Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a32613a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3136653a32613a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          ZjtwgXY7tkr2UIQBydbQ1RZs4fyeoSO2XDKfrEp2XEA=
Subject key identifier:   B0:83:DE:13:AE:75:7C:40:8D:7C:19:51:CE:78:4E:40:5D:22:32:0A
Certificate issuer:       /CN=3586923A64D379B800F409C58F0A64C540687D97
Certificate serial:       1A3A80F2B0EF9F7F5DFBD3EBFD401B0477BD9348
Authority key identifier: 35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a32613a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:12:57 +0000
ROA not before:           Tue 05 Mar 2024 18:07:57 +0000
ROA not after:            Tue 04 Mar 2025 18:12:57 +0000
asID:                     19429
IP address blocks:        2801:16e:2a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3a:80:f2:b0:ef:9f:7f:5d:fb:d3:eb:fd:40:1b:04:77:bd:93:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3586923A64D379B800F409C58F0A64C540687D97
        Validity
            Not Before: Mar  5 18:07:57 2024 GMT
            Not After : Mar  4 18:12:57 2025 GMT
        Subject: CN=B083DE13AE757C408D7C1951CE784E405D22320A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:f0:f1:b5:e5:8b:0b:ab:a3:a2:1e:41:3f:
                    39:2f:4e:02:58:33:ba:73:02:a4:5c:85:b9:ff:77:
                    a6:5d:3f:ed:53:6f:ea:1a:99:e7:17:6b:4a:85:59:
                    e1:ff:e1:29:cb:99:4f:a8:9c:02:f8:a3:2c:36:57:
                    de:a0:b2:8d:5c:a7:56:5a:50:6d:bf:70:5b:53:af:
                    86:b9:b6:14:35:2f:03:11:3b:b3:e1:d1:9f:0d:11:
                    21:59:8d:de:eb:e1:bb:1f:1e:73:33:b7:e7:a6:a4:
                    28:99:89:f9:0b:64:f1:de:d4:3d:c8:86:46:11:d8:
                    f4:05:79:4f:03:82:2d:88:51:28:44:61:93:4c:1f:
                    93:97:90:29:e0:03:9b:dc:5f:a3:39:bc:c9:fe:06:
                    7e:2a:3f:bc:95:8b:cd:16:8a:23:d1:67:6e:06:3c:
                    ff:2a:8a:12:4c:b9:08:bc:6d:0c:b5:96:03:16:48:
                    88:4a:49:64:e4:39:56:d2:96:a2:b0:8a:44:74:a6:
                    2d:d1:df:12:69:3d:b1:62:c8:70:bf:72:a6:99:3e:
                    3b:cf:49:61:9d:89:3a:61:d2:d5:5e:52:c3:ce:c2:
                    4e:ef:8d:07:c7:1d:a6:88:00:2d:d2:6b:35:44:d2:
                    88:53:0f:47:42:34:69:78:1e:0a:5b:4b:9b:ad:88:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:83:DE:13:AE:75:7C:40:8D:7C:19:51:CE:78:4E:40:5D:22:32:0A
            X509v3 Authority Key Identifier:
                keyid:35:86:92:3A:64:D3:79:B8:00:F4:09:C5:8F:0A:64:C5:40:68:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/3586923A64D379B800F409C58F0A64C540687D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3586923A64D379B800F409C58F0A64C540687D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6757B96FC28689744CDD5F4FD90EF3A662357CDA0F0B1C4E67C08E6080E07B0C/0/323830313a3136653a32613a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16e:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:73:46:bc:d0:87:64:6a:ed:9d:36:57:52:03:36:23:6c:
         d4:cc:15:84:77:7b:32:2f:73:ba:71:58:dd:7c:69:5d:1e:0b:
         12:c9:d2:58:16:f2:19:75:d6:86:42:95:7b:ee:ec:33:4c:c3:
         95:65:75:25:72:7c:e5:f1:d6:3b:e0:fa:e2:b7:10:e5:44:ca:
         85:66:43:1e:2e:eb:02:a4:b2:6c:cf:f4:d9:67:df:2b:6f:3f:
         b2:bd:c9:2a:04:22:13:21:06:68:2d:54:6e:45:4f:32:63:10:
         82:05:83:7e:86:31:c8:c4:1b:36:88:df:95:36:48:8b:26:19:
         44:68:1a:15:b8:1c:e1:22:77:33:de:5c:76:2f:95:95:ae:66:
         ee:d4:9d:71:a8:16:8a:20:e5:4b:19:d5:e5:4c:4d:ec:06:84:
         ad:ee:77:44:ce:5f:7d:32:1f:42:42:c1:a7:5b:19:27:00:5a:
         2e:df:50:3c:67:00:56:07:9d:81:a5:c8:50:18:35:83:e2:66:
         ad:5a:31:1d:04:0c:f1:70:34:18:6c:1a:22:06:39:1a:1d:2a:
         46:7f:b5:cb:22:9f:90:47:f6:3d:36:c4:d0:ff:b6:0f:fe:b6:
         c5:61:08:3d:48:b4:52:80:3d:7c:70:64:f4:c0:ec:9a:9f:69:
         e2:d1:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----