Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3438203d3e20333934363834.roa
File:                     323830303a3565303a3a2f33322d3438203d3e20333934363834.roa (raw, json)
Hash identifier:          NY0vMzbbjmXnf6gb5dcuE9lBh4/Oi5BeKW34zyJQzBU=
Subject key identifier:   DC:18:2C:81:ED:A8:FD:7C:6F:00:58:A4:7E:AF:AC:A6:C7:FE:E2:2E
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       7B062C2392F96F0FC20AA751643D2BABC2E8B344
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3438203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 17:51:24 +0000
ROA not before:           Tue 05 Mar 2024 17:46:24 +0000
ROA not after:            Tue 04 Mar 2025 17:51:24 +0000
asID:                     394684
IP address blocks:        2800:5e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:06:2c:23:92:f9:6f:0f:c2:0a:a7:51:64:3d:2b:ab:c2:e8:b3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Mar  5 17:46:24 2024 GMT
            Not After : Mar  4 17:51:24 2025 GMT
        Subject: CN=DC182C81EDA8FD7C6F0058A47EAFACA6C7FEE22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:cc:fa:0f:9a:26:f4:e9:43:16:c7:35:06:a4:
                    ba:bf:9f:f5:33:77:d6:fa:38:00:54:8c:d3:17:b4:
                    fe:40:ed:41:d6:b7:12:bb:32:10:ea:f7:55:9c:d0:
                    db:84:0e:1b:86:ea:1e:1d:4e:e1:1d:1f:4a:2f:6e:
                    3f:bf:ad:94:0a:82:ef:72:cf:7b:c1:89:3e:32:10:
                    f4:46:f0:12:b5:b2:cd:8c:c7:a3:d2:5e:25:b7:20:
                    a9:6d:86:55:9f:e6:b6:15:e7:4f:5c:2a:7b:33:ca:
                    e8:91:d5:05:d6:1c:23:f4:ec:08:5a:52:d9:55:91:
                    44:dc:4e:fb:ff:54:a6:29:f3:b1:c5:e8:5e:1b:d3:
                    55:8c:51:94:4c:cf:2c:c9:2d:34:8f:c7:31:df:fc:
                    3b:fd:78:e1:77:fc:9e:72:6b:a4:8e:98:91:f2:e4:
                    a4:c6:db:ca:30:86:93:8a:29:25:b2:03:6d:c7:91:
                    c4:b2:04:51:4d:fd:51:74:ac:76:e7:71:75:88:8c:
                    69:d9:b6:dc:70:a9:73:de:48:fd:6b:12:60:fb:54:
                    26:f0:dd:17:ab:9f:84:d7:1f:51:9b:a2:b2:20:f8:
                    bf:f3:69:08:2a:e1:f2:b4:5a:c5:94:b2:42:ea:a5:
                    61:12:db:e0:ea:ce:77:29:36:ce:25:64:ef:9a:9d:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:18:2C:81:ED:A8:FD:7C:6F:00:58:A4:7E:AF:AC:A6:C7:FE:E2:2E
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/323830303a3565303a3a2f33322d3438203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:f1:f7:43:ae:23:10:a9:23:0e:4a:ff:61:43:8b:e5:d0:84:
         21:8f:5b:62:96:6f:97:b7:2a:78:64:17:25:9a:cb:b4:66:39:
         43:b1:ac:5d:67:f4:18:db:23:ce:ba:80:ed:c5:50:a3:a4:20:
         a5:bb:5b:26:d2:53:ca:05:e9:fe:8a:05:db:06:40:c3:e7:c1:
         c8:db:10:5d:97:19:1e:7f:ef:34:d5:68:d0:35:fd:a1:f7:1b:
         64:21:58:4d:b1:bc:77:c9:05:54:08:96:94:25:b5:e9:1a:99:
         e6:17:6c:f0:bf:3e:3e:11:06:4e:95:dc:2b:03:4c:f1:08:8e:
         f9:3b:27:b4:14:c0:6e:a0:9a:c8:c0:83:5a:10:07:80:44:30:
         c0:ba:21:90:ef:89:af:56:03:c0:16:6e:41:3c:47:3d:ad:92:
         b1:e9:71:61:a8:6e:41:ee:fd:7c:bc:ef:97:59:a0:77:18:b2:
         22:40:59:6b:29:8f:49:ad:c5:8c:88:46:e5:75:85:43:2b:51:
         b7:d2:56:50:db:06:94:36:df:9e:8f:df:21:9f:98:f7:0e:53:
         d0:1e:ea:c0:a4:8f:81:bb:7e:92:57:6e:3c:89:45:6f:95:2e:
         9f:ee:28:a6:52:d4:19:fb:d4:9c:df:54:45:19:10:41:16:0b:
         67:8e:5b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----