Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f33322d3332203d3e20323632323337.roa
File:                     323830333a363230303a3a2f33322d3332203d3e20323632323337.roa (raw, json)
Hash identifier:          eg5M+3m/G4GNsKfuiq0BxQ30k3uGhRIoGvI5FwIIq6U=
Subject key identifier:   1A:D8:2F:17:97:D4:29:05:AC:E5:AC:D2:0E:5E:8E:E0:01:3A:F4:34
Certificate issuer:       /CN=47A0716C687813D0F1094BC55674B26A68AF90DF
Certificate serial:       7FD034B23E60D142546600BB68759B585507B8EC
Authority key identifier: 47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f33322d3332203d3e20323632323337.roa
Signing time:             Tue 05 Mar 2024 17:47:50 +0000
ROA not before:           Tue 05 Mar 2024 17:42:50 +0000
ROA not after:            Tue 04 Mar 2025 17:47:50 +0000
asID:                     262237
IP address blocks:        2803:6200::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d0:34:b2:3e:60:d1:42:54:66:00:bb:68:75:9b:58:55:07:b8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0716C687813D0F1094BC55674B26A68AF90DF
        Validity
            Not Before: Mar  5 17:42:50 2024 GMT
            Not After : Mar  4 17:47:50 2025 GMT
        Subject: CN=1AD82F1797D42905ACE5ACD20E5E8EE0013AF434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:37:f9:6d:71:08:b4:ba:ea:86:09:82:48:
                    15:b7:60:2a:a6:9a:67:06:e7:25:b1:89:24:7e:21:
                    e7:90:66:33:7b:6b:8d:5b:1a:a5:6c:87:e8:51:62:
                    e7:4d:46:59:9f:62:22:0e:2e:b2:da:58:0f:20:c1:
                    86:74:80:1b:9f:df:f6:27:8b:c6:4a:2f:1c:f0:76:
                    38:03:22:90:88:04:1f:8e:82:1e:32:92:2b:52:cf:
                    e3:ae:7b:ad:cb:b5:6f:74:2e:7a:e1:44:93:2e:6d:
                    f5:1d:83:46:f4:6f:1f:13:fa:fd:2b:17:b1:f7:af:
                    a2:3d:69:0f:26:e5:a9:a9:d6:0b:9d:73:08:97:ff:
                    26:15:2b:02:4e:a4:77:52:2b:f5:9c:c4:77:8e:f7:
                    91:fe:42:9b:00:5c:d4:88:56:a8:11:e5:6a:56:4f:
                    a6:b1:f1:87:3a:0e:6a:9d:42:55:4f:7d:37:c4:9c:
                    1a:9c:d6:dd:88:52:a4:70:a8:63:27:a8:7a:32:b8:
                    85:58:4b:ed:79:3b:f6:f8:af:9e:5d:1e:79:5b:f6:
                    8a:c3:a5:2a:4d:b8:0c:5e:16:9d:13:9b:67:d2:84:
                    e4:60:d1:27:d2:d1:5d:46:ac:ca:46:3e:f8:db:63:
                    27:ae:4e:d5:59:e2:10:28:72:8c:d6:83:3d:10:88:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D8:2F:17:97:D4:29:05:AC:E5:AC:D2:0E:5E:8E:E0:01:3A:F4:34
            X509v3 Authority Key Identifier:
                keyid:47:A0:71:6C:68:78:13:D0:F1:09:4B:C5:56:74:B2:6A:68:AF:90:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/47A0716C687813D0F1094BC55674B26A68AF90DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/47A0716C687813D0F1094BC55674B26A68AF90DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59CC5B82FBD0E8E09EC4427C0A888F610B3CB381F7A102B01C25D49E663E56EA/0/323830333a363230303a3a2f33322d3332203d3e20323632323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6200::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:e0:96:24:b5:45:b5:66:9d:e1:1f:73:c2:15:56:d2:3d:f6:
         a9:15:d7:11:2c:5a:e6:4f:4a:79:7f:73:8a:71:50:af:9d:2f:
         29:e5:c2:92:e5:0e:fd:e7:83:b5:86:c3:8a:e5:07:45:ca:2c:
         cd:9e:5f:47:03:c9:ba:12:a1:fa:bb:e5:59:82:80:4c:16:95:
         1a:95:5c:2d:f5:13:eb:5d:b6:01:81:4b:10:ce:51:58:61:ce:
         e5:60:27:ee:03:86:b1:65:bf:6e:7d:10:bc:b0:e2:25:cd:e9:
         be:77:e5:d4:e2:39:79:f1:5d:04:28:75:07:32:5e:c7:55:a2:
         c9:20:b8:60:7e:90:73:24:26:a0:b8:47:a1:55:23:db:bc:8a:
         ac:57:16:8f:17:c4:af:b1:0b:55:c7:e9:a2:a3:73:d2:42:64:
         b9:e3:7a:c5:4b:af:44:51:cb:ca:c0:18:96:3e:0b:32:a7:1b:
         d2:30:cc:39:b6:8a:90:cf:82:20:2a:ee:ec:4b:38:d8:b5:4d:
         36:7a:bd:9a:f6:37:b9:31:97:04:a0:9b:39:80:73:5a:0b:c6:
         31:4e:2b:c8:63:a6:ab:61:30:8f:38:a8:11:3e:71:27:00:42:
         a7:bb:8e:44:e2:78:5c:cb:47:d3:8e:92:57:2a:11:f6:56:69:
         d9:8e:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----