Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/323830313a31393a353830303a3a2f34382d3438203d3e20323732383434.roa
File:                     323830313a31393a353830303a3a2f34382d3438203d3e20323732383434.roa (raw, json)
Hash identifier:          VDvmVQBGRd1wPTgKG37ToQe+PbY9x5kgQu8SvW1r+os=
Subject key identifier:   95:2E:EA:21:7E:8D:88:50:45:DB:B9:86:A3:BC:19:33:BA:8B:3A:8A
Certificate issuer:       /CN=9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946
Certificate serial:       2FC3F2BFB5850248C85A75149BA9D34802AD5770
Authority key identifier: 9C:6D:7F:DF:EB:0E:FB:FC:DD:C3:2F:A4:6A:1C:74:CC:4C:C1:C9:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/323830313a31393a353830303a3a2f34382d3438203d3e20323732383434.roa
Signing time:             Tue 05 Mar 2024 17:49:06 +0000
ROA not before:           Tue 05 Mar 2024 17:44:06 +0000
ROA not after:            Tue 04 Mar 2025 17:49:06 +0000
asID:                     272844
IP address blocks:        2801:19:5800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c3:f2:bf:b5:85:02:48:c8:5a:75:14:9b:a9:d3:48:02:ad:57:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946
        Validity
            Not Before: Mar  5 17:44:06 2024 GMT
            Not After : Mar  4 17:49:06 2025 GMT
        Subject: CN=952EEA217E8D885045DBB986A3BC1933BA8B3A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:5f:ad:fa:05:0b:12:bf:d3:4d:25:33:3e:
                    38:3b:93:4c:b8:2d:b4:55:c3:8e:c6:50:03:6c:0f:
                    34:ce:2f:e1:ba:a1:0c:cd:c1:c4:2e:55:01:6e:04:
                    7e:1a:9e:8d:a5:82:7b:3d:34:f5:70:e5:f7:5f:1d:
                    49:9d:60:34:01:db:59:e3:c5:c3:d6:ed:ef:0e:a3:
                    d0:e8:70:02:15:54:5e:e5:cc:74:36:80:f1:75:5a:
                    1c:2a:53:d5:4a:2b:de:11:56:67:6f:78:9d:e3:7b:
                    a6:25:48:00:1e:b8:04:a0:ce:5e:07:78:78:6e:fd:
                    05:b8:ab:92:bf:26:7a:d2:3d:8c:22:65:f2:41:d3:
                    e8:c6:0c:f7:7a:8d:82:a6:6d:7c:67:ca:84:c4:f2:
                    e9:fa:35:6b:3a:f6:87:55:41:93:31:96:41:99:0d:
                    f7:d5:2f:a5:71:6f:5d:89:a1:df:3b:08:27:49:d8:
                    3f:53:47:e1:40:42:0a:a5:59:47:b4:91:41:6c:20:
                    ea:29:a5:7d:43:33:92:79:e5:ba:a8:91:8a:bb:5b:
                    79:fa:3b:63:83:e1:7e:8b:46:e7:7e:7d:68:39:45:
                    81:b0:94:0b:c3:7a:43:76:d6:47:b1:39:2f:5a:9a:
                    64:a7:f3:3c:61:80:1e:ed:d4:59:08:b2:4a:1b:84:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2E:EA:21:7E:8D:88:50:45:DB:B9:86:A3:BC:19:33:BA:8B:3A:8A
            X509v3 Authority Key Identifier:
                keyid:9C:6D:7F:DF:EB:0E:FB:FC:DD:C3:2F:A4:6A:1C:74:CC:4C:C1:C9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C6D7FDFEB0EFBFCDDC32FA46A1C74CC4CC1C946.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CB5A0421A3DED423EB47007B5143A9F8534AFECF7F389CA73BC1D8204C04B97/0/323830313a31393a353830303a3a2f34382d3438203d3e20323732383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:ff:f0:5a:19:21:c2:ef:9d:eb:ff:08:7a:ea:42:1c:24:16:
         0d:8b:6a:1e:49:02:05:be:fc:8b:b9:d0:db:55:04:4c:0e:56:
         b7:4a:3c:56:4a:5b:31:c8:90:1a:7e:0a:cd:b9:d7:16:12:a8:
         64:5b:f8:20:0d:79:e3:a5:b7:03:ab:ea:82:3d:96:46:60:52:
         34:76:e8:74:13:60:45:28:96:f9:58:47:18:40:64:c1:92:41:
         c0:dd:06:df:b8:82:19:f7:19:81:7a:79:78:64:b2:bb:3b:66:
         ee:2a:c5:2f:9b:62:72:34:47:08:ae:77:35:ce:46:e9:1e:e3:
         50:f0:0d:22:5d:8d:8c:0f:d2:50:28:3a:a8:c9:b5:5c:e9:65:
         69:51:f2:e7:a1:b3:f3:ac:95:a7:02:64:16:24:07:9f:d0:c0:
         7e:dd:54:4d:2a:25:28:32:ae:14:0b:01:68:90:2e:cb:ac:43:
         33:cb:af:8e:08:b8:52:27:44:5c:51:f5:07:6a:98:e5:b3:b6:
         af:51:04:f7:02:33:04:86:06:4c:83:d4:4f:88:3f:d6:c5:e0:
         1a:dc:98:5b:42:74:66:25:4d:2f:56:b9:f1:c1:46:e8:71:45:
         e5:ff:a6:88:31:6c:83:3a:19:4a:44:a9:f4:14:55:f3:ec:c5:
         ed:20:9d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----