Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa
File:                     323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa (raw, json)
Hash identifier:          ZcQtROI4APiNBg6QjK244z316gIDgMQpLGLETlfwzc4=
Subject key identifier:   3D:DD:AC:C6:BE:76:E8:E4:E9:E0:28:97:20:6C:72:C8:31:AB:74:6A
Certificate issuer:       /CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09
Certificate serial:       5A471AA1BB649D969DAD5479710E34813BA26D2B
Authority key identifier: 42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa
Signing time:             Tue 05 Mar 2024 18:05:37 +0000
ROA not before:           Tue 05 Mar 2024 18:00:37 +0000
ROA not after:            Tue 04 Mar 2025 18:05:37 +0000
asID:                     64109
IP address blocks:        2801:13:b000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:47:1a:a1:bb:64:9d:96:9d:ad:54:79:71:0e:34:81:3b:a2:6d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09
        Validity
            Not Before: Mar  5 18:00:37 2024 GMT
            Not After : Mar  4 18:05:37 2025 GMT
        Subject: CN=3DDDACC6BE76E8E4E9E02897206C72C831AB746A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:03:e8:58:68:9e:62:4d:6a:27:cd:cb:40:12:
                    4d:a9:c9:82:b8:27:ad:72:68:47:c1:f9:4a:66:a2:
                    17:94:0f:32:0d:15:0e:94:80:f5:a7:57:c4:50:d7:
                    fc:59:cb:5c:3b:97:db:fa:4e:92:0b:70:ec:b8:31:
                    c7:80:b7:53:56:8a:bc:ff:a3:6f:57:4e:56:69:00:
                    b6:df:0e:6e:34:f8:72:b6:f4:5b:6f:aa:11:31:c8:
                    05:af:ee:1e:af:20:bf:0a:58:e9:75:63:04:96:ad:
                    28:d8:41:34:33:ef:7f:3b:a7:ca:b5:0a:84:02:7e:
                    25:4b:a0:e7:e4:44:da:3f:ab:92:34:70:12:0a:22:
                    78:2e:3a:ca:9c:ec:43:af:2c:cb:9c:1d:1b:6c:2c:
                    0a:a5:36:fc:67:a7:db:b9:d5:19:08:64:7c:9b:21:
                    c8:8e:b4:22:96:27:1c:42:aa:0c:aa:10:b8:2e:f8:
                    57:f9:87:2e:27:ab:16:43:6b:ce:63:db:4c:be:bb:
                    1e:0f:1b:52:93:3a:48:17:85:41:8c:f8:00:f8:50:
                    f5:39:a8:f4:6f:e4:2a:7f:0b:70:2a:85:7d:a0:2d:
                    3d:a7:d7:c2:13:34:98:ae:2a:cb:6d:c4:44:03:1f:
                    13:e6:eb:b4:5e:c4:6a:40:bd:af:b4:48:86:a8:42:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DD:AC:C6:BE:76:E8:E4:E9:E0:28:97:20:6C:72:C8:31:AB:74:6A
            X509v3 Authority Key Identifier:
                keyid:42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/323830313a31333a623030303a3a2f34382d3438203d3e203634313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:f6:34:90:44:2a:0c:95:54:cd:32:41:04:79:b7:10:63:1d:
         c8:6f:6a:24:c3:23:00:af:50:bb:9f:68:21:9d:f8:a3:54:1a:
         e1:ee:15:33:1d:68:92:88:bb:1d:d9:c7:44:63:30:93:fb:8f:
         18:b0:31:d0:67:be:03:78:84:c0:96:76:15:09:a9:52:65:7a:
         2f:c1:e5:d5:c9:30:61:aa:97:2b:dd:26:72:fc:c4:62:79:47:
         50:f3:ef:78:e8:7e:b1:c3:53:ea:cb:c8:47:0d:d0:c1:07:2e:
         10:64:18:ad:dd:47:ef:5b:12:11:24:95:b7:78:39:39:8c:28:
         72:d8:bb:de:e9:dd:3b:e9:ae:3e:d2:14:76:48:01:b9:1a:7e:
         66:31:1a:c2:4a:f0:75:3e:28:c4:56:6d:19:f9:15:b7:0a:1d:
         1c:e5:81:e7:e0:c7:3c:cc:7d:9d:c0:3d:88:b5:f7:42:e8:e0:
         14:d7:88:6a:7c:0c:3e:fe:03:bb:b1:08:8a:d9:47:c0:79:4e:
         21:bb:26:bf:af:19:95:ec:99:24:06:48:15:9b:d7:d3:36:af:
         fa:23:0c:de:e1:57:3b:a3:36:ef:9d:4e:c0:2b:7f:1a:7b:4c:
         8e:f3:46:32:e5:17:ef:f9:41:b3:77:b7:41:22:99:72:47:f4:
         01:5e:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----