Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a3a2f33322d3438203d3e203135313639.roa
File:                     323830303a3366303a3a2f33322d3438203d3e203135313639.roa (raw, json)
Hash identifier:          uWKOPhReHnXVjAlJh1lek2CklTPhzrsDHcA2NnaUmS8=
Subject key identifier:   74:D3:DA:97:71:1F:31:82:B2:74:A4:91:7C:0A:DB:B9:AB:5B:AB:0E
Certificate issuer:       /CN=4A21846C50E619589B04A94E63EC535C6F77C010
Certificate serial:       65279DDDCF24CA0E129DD77F22849E5167259F6A
Authority key identifier: 4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a3a2f33322d3438203d3e203135313639.roa
Signing time:             Tue 05 Mar 2024 17:51:26 +0000
ROA not before:           Tue 05 Mar 2024 17:46:26 +0000
ROA not after:            Tue 04 Mar 2025 17:51:26 +0000
asID:                     15169
IP address blocks:        2800:3f0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:27:9d:dd:cf:24:ca:0e:12:9d:d7:7f:22:84:9e:51:67:25:9f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A21846C50E619589B04A94E63EC535C6F77C010
        Validity
            Not Before: Mar  5 17:46:26 2024 GMT
            Not After : Mar  4 17:51:26 2025 GMT
        Subject: CN=74D3DA97711F3182B274A4917C0ADBB9AB5BAB0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:43:d7:b3:a4:cc:2f:b0:82:5b:8a:c5:d5:
                    2a:df:72:78:a3:8a:d3:44:fc:ff:a3:0e:44:36:83:
                    2c:be:6d:47:cc:36:6e:b9:2f:3a:7a:7f:e3:a7:77:
                    a3:97:19:7a:8e:25:18:c2:f7:7f:70:b8:02:91:87:
                    bf:74:95:2c:37:f1:0b:c8:6e:a7:9c:2d:29:e5:6c:
                    b0:9d:06:5c:91:52:fa:58:78:a6:f5:d9:9e:b0:72:
                    24:6b:e7:1c:4d:f3:2e:41:7b:8d:d4:e9:9f:31:72:
                    40:2b:91:2f:67:e4:6f:5f:4d:76:6f:c0:38:ce:f9:
                    58:c0:42:9c:f9:5b:f2:02:df:19:c3:86:65:ea:bd:
                    88:bc:2b:55:8c:8b:4c:fc:c0:29:c8:0b:c9:4d:a7:
                    85:f3:01:14:8c:f4:23:5b:5e:79:67:9b:40:89:5b:
                    a0:88:10:a4:b1:c0:f0:aa:e0:fb:4f:e5:89:df:00:
                    f0:2f:f2:36:c2:67:4e:31:3e:c4:6e:61:46:ff:96:
                    83:0f:8c:cb:f1:1c:7f:0f:78:af:9b:de:02:34:fa:
                    69:ce:43:60:78:fc:65:a8:16:f8:72:f2:27:d6:00:
                    d8:91:b6:93:12:c1:ed:46:26:21:8b:1a:3b:00:57:
                    d9:95:a5:7d:e8:36:ef:48:2e:de:a8:6b:f9:a8:50:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D3:DA:97:71:1F:31:82:B2:74:A4:91:7C:0A:DB:B9:AB:5B:AB:0E
            X509v3 Authority Key Identifier:
                keyid:4A:21:84:6C:50:E6:19:58:9B:04:A9:4E:63:EC:53:5C:6F:77:C0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/4A21846C50E619589B04A94E63EC535C6F77C010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A21846C50E619589B04A94E63EC535C6F77C010.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58327713E57A0487B013AB0B77C72DAB065574E92EB8E0C3B99DF1C5FA80A637/0/323830303a3366303a3a2f33322d3438203d3e203135313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:25:b7:7f:76:d3:b9:31:05:0a:c1:b3:be:06:19:ef:84:b9:
