Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/323830333a653439303a3a2f33322d3438203d3e20323732383230.roa
File:                     323830333a653439303a3a2f33322d3438203d3e20323732383230.roa (raw, json)
Hash identifier:          AZKUvZduOOHfKxOC2m0LHP+NzikTQK05nOrJyGt/gTQ=
Subject key identifier:   12:78:69:27:E7:8D:03:14:3D:A2:58:5D:18:A8:B5:0B:49:2F:5A:DF
Certificate issuer:       /CN=EB552741007C26DD44D8C729BBDB1C5406F88B63
Certificate serial:       176F2850EAFDE37DACD3781EF87F3D84D2B1B5B9
Authority key identifier: EB:55:27:41:00:7C:26:DD:44:D8:C7:29:BB:DB:1C:54:06:F8:8B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB552741007C26DD44D8C729BBDB1C5406F88B63.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/323830333a653439303a3a2f33322d3438203d3e20323732383230.roa
Signing time:             Tue 05 Mar 2024 17:44:20 +0000
ROA not before:           Tue 05 Mar 2024 17:39:20 +0000
ROA not after:            Tue 04 Mar 2025 17:44:20 +0000
asID:                     272820
IP address blocks:        2803:e490::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6f:28:50:ea:fd:e3:7d:ac:d3:78:1e:f8:7f:3d:84:d2:b1:b5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB552741007C26DD44D8C729BBDB1C5406F88B63
        Validity
            Not Before: Mar  5 17:39:20 2024 GMT
            Not After : Mar  4 17:44:20 2025 GMT
        Subject: CN=12786927E78D03143DA2585D18A8B50B492F5ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:26:ca:e9:0b:aa:1b:2c:f0:ec:ba:79:87:
                    dd:56:7a:e4:d0:8c:4d:9b:0f:9c:58:be:91:f6:5a:
                    b2:92:3f:83:1b:1e:da:ff:fe:06:dc:b4:7a:73:19:
                    e8:aa:2c:d4:b2:6d:bd:21:c0:75:b0:c0:bf:89:3f:
                    d6:f0:6b:45:97:e1:01:64:97:52:09:f9:49:d8:10:
                    29:a9:d8:0c:f2:62:87:cc:1b:09:93:05:c2:50:76:
                    d6:a1:92:eb:e7:9d:7c:6f:e6:1e:af:29:80:8a:48:
                    64:36:2f:12:cf:dc:9f:a1:da:ee:a6:d3:f7:bf:02:
                    e4:4c:9a:15:0a:80:a6:2c:09:4c:5b:bd:ee:ca:f1:
                    17:61:94:69:4f:95:0e:00:81:38:25:ca:07:22:04:
                    f0:f7:d0:09:36:01:2b:ae:67:08:84:49:58:62:02:
                    2f:89:47:9b:3b:cb:a9:ed:33:7d:bb:01:e1:99:4f:
                    c3:0b:f7:46:ce:09:18:f4:ec:35:ce:1f:fa:c6:72:
                    39:1d:28:9f:69:b0:b6:aa:e3:14:ec:66:cf:a7:bc:
                    b0:bf:9a:35:d7:8b:6e:a7:80:26:d6:11:c1:51:9b:
                    7e:bf:e5:5b:52:1b:0e:15:c2:7e:8f:50:15:9d:1f:
                    c9:44:d5:a4:d8:7a:61:ff:21:fd:80:de:17:ff:93:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:78:69:27:E7:8D:03:14:3D:A2:58:5D:18:A8:B5:0B:49:2F:5A:DF
            X509v3 Authority Key Identifier:
                keyid:EB:55:27:41:00:7C:26:DD:44:D8:C7:29:BB:DB:1C:54:06:F8:8B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/EB552741007C26DD44D8C729BBDB1C5406F88B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB552741007C26DD44D8C729BBDB1C5406F88B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/323830333a653439303a3a2f33322d3438203d3e20323732383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e490::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:4b:f1:25:f2:5a:00:71:db:83:6c:70:07:ea:8b:a9:cd:04:
         ab:ea:f0:26:15:31:8d:30:d4:50:93:df:dc:ce:73:b1:87:82:
         28:60:5e:2d:0e:f0:36:6c:94:9c:4e:b7:6e:6e:2c:fc:1c:c3:
         25:63:81:e7:4f:f4:e6:e7:5c:ea:7c:8a:9e:01:e8:fc:9f:9b:
         37:24:21:50:c6:91:bc:17:ca:7a:13:9c:a9:31:60:27:55:c5:
         94:cd:61:d0:34:99:4e:81:6e:0c:48:1f:69:96:a3:8e:13:ac:
         27:06:66:68:b8:7e:83:3f:2a:7a:7e:07:50:1