Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a343a3a2f34382d3438203d3e20323637373837.roa
File:                     323830333a346661303a343a3a2f34382d3438203d3e20323637373837.roa (raw, json)
Hash identifier:          GVvYjL36i+LXGBW1X/Jwoh/4SNHXDQ1UbLptt5B7aS4=
Subject key identifier:   2F:08:63:4B:95:10:25:18:7E:A8:44:9C:76:DC:46:EA:8C:41:D6:4E
Certificate issuer:       /CN=43A05913712B315DAEB6D1167128428DD7B6D362
Certificate serial:       499C04030ED2E86B1F0F9E9D641CCA2EF9D552E1
Authority key identifier: 43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a343a3a2f34382d3438203d3e20323637373837.roa
Signing time:             Fri 06 Sep 2024 22:55:01 +0000
ROA not before:           Fri 06 Sep 2024 22:50:01 +0000
ROA not after:            Fri 05 Sep 2025 22:55:01 +0000
asID:                     267787
IP address blocks:        2803:4fa0:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9c:04:03:0e:d2:e8:6b:1f:0f:9e:9d:64:1c:ca:2e:f9:d5:52:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A05913712B315DAEB6D1167128428DD7B6D362
        Validity
            Not Before: Sep  6 22:50:01 2024 GMT
            Not After : Sep  5 22:55:01 2025 GMT
        Subject: CN=2F08634B951025187EA8449C76DC46EA8C41D64E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:ca:50:f6:f9:0f:9d:a1:26:e3:37:57:13:
                    3e:db:85:d2:e8:4d:3f:3e:30:5e:b1:3c:ee:ec:eb:
                    b0:d2:a4:b8:71:14:85:ff:a9:ef:b5:12:09:06:01:
                    c9:37:bc:52:3d:69:cd:a4:c5:f9:35:b6:1d:23:79:
                    72:3a:16:20:1b:29:02:a0:fd:cc:b9:16:0f:31:f3:
                    5a:a2:2f:04:31:77:d6:82:a7:bb:3a:bb:15:96:12:
                    bd:51:4d:f5:13:8f:d3:7b:cb:e4:79:0f:a3:4d:b1:
                    ff:00:1f:54:9a:36:31:90:08:50:a9:44:80:fc:4f:
                    d5:7b:ea:8f:3d:81:97:48:a0:c5:97:56:99:7d:3e:
                    51:3e:6d:f1:ff:3a:75:b8:e1:ed:d8:4b:38:26:31:
                    9b:7d:14:99:18:2b:2f:ad:46:d1:5d:f3:7b:a2:f6:
                    13:dd:a5:d0:da:56:5d:af:b5:4f:15:a5:c0:ca:03:
                    b7:f7:9d:a1:47:51:0d:4c:1e:24:87:04:c4:03:43:
                    25:6c:74:12:f1:c2:95:00:b1:e9:0e:8f:70:59:6f:
                    10:99:ad:c7:08:d4:89:6c:86:c3:37:8d:d9:64:55:
                    99:b8:55:3b:6e:25:69:52:4f:9c:06:7e:ec:26:79:
                    87:f6:ed:ed:f8:b2:c0:8b:35:f4:a1:9d:56:e3:17:
                    38:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:08:63:4B:95:10:25:18:7E:A8:44:9C:76:DC:46:EA:8C:41:D6:4E
            X509v3 Authority Key Identifier:
                keyid:43:A0:59:13:71:2B:31:5D:AE:B6:D1:16:71:28:42:8D:D7:B6:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/43A05913712B315DAEB6D1167128428DD7B6D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43A05913712B315DAEB6D1167128428DD7B6D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62B8875F4AE1032F4C18E4FAE4B44B1B9BEB2FE052F33C672E3BB422A412C66A/0/323830333a346661303a343a3a2f34382d3438203d3e20323637373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4fa0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:be:54:b1:43:4c:aa:8b:7c:20:c4:8e:61:9d:8c:6e:1e:b1:
         db:4e:9f:a6:84:7c:8b:71:e2:79:64:7e:b5:92:e5:88:ee:96:
         47:78:d1:82:af:82:4a:fb:34:37:5c:86:4e:a8:d4:d0:6d:3f:
         c5:6c:53:20:3d:c1:85:c8:e2:3e:56:84:dc:12:1d:73:25:69:
         29:d5:d7:e6:f3:0d:77:f1:86:04:54:30:e9:64:9f:28:c9:54:
         4b:e7:f8:0e:f3:fa:e8:41:72:ee:04:54:df:82:2a:d6:3e:3f:
         5d:bb:68:35:7d:56:9f:b7:22:3a:cb:ae:f6:a3:af:38:2b:67:
         37:fa:6c:50:3e:a5:fd:7d:87:f0:98:ad:37:cf:dc:fa:bc:85:
         a2:67:82:4a:40:1f:68:01:ca:21:0a:3d:50:7c:72:cd:92:67:
         46:b9:6a:af:e5:91:fe:a9:46:27:3b:78:70:44:3c:ce:a8:d2:
         9a:64:e8:1d:1b:50:fc:76:46:e7:ea:28:b9:1a:f8:a2:55:83:
         81:dd:ee:bc:71:24:e8:28:5b:74:f7:26:96:e1:b4:ee:0d:16:
         dc:79:a8:68:a3:dd:12:ba:92:25:e6:7c:ef:ac:c0:65:52:92:
         3a:6c:ee:af:37:1c:04:89:f4:f3:c5:91:84:35:c1:e8:df:49:
         22:e9:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----