         22:2c:f0:79:e4:58:f1:2b:37:f2:cd:79:3b:4e:fd:63:d4:6f:
         83:ae:b4:c1:1f:ad:64:17:b6:83:9a:dc:63:d7:f0:38:a6:06:
         23:f3:c8:36:5f:7d:a1:84:5b:4f:73:62:57:74:a2:ab:a5:26:
         e6:d5:6d:60:0d:ee:d8:16:a2:7e:05:16:25:c9:c2:4f:03:a6:
         f8:85:2a:65:c4:1a:19:d9:ed:29:af:9c:c0:7e:fc:89:8b:29:
         c8:6c:2a:04:40:33:25:f3:da:ee:78:71:59:dd:2a:ab:db:26:
         ac:63:87:48:47:7d:4c:50:3f:87:67:22:f2:1f:11:0e:c6:a4:
         76:f7:c1:b5:80:79:fa:73:4a:2a:2b:2f:4c:0a:cd:6a:9f:70:
         35:33:62:33:37:36:75:b0:d4:c2:97:2f:24:b6:89:dc:31:78:
         c1:ce:82:fe:33:2e:51:1c:13:c9:2d:a9:60:06:a6:94:64:99:
         b5:29:00:b2:f5:7d:41:04:ae:15:19:cf:9a:72:2f:47:90:29:
         52:8b:dc:f2:d1:ca:e5:bf:62:16:6d:5f:84:68:54:a6:25:b7:
         77:ee:82:89:89:46:63:73:6c:92:5a:59:68:a6:1a:af:ca:f9:
         2f:56:fe:7f
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUZSed3c8kyg4Sndd/IoSeUWcln2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEyMTg0NkM1MEU2MTk1ODlCMDRBOTRFNjNFQzUzNUM2
Rjc3QzAxMDAeFw0yNDAzMDUxNzQ2MjZaFw0yNTAzMDQxNzUxMjZaMDMxMTAvBgNV
BAMTKDc0RDNEQTk3NzExRjMxODJCMjc0QTQ5MTdDMEFEQkI5QUI1QkFCMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC8kPXs6TML7CCW4rF1Srfcnij
itNE/P+jDkQ2gyy+bUfMNm65Lzp6f+Ond6OXGXqOJRjC939wuAKRh790lSw38QvI
bqecLSnlbLCdBlyRUvpYeKb12Z6wciRr5xxN8y5Be43U6Z8xckArkS9n5G9fTXZv
wDjO+VjAQpz5W/IC3xnDhmXqvYi8K1WMi0z8wCnIC8lNp4XzARSM9CNbXnlnm0CJ
W6CIEKSxwPCq4PtP5YnfAPAv8jbCZ04xPsRuYUb/loMPjMvxHH8PeK+b3gI0+mnO
Q2B4/GWoFvhy8ifWANiRtpMSwe1GJiGLGjsAV9mVpX3oNu9ILt6oa/moUD+9AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUdNPal3EfMYKydKSRfArbuatbqw4wHwYDVR0j
BBgwFoAUSiGEbFDmGVibBKlOY+xTXG93wBAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODMyNzcxM0U1N0EwNDg3QjAxM0FCMEI3N0M3MkRBQjA2
NTU3NEU5MkVCOEUwQzNCOTlERjFDNUZBODBBNjM3LzAvNEEyMTg0NkM1MEU2MTk1
ODlCMDRBOTRFNjNFQzUzNUM2Rjc3QzAxMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QTIxODQ2QzUwRTYxOTU4OUIw
NEE5NEU2M0VDNTM1QzZGNzdDMDEwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTgzMjc3MTNFNTdBMDQ4N0IwMTNBQjBCNzdDNzJEQUIwNjU1NzRFOTJF
QjhFMEMzQjk5REYxQzVGQTgwQTYzNy8wLzMyMzgzMDMwM2EzMzY2MzAzYTNhMmYz
MzMyMmQzNDM4MjAzZDNlMjAzMTM1MzEzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAAD8DANBgkq
hkiG9w0BAQsFAAOCAQEAeiW3f3bTuTEFCsGzvgYZ74S5IizweeRY8Ss38s15O079
Y9Rvg660wR+tZBe2g5rcY9fwOKYGI/PINl99oYRbT3NiV3Siq6Um5tVtYA3u2Bai
fgUWJcnCTwOm+IUqZcQaGdntKa+cwH78iYspyGwqBEAzJfPa7nhxWd0qq9smrGOH
SEd9TFA/h2ci8h8RDsakdvfBtYB5+nNKKisvTArNap9wNTNiMzc2dbDUwpcvJLaJ
3DF4wc6C/jMuURwTyS2pYAamlGSZtSkAsvV9QQSuFRnPmnIvR5ApUovc8tHK5b9i
Fm1fhGhUpiW3d+6CiYlGY3NsklpZaKYar8r5L1b+fw==
-----END CERTIFICATE-----