Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a3a2f34342d3438203d3e203238303031.roa
File:                     323830313a3162383a3a2f34342d3438203d3e203238303031.roa (raw, json)
Hash identifier:          9/9WjrZS31sTvPSkh9wBz/0xDmgt0q/bWZue01wZ0mQ=
Subject key identifier:   FF:3B:F3:6C:F1:45:8F:E2:BB:B0:57:EB:C5:87:BB:DC:7C:96:A3:AD
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       222CAA9FF5153DE09315AFD2BCCA4E28A02E3335
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a3a2f34342d3438203d3e203238303031.roa
Signing time:             Tue 05 Mar 2024 17:39:51 +0000
ROA not before:           Tue 05 Mar 2024 17:34:51 +0000
ROA not after:            Tue 04 Mar 2025 17:39:51 +0000
asID:                     28001
IP address blocks:        2801:1b8::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2c:aa:9f:f5:15:3d:e0:93:15:af:d2:bc:ca:4e:28:a0:2e:33:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:51 2024 GMT
            Not After : Mar  4 17:39:51 2025 GMT
        Subject: CN=FF3BF36CF1458FE2BBB057EBC587BBDC7C96A3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:52:93:64:72:1d:b1:d8:5e:ca:0f:68:a8:6b:
                    9b:3c:f8:20:78:d4:58:1a:89:70:d6:fa:be:ec:cb:
                    09:e8:da:22:62:38:d7:3c:8c:d0:3d:3c:85:3e:9f:
                    73:35:ae:59:18:97:11:e1:57:17:7b:30:1d:8f:d4:
                    32:df:9d:da:35:07:36:c3:57:19:94:72:16:d9:9e:
                    3a:a0:c2:c9:0a:8b:77:da:ff:4a:49:d7:7b:8d:ba:
                    f2:03:1e:85:f9:96:13:d9:9b:62:fd:fd:aa:7e:10:
                    a6:51:42:86:a5:85:0f:3b:35:96:02:15:5f:72:08:
                    08:5f:47:18:44:3e:a3:5e:66:92:e6:0d:cf:c5:87:
                    8a:f3:1c:76:86:0a:44:13:ac:bb:56:13:b8:f6:3b:
                    92:16:07:d5:7d:40:84:82:96:8c:64:62:b2:06:7b:
                    eb:3d:cb:0d:b1:31:63:2b:a5:4d:2e:de:63:4e:d8:
                    08:2b:c9:13:ca:a4:1f:7c:22:80:e2:3d:b7:7e:b9:
                    e9:75:35:07:07:cf:36:d5:55:a7:b7:6f:19:3b:2b:
                    60:a1:25:e4:60:35:ee:ef:12:14:4f:c9:df:26:05:
                    cc:5d:4f:2c:fb:f4:a8:cc:dd:99:ca:73:cd:ad:b9:
                    28:01:c3:34:ba:22:0b:c5:c5:df:17:82:54:1b:66:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3B:F3:6C:F1:45:8F:E2:BB:B0:57:EB:C5:87:BB:DC:7C:96:A3:AD
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323830313a3162383a3a2f34342d3438203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:24:7d:e9:74:a2:c7:13:c6:7c:a7:07:f6:6c:a6:90:d5:b7:
         79:f8:37:e9:b2:72:9b:62:f9:f9:d5:d7:da:f8:0d:ae:60:9f:
         44:7a:37:13:44:18:ec:82:ee:67:27:4a:29:60:05:e7:7f:7a:
         01:23:58:bf:98:61:58:b2:09:e8:85:ee:10:0b:8c:a2:e5:07:
         3c:ac:11:2b:c8:bb:b1:8a:79:88:33:89:d3:66:75:2d:04:8b:
         2c:63:00:e4:48:cd:92:10:22:12:e8:10:3a:36:8f:8a:96:1e:
         0a:30:8c:61:82:03:e7:16:d1:5e:31:fa:e4:9e:9b:c6:23:38:
         e5:83:f7:35:e1:bf:90:b9:ed:26:f2:a2:e3:5e:33:e1:89:0e:
         14:4e:af:9c:a5:6f:e4:89:51:c0:a4:aa:93:3b:db:3b:0b:c3:
         d6:2c:54:5f:29:13:de:85:aa:80:09:61:d4:96:ac:da:ef:2b:
         cd:1c:3f:5a:70:92:50:3d:a3:6c:59:66:04:3e:d6:6e:d7:57:
         9a:0f:68:3f:0b:ad:2f:60:08:5e:6c:58:11:b3:ab:e9:a5:69:
         fb:1f:73:da:fb:d2:f7:7d:14:74:29:4e:06:a6:a2:83:ea:6c:
         ef:8c:00:2f:29:d6:d4:0f:74:c6:ea:ee:bf:1d:c9:02:51:44:
         d8:44:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----