Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31323a3a2f34382d3438203d3e203237393531.roa
File:                     323830313a3166633a31323a3a2f34382d3438203d3e203237393531.roa (raw, json)
Hash identifier:          f5WaD5Ofc8RQUkDSWJ4n/lOink7ZgDci7ydBbXZhFjU=
Subject key identifier:   09:0C:8C:1B:22:41:5F:DA:A6:05:6F:88:29:64:54:29:A7:B3:04:4D
Certificate issuer:       /CN=6A4FE860688A76C484112401523A793836137108
Certificate serial:       568FF362AEA9084C4DE2CB21B2CAB1C97B790B04
Authority key identifier: 6A:4F:E8:60:68:8A:76:C4:84:11:24:01:52:3A:79:38:36:13:71:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31323a3a2f34382d3438203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 17:49:13 +0000
ROA not before:           Tue 05 Mar 2024 17:44:13 +0000
ROA not after:            Tue 04 Mar 2025 17:49:13 +0000
asID:                     27951
IP address blocks:        2801:1fc:12::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8f:f3:62:ae:a9:08:4c:4d:e2:cb:21:b2:ca:b1:c9:7b:79:0b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A4FE860688A76C484112401523A793836137108
        Validity
            Not Before: Mar  5 17:44:13 2024 GMT
            Not After : Mar  4 17:49:13 2025 GMT
        Subject: CN=090C8C1B22415FDAA6056F8829645429A7B3044D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:4e:e6:b9:14:ea:a4:ab:65:7f:dc:48:63:
                    36:f9:da:77:87:58:cc:2d:d4:f7:b9:08:61:4c:2d:
                    38:7a:4d:14:da:14:6f:af:28:7d:60:b7:77:43:14:
                    bd:0c:ac:3b:63:b0:e0:65:54:e0:74:4f:50:66:e7:
                    9c:ae:9f:6e:01:6b:06:95:e5:93:3b:3b:6c:97:ef:
                    b8:bd:00:ab:2e:67:ec:60:b2:82:16:78:14:4a:a7:
                    cd:0e:6d:e3:7c:c2:14:bc:ce:b3:82:cb:f6:44:df:
                    42:e1:35:c3:e1:7e:a3:6d:47:0e:17:68:4c:cc:9e:
                    2a:53:b7:92:4d:fb:9f:d8:70:b8:66:81:1b:63:de:
                    34:47:e0:9c:34:04:2b:f1:9b:a3:2a:4d:d9:18:18:
                    52:4b:84:1a:e2:5d:62:bc:cb:97:13:00:60:1f:40:
                    37:21:16:18:b4:96:b3:5d:4a:40:5c:b8:cc:85:5e:
                    b2:d0:0e:5a:9f:5c:ee:7d:ff:63:8b:cd:04:d1:a2:
                    96:76:82:bd:c7:fc:eb:3f:8d:58:3f:c6:7a:ef:e8:
                    bd:6a:a7:32:34:6f:21:51:90:75:70:02:58:48:94:
                    a1:11:f3:b8:50:14:24:c7:9c:5a:c4:9c:d2:4c:b0:
                    e2:f0:32:c9:94:61:43:ac:c0:07:9a:40:79:f2:07:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0C:8C:1B:22:41:5F:DA:A6:05:6F:88:29:64:54:29:A7:B3:04:4D
            X509v3 Authority Key Identifier:
                keyid:6A:4F:E8:60:68:8A:76:C4:84:11:24:01:52:3A:79:38:36:13:71:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/6A4FE860688A76C484112401523A793836137108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A4FE860688A76C484112401523A793836137108.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/569D55A2EEE63868CE06B7610089FF502EA2ED7B86C5D78676D312FEE8074EA4/0/323830313a3166633a31323a3a2f34382d3438203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1fc:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:d4:d9:18:3d:f1:cc:e7:a0:7e:42:fa:ae:90:e9:8e:3f:26:
         2e:97:b2:45:33:64:0d:ad:a3:0b:f4:91:c1:67:fe:16:68:1d:
         2e:0f:84:f8:36:e0:74:14:f1:e3:24:8a:66:dd:54:94:49:1c:
         50:2b:e8:ad:9e:0e:22:45:56:f4:4a:4d:35:10:b9:bc:b1:c0:
         53:cb:05:1b:9a:3a:e7:52:49:d4:a9:95:9a:f2:2a:ef:67:91:
         a6:69:3e:d4:a5:70:95:8b:ad:7d:27:cb:b6:00:ee:f4:02:33:
         2e:6b:87:f6:3a:7a:48:34:a3:fe:61:59:09:d1:38:06:27:b6:
         4b:a7:b5:b7:b5:45:2f:1e:e2:e7:74:b0:5f:a3:70:8d:e1:bb:
         f3:c7:93:c4:91:02:8a:cd:2f:b6:bd:77:4f:98:dd:ee:58:27:
         69:aa:4e:e8:08:fd:ad:92:e7:09:ac:e1:1a:0d:b6:4a:dc:bb:
         d1:d2:97:2d:27:46:c6:64:23:79:d5:b7:a9:f9:d6:3b:20:21:
         47:2e:72:da:70:9e:2c:dc:60:e5:5a:b3:45:3d:3a:25:8b:96:
         6c:79:8f:c3:8d:12:88:54:9f:af:47:65:85:c1:bc:51:06:04:
         69:6a:17:aa:ef:44:9b:5d:18:df:5a:ff:0c:47:97:ec:86:08:
         c2:a0:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----