e5:8b:e3:86:
         e5:64:82:00:18:88:f4:55:a3:7e:ec:a3:af:b5:b7:85:18:e0:
         74:91:c1:f7:b4:18:5a:f4:54:20:0c:ca:8e:93:1c:b7:c7:e8:
         16:ac:92:eb:dd:d6:16:86:a5:9f:ad:32:a3:b1:b9:49:5d:6e:
         9d:58:f2:ff:27:76:a3:8f:9f:90:61:83:f3:03:d8:3d:d8:ff:
         f4:1a:38:6a:b7:64:ca:4c:03:1c:cc:4f:4f:24:07:03:9a:9c:
         71:43:fd:e5:e7:c5:8a:cc:09:f2:3e:e5:ee:cf:66:60:15:97:
         ca:ca:e0:ab:9e:f8:d7:b3:db:44:8f:3d:f9:78:55:42:6f:ab:
         83:7b:ff:47:63:47:2a:b5:57:4e:6c:94:a1:2c:be:75:89:30:
         bc:5a:dd:44:b3:fc:f4:b0:c0:d4:52:34:09:8c:0d:bb:d6:63:
         7e:d3:57:9a:ee:86:6a:42:dd:4f:13:64:0d:09:30:af:1a:14:
         08:42:bd:74:b5:ca:88:c6:4b:41:0c:c1:23:b1:87:ac:b8:a8:
         6b:ff:dd:ad:04:5f:1b:a9:f2:30:9b:a7:7b:fd:13:04:7c:80:
         6b:8c:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----