Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/323830333a6461303a3a2f33322d3332203d3e20323637373335.roa
File:                     323830333a6461303a3a2f33322d3332203d3e20323637373335.roa (raw, json)
Hash identifier:          mDApmaRT2gB/K+IqCZFjXUF/xn+x4S1X+1rkrfx+3Pw=
Subject key identifier:   28:0A:75:7C:12:49:12:81:E3:DB:29:1B:8D:8B:EF:AA:2F:29:A9:51
Certificate issuer:       /CN=9E37B5F5D41561B61BB52734CEC0DD26DC074DDF
Certificate serial:       3EAAC5322A94F6FBF77CCC025EE87280FBD02DCF
Authority key identifier: 9E:37:B5:F5:D4:15:61:B6:1B:B5:27:34:CE:C0:DD:26:DC:07:4D:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/323830333a6461303a3a2f33322d3332203d3e20323637373335.roa
Signing time:             Tue 05 Mar 2024 18:03:09 +0000
ROA not before:           Tue 05 Mar 2024 17:58:09 +0000
ROA not after:            Tue 04 Mar 2025 18:03:09 +0000
asID:                     267735
IP address blocks:        2803:da0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:aa:c5:32:2a:94:f6:fb:f7:7c:cc:02:5e:e8:72:80:fb:d0:2d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E37B5F5D41561B61BB52734CEC0DD26DC074DDF
        Validity
            Not Before: Mar  5 17:58:09 2024 GMT
            Not After : Mar  4 18:03:09 2025 GMT
        Subject: CN=280A757C12491281E3DB291B8D8BEFAA2F29A951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:20:6f:2a:d5:be:e4:ff:2c:f5:b2:15:8d:
                    07:a0:bf:80:9c:93:6c:38:6e:af:68:2b:65:33:cc:
                    66:ca:c3:eb:31:64:f8:22:e2:be:fb:e0:be:5c:ba:
                    e2:a3:cc:05:2a:00:13:b6:94:c0:69:3a:33:ba:8a:
                    ce:46:45:4e:71:21:f1:30:c0:60:22:b0:ec:c4:a7:
                    08:d0:e5:18:5c:dd:f9:11:06:65:fa:9c:39:13:46:
                    6b:62:d0:47:6e:93:63:d7:40:dc:50:0d:63:ec:a6:
                    2e:b1:7a:ee:f9:40:b4:e3:f1:12:86:a4:1d:7a:0b:
                    c8:6a:d8:f1:83:6e:4c:80:86:09:c4:03:4c:3f:cf:
                    5a:f1:b2:8e:5f:1a:2f:79:66:70:2c:a2:86:b4:5e:
                    e5:6d:48:99:e1:68:9b:e8:8b:8a:51:b1:3b:e4:1d:
                    c2:06:72:1d:2e:8b:6d:fb:2b:fa:d4:42:fb:f2:d3:
                    31:a3:ce:d4:7d:be:62:72:ea:a1:b1:ac:81:20:ce:
                    8a:36:17:43:36:e8:91:0c:72:66:62:f0:81:43:2d:
                    8e:ec:80:be:83:47:f8:3b:b8:a3:d4:97:83:84:e7:
                    6b:af:e9:74:c8:af:e4:a9:d8:96:4c:9d:94:2e:ca:
                    5a:61:73:f9:f3:72:64:61:4b:1b:c9:91:e6:dd:12:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0A:75:7C:12:49:12:81:E3:DB:29:1B:8D:8B:EF:AA:2F:29:A9:51
            X509v3 Authority Key Identifier:
                keyid:9E:37:B5:F5:D4:15:61:B6:1B:B5:27:34:CE:C0:DD:26:DC:07:4D:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E37B5F5D41561B61BB52734CEC0DD26DC074DDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63FE89222B509B58D284648D1A0F41BFE9C32FC8A26F9591AD821518708F3863/0/323830333a6461303a3a2f33322d3332203d3e20323637373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:01:73:f9:03:5b:f9:33:6a:29:b5:2f:c1:c2:37:15:37:f1:
         5d:42:95:b3:d8:85:10:9c:77:e8:48:d6:bf:c7:a9:e5:40:57:
         07:37:3b:45:99:2c:78:e8:bf:1b:60:52:52:8d:4d:cf:ad:05:
         06:e4:0c:5a:0b:66:7d:fd:a4:f9:82:e9:f6:f5:96:57:fa:23:
         74:66:61:7b:c0:cf:b8:1f:47:97:c5:a3:fc:5c:be:4e:5d:2e:
         06:30:04:62:32:1b:8f:7a:68:72:dd:0a:4c:28:1a:5a:52:ce:
         bf:bb:52:6a:cc:f7:5e:64:0d:16:c9:db:a8:4f:a1:00:35:b9:
         45:5c:11:9d:41:b3:46:9f:fb:09:6c:07:d7:44:08:35:9d:14:
         6d:2a:c2:0b:2a:d9:8d:12:68:a4:00:48:e8:37:ae:81:fc:2a:
         9e:92:ad:58:27:8f:0b:1c:e4:05:24:89:ac:90:5d:aa:c5:37:
         0f:08:d4:db:91:f2:68:54:4c:bd:70:67:1a:7d:6d:6f:a9:1c:
         59:e7:f7:5e:8f:bf:61:ad:f1:8a:3b:91:b6:00:25:aa:81:94:
         17:75:88:38:01:5c:58:66:f6:62:ae:5b:e5:70:7f:aa:f7:ae:
         3b:08:09:dc:e1:37:20:74:ae:37:f5:13:cf:04:86:be:f7:48:
         6e:3e:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----