Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/323830333a373530303a3a2f33322d3332203d3e20323635373134.roa
File:                     323830333a373530303a3a2f33322d3332203d3e20323635373134.roa (raw, json)
Hash identifier:          MQRhGuH/nGBzzCOY/Tz5//R9tSCa1tPnRSFfNokd2gY=
Subject key identifier:   9F:4D:37:87:14:BC:71:B7:11:70:A6:F5:B8:9C:17:45:6B:14:DD:80
Certificate issuer:       /CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
Certificate serial:       5F85F617EDD407F080A449704FBF3B9403B54F56
Authority key identifier: 94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/323830333a373530303a3a2f33322d3332203d3e20323635373134.roa
Signing time:             Tue 11 Jun 2024 00:55:00 +0000
ROA not before:           Tue 11 Jun 2024 00:50:00 +0000
ROA not after:            Tue 10 Jun 2025 00:55:00 +0000
asID:                     265714
IP address blocks:        2803:7500::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:85:f6:17:ed:d4:07:f0:80:a4:49:70:4f:bf:3b:94:03:b5:4f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942BABE0B62CFEB8749F1EBA716D62B61F58FE3B
        Validity
            Not Before: Jun 11 00:50:00 2024 GMT
            Not After : Jun 10 00:55:00 2025 GMT
        Subject: CN=9F4D378714BC71B71170A6F5B89C17456B14DD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:45:7a:c7:84:87:8f:da:4a:f7:1d:e4:48:
                    c2:29:31:c3:9d:59:41:09:c5:11:4a:ae:e1:d8:e8:
                    f0:97:50:c6:5f:b3:14:11:f3:db:63:fe:6d:36:78:
                    29:9c:77:77:79:df:f4:7f:b6:3b:b4:02:72:8a:c9:
                    aa:6c:f9:6c:43:c4:c9:29:b1:5a:40:68:35:d3:ab:
                    14:e6:70:7b:df:92:05:10:32:13:23:1a:3e:40:ef:
                    03:eb:5a:30:c8:ab:ad:b4:e0:c2:dd:ec:92:a7:91:
                    b1:a9:75:56:3b:37:81:59:82:ca:0e:3c:60:b2:36:
                    fa:be:02:ad:31:a5:f0:26:7c:ea:cc:51:c6:b4:d2:
                    63:59:a0:d0:f0:e5:14:9c:6b:4a:79:63:37:fa:43:
                    e9:14:a6:d4:c1:d6:f9:9a:c0:bd:75:43:4a:5f:b5:
                    f6:49:49:8e:b1:ab:2f:0b:9e:8c:d4:ac:40:2b:ce:
                    98:af:e1:50:c5:5c:75:9a:98:11:35:f3:28:f5:86:
                    94:7e:57:8a:78:45:f3:98:e8:78:50:5c:3c:cb:8d:
                    cb:5e:fe:b1:a6:da:36:9d:a9:71:80:2d:0b:b5:5f:
                    70:ba:3e:ab:4a:41:22:7a:db:56:33:42:91:b7:34:
                    ed:37:e9:1f:e0:82:e2:31:37:a7:21:ca:1d:78:9e:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4D:37:87:14:BC:71:B7:11:70:A6:F5:B8:9C:17:45:6B:14:DD:80
            X509v3 Authority Key Identifier:
                keyid:94:2B:AB:E0:B6:2C:FE:B8:74:9F:1E:BA:71:6D:62:B6:1F:58:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942BABE0B62CFEB8749F1EBA716D62B61F58FE3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D390766D73B05070156976AE1D11FA9DE87C813403538EF88FC4B978E9473C3/0/323830333a373530303a3a2f33322d3332203d3e20323635373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7500::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:ad:f6:ba:c0:3e:41:18:93:e0:0b:06:0b:b6:3b:5f:4c:fa:
         b8:13:18:81:2b:10:4c:37:0e:3f:7a:55:f1:06:6b:77:89:8e:
         76:51:3e:84:41:ac:2a:dd:5a:04:84:a9:d3:bd:3d:d8:a3:e1:
         4a:a2:ff:a5:9d:a7:44:75:67:ac:64:2d:3e:76:72:9d:54:41:
         bf:90:d6:8b:e0:20:66:51:7e:61:c9:07:12:95:6f:f6:1d:61:
         54:31:84:e6:22:67:56:62:e6:ba:54:a5:e6:68:d1:37:e0:cc:
         bc:34:3a:dd:ae:99:35:62:1a:ab:db:0f:f7:62:c1:c1:ed:ef:
         15:d7:de:7f:f2:b4:35:be:74:f6:e1:2a:09:4c:56:b9:ab:72:
         a4:ab:39:0b:cf:35:63:4b:4f:8c:f3:f9:e7:66:4c:62:20:d6:
         b8:76:7e:d2:0a:13:8f:5c:50:cb:26:40:a1:71:d5:ee:84:44:
         b3:cd:c0:4f:1c:99:30:51:00:8b:b8:57:4e:b2:f6:52:7a:13:
         33:26:1a:4e:00:da:4b:a6:de:48:00:b9:1f:63:bc:17:4a:57:
         ce:0b:ef:db:a5:04:e0:06:ee:71:0b:30:0a:e9:22:2c:af:35:
         ae:32:a6:01:61:76:29:09:f2:8d:66:54:5f:49:ce:a1:32:4e:
         41:b7:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----