Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/323830303a3665303a3a2f33322d3438203d3e203532333230.roa
File:                     323830303a3665303a3a2f33322d3438203d3e203532333230.roa (raw, json)
Hash identifier:          uy4VIlSfxDADD3QHC07IbeDGfeBGmWfplFxQpF8zQyE=
Subject key identifier:   FF:45:44:8F:3E:6F:D4:FE:33:98:2C:00:B0:3A:0D:00:CF:B6:AB:2C
Certificate issuer:       /CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
Certificate serial:       1430F2766A4F3A8705A46EF213805AFE3EE32583
Authority key identifier: B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/323830303a3665303a3a2f33322d3438203d3e203532333230.roa
Signing time:             Tue 05 Mar 2024 18:14:59 +0000
ROA not before:           Tue 05 Mar 2024 18:09:59 +0000
ROA not after:            Tue 04 Mar 2025 18:14:59 +0000
asID:                     52320
IP address blocks:        2800:6e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:30:f2:76:6a:4f:3a:87:05:a4:6e:f2:13:80:5a:fe:3e:e3:25:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0A4556BAD5546D688ED0FF7B492B3881EBC8526
        Validity
            Not Before: Mar  5 18:09:59 2024 GMT
            Not After : Mar  4 18:14:59 2025 GMT
        Subject: CN=FF45448F3E6FD4FE33982C00B03A0D00CFB6AB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:fb:0a:cb:a9:6d:8d:8f:9a:cc:66:b2:9f:
                    ed:d1:a1:57:6d:46:eb:a8:01:50:6f:5a:16:18:8d:
                    3f:00:da:49:af:fb:a5:93:c5:60:8e:c2:ad:f2:15:
                    31:ba:c9:ad:b6:48:9f:7d:bc:2f:1c:6e:88:d2:cd:
                    44:58:0f:48:d7:bd:f4:3c:6d:bd:f4:b4:97:3a:85:
                    87:a1:14:01:db:2f:64:6d:a5:32:c0:f4:4a:17:df:
                    69:78:42:01:79:7c:16:4e:87:0a:3e:8b:c9:f5:23:
                    51:fb:91:da:3c:d7:61:32:d0:e2:1a:9c:c1:94:60:
                    6e:81:22:10:e8:44:79:bc:b8:f2:9d:05:df:c8:9a:
                    6d:2d:47:11:47:89:ce:14:13:84:ee:e4:8f:c1:e4:
                    26:02:5a:76:e0:94:11:4a:90:a2:ba:57:b6:f3:9f:
                    fc:a2:7e:8f:a8:d8:54:91:e2:79:38:f3:81:12:3c:
                    21:65:64:61:04:5d:a9:72:bd:0a:e7:ac:d8:4b:2d:
                    8f:90:53:26:17:56:13:07:bb:5f:2c:c3:89:ac:5c:
                    6a:fb:b3:c2:b0:ae:75:de:34:bb:e1:b8:fd:8d:d3:
                    ef:3c:8c:c6:11:b6:a3:b4:80:1c:09:04:cf:67:81:
                    7d:25:eb:3e:8f:b1:22:d3:0a:c8:a5:0a:c0:86:31:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:45:44:8F:3E:6F:D4:FE:33:98:2C:00:B0:3A:0D:00:CF:B6:AB:2C
            X509v3 Authority Key Identifier:
                keyid:B0:A4:55:6B:AD:55:46:D6:88:ED:0F:F7:B4:92:B3:88:1E:BC:85:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0A4556BAD5546D688ED0FF7B492B3881EBC8526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B258B6B37D5A9961CAC2CB92AE9FF641EE58C42CFC506C861AD74E93317D59/0/323830303a3665303a3a2f33322d3438203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:c8:7d:c8:4d:26:cb:3b:3f:69:52:2f:18:11:65:2c:2d:b1:
         c6:a2:b0:3c:05:86:53:55:43:ec:1e:bd:17:50:a9:4f:0f:f4:
         57:4a:85:98:1a:0e:0c:7d:0e:d9:4d:ce:fd:cf:4c:73:03:a8:
         d5:4c:58:b8:61:7a:28:49:46:a1:38:ca:7d:6b:72:c4:a2:93:
         ba:42:03:58:64:30:73:d9:77:b2:5e:32:8a:ae:ec:80:f0:99:
         4f:26:5a:dc:8c:62:aa:32:b8:e8:2a:4b:d5:65:0e:d2:2b:a8:
         b3:76:5c:45:f6:b6:fe:b1:5f:4a:0e:c9:6c:ea:f3:52:cd:a1:
         eb:d6:f2:5d:20:e8:b4:89:3a:8d:23:1c:29:b0:8c:af:ec:f7:
         c0:75:68:8d:b9:f1:61:94:5b:27:5a:04:57:6b:56:d1:d4:f1:
         68:0f:e4:7e:4d:45:86:26:84:1f:d5:de:a0:94:b8:50:04:8c:
         a5:14:1e:70:f4:74:bf:3f:04:c1:6e:8e:60:1f:59:78:9a:96:
         34:d0:43:9c:41:85:51:c1:0f:a4:8c:50:6c:7c:2d:20:d0:fb:
         69:db:bc:be:da:9c:36:43:5d:55:53:19:da:02:99:8e:f7:39:
         ec:dd:b8:f1:81:b6:00:c7:c7:40:3c:ae:5b:c6:96:26:dd:a5:
         46:d6:2a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----