Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3630303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3630303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          vX5ppordHPR4BdRD1ygjxJiZFRNCy9SweB5MEBM44rU=
Subject key identifier:   64:69:2E:32:52:BB:AB:0F:2E:FE:AB:3E:7C:F8:1B:81:B4:0F:B6:EE
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       5869051C785F5B6D66D9F10DFDEA42D2EFC51BBD
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3630303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 05 Mar 2024 18:02:21 +0000
ROA not before:           Tue 05 Mar 2024 17:57:21 +0000
ROA not after:            Tue 04 Mar 2025 18:02:21 +0000
asID:                     266894
IP address blocks:        2803:56a0:600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:69:05:1c:78:5f:5b:6d:66:d9:f1:0d:fd:ea:42:d2:ef:c5:1b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Mar  5 17:57:21 2024 GMT
            Not After : Mar  4 18:02:21 2025 GMT
        Subject: CN=64692E3252BBAB0F2EFEAB3E7CF81B81B40FB6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9a:5d:cb:18:f2:45:59:e1:1a:f9:ff:48:b5:
                    e2:01:01:7d:30:33:5b:ee:48:b8:bf:82:82:78:ff:
                    99:2e:e1:31:b5:8e:d6:5f:87:84:28:0b:0c:aa:da:
                    81:bb:f7:f9:10:11:6e:41:43:1b:75:0e:09:70:6b:
                    38:3e:c4:47:7b:f0:02:dc:08:ba:78:ed:1c:6e:13:
                    7b:29:c9:c8:0d:d1:29:22:c9:eb:13:61:72:f8:b3:
                    91:29:dd:ea:d0:5c:34:79:65:e9:aa:9b:ef:66:b4:
                    8b:66:59:84:08:44:99:22:f0:ef:05:48:1d:cb:ad:
                    29:b5:05:63:2d:3c:78:06:97:e1:16:92:72:40:de:
                    f4:ea:9e:5d:3d:11:f9:6e:72:93:6b:5d:a8:68:ee:
                    2e:b9:e3:56:38:be:e6:c4:11:ef:36:5f:57:2e:b5:
                    8a:b3:75:64:08:53:7b:87:84:e9:41:69:12:9b:d9:
                    a8:c7:8c:a2:de:fb:12:78:7b:68:91:95:78:d7:cf:
                    57:d5:2a:e0:91:ea:29:e9:52:7d:b8:12:67:db:1d:
                    e4:b6:a6:54:ca:45:9e:ba:b1:6c:d8:8f:b7:80:0d:
                    35:a7:54:92:ee:5c:fb:8d:94:ca:0d:00:97:11:74:
                    f2:d4:28:7b:50:3b:06:c7:bc:88:d8:7b:dc:20:4f:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:69:2E:32:52:BB:AB:0F:2E:FE:AB:3E:7C:F8:1B:81:B4:0F:B6:EE
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3630303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:fd:5d:46:a7:f4:a8:3f:76:8b:2d:73:8f:78:21:8a:2c:d5:
         8b:6b:ca:ab:18:77:f5:39:6b:bc:d2:1c:d0:3f:8c:e5:4b:a6:
         38:49:d8:e8:87:78:95:c3:fb:fd:fe:1c:f1:f9:2c:02:d6:8d:
         d3:1e:aa:6c:aa:5a:76:63:c2:11:a7:54:81:72:52:88:6d:af:
         4c:23:0d:8e:ad:0a:e9:70:09:3c:48:e3:35:05:aa:59:6c:7b:
         9c:84:2b:a1:0a:1c:41:f5:18:27:a7:07:86:73:a0:ba:8c:ea:
         d3:9f:58:75:33:94:e6:ce:d3:1e:7d:93:f3:c5:52:1a:60:3d:
         17:98:99:c8:12:ab:ca:c4:3c:cb:aa:f4:35:0c:73:ce:0f:8c:
         9f:08:d9:bc:b0:18:d0:be:c6:72:7c:a9:d1:e3:9f:22:96:6a:
         37:e4:06:96:d9:8a:1c:b0:52:b7:82:f7:83:4f:db:5a:8e:54:
         ec:6c:72:b5:5f:ef:c6:9a:ae:5f:28:b9:d7:20:8b:c9:6d:ff:
         95:7c:9d:0d:11:1e:9c:f9:26:26:0d:ef:57:4c:82:df:8b:24:
         65:63:c6:69:f0:8b:88:74:73:20:f6:d2:85:a8:b0:5b:9f:74:
         53:4f:98:fe:59:6a:5e:2a:64:d6:c0:b8:be:1a:c2:25:67:8e:
         4c:31:74:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----