Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa
File:                     323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa (raw, json)
Hash identifier:          KCfRyElCLNdFFwZZBlJLj2KXEhutZNCgjYu7H7tD5so=
Subject key identifier:   E7:CC:8B:45:18:F3:C8:18:99:8B:5D:15:72:BF:B2:2B:70:3E:0D:C5
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       48B9A2FD19C4F5BD99C163614CA4E11752E99512
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:12:59 +0000
ROA not before:           Tue 05 Mar 2024 18:07:59 +0000
ROA not after:            Tue 04 Mar 2025 18:12:59 +0000
asID:                     19429
IP address blocks:        2801:16e:10::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b9:a2:fd:19:c4:f5:bd:99:c1:63:61:4c:a4:e1:17:52:e9:95:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Mar  5 18:07:59 2024 GMT
            Not After : Mar  4 18:12:59 2025 GMT
        Subject: CN=E7CC8B4518F3C818998B5D1572BFB22B703E0DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:86:75:a5:95:1a:b3:d3:e8:b4:0d:c8:8f:
                    5c:58:5c:cc:60:2c:28:f3:25:d6:cb:86:f3:f4:6e:
                    50:aa:59:59:24:13:17:1c:b2:c3:20:b5:5a:8b:f5:
                    d8:cf:d5:da:e5:06:64:e4:c5:cf:9e:d8:3b:74:fd:
                    03:3b:8c:24:e4:85:d9:b3:4d:72:ff:79:4b:4a:60:
                    c0:11:10:c2:62:f2:61:e7:31:f3:6f:d0:68:ea:52:
                    1a:aa:9c:77:55:e4:5d:a5:ba:08:a4:0a:e1:1c:30:
                    64:6a:6a:3c:f9:2d:b5:3f:6c:0d:89:f3:2f:0f:95:
                    4c:b5:e1:1f:6d:c3:96:2f:69:41:aa:46:31:39:8f:
                    57:3c:cc:79:94:bb:96:f0:73:ca:37:b9:88:dc:51:
                    da:de:8c:b5:64:c8:89:86:c6:d5:48:08:d6:08:7a:
                    60:27:ee:31:40:38:b7:92:fe:d6:53:a7:a8:f6:2c:
                    47:b9:d1:1f:cd:27:ff:c0:93:5d:1a:93:09:11:ac:
                    ac:03:16:19:6a:b8:ba:44:79:15:21:f4:fa:7c:a9:
                    31:87:85:f4:3d:b8:d5:ad:91:5d:de:1a:7c:6b:b1:
                    39:f6:32:59:0e:8c:73:14:58:f9:31:c5:27:de:d7:
                    2a:05:71:52:9a:c0:93:7b:36:5e:3c:5d:f7:1f:2a:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CC:8B:45:18:F3:C8:18:99:8B:5D:15:72:BF:B2:2B:70:3E:0D:C5
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a31303a3a2f34342d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:c7:10:9e:01:fb:c0:34:d8:b9:22:12:70:f1:26:5e:1a:af:
         8d:e1:18:5e:9b:f0:17:30:33:de:a8:17:66:3c:49:51:66:b2:
         85:fa:57:d8:00:b7:51:1a:ba:79:2d:ff:b2:ce:15:85:5d:c1:
         4f:5e:b2:d8:3f:cf:4a:67:f3:31:36:83:d4:d3:5d:70:38:67:
         4f:fe:81:fa:6e:93:d2:a0:c4:24:f9:1c:cb:97:04:16:c8:11:
         3d:6d:c5:d4:25:79:37:d2:51:2e:58:32:02:0d:ae:11:fd:57:
         d0:d3:de:33:ec:39:cc:29:ee:f2:77:fb:42:cb:26:f2:e2:f1:
         2e:32:5a:72:69:9e:9e:2d:02:06:b8:b4:0d:e3:04:cf:97:5a:
         dc:d0:d2:a7:56:a1:2e:a7:4f:68:76:70:c9:d4:c1:8a:27:65:
         20:b6:ad:53:07:4e:1d:53:80:bd:a0:77:ff:05:48:3c:e2:c1:
         01:0b:dd:81:e2:96:f1:a1:dd:3e:9a:30:fa:e8:0d:b8:7c:00:
         be:f6:83:e4:ba:bd:79:62:b0:06:51:6c:56:25:c9:cd:b0:0d:
         60:27:8c:36:30:49:2a:06:d4:6f:60:e1:12:31:50:37:8b:4e:
         e6:9a:8b:4d:d9:41:b9:43:82:f7:e7:4d:df:e7:e7:55:9c:07:
         29:fa:ed:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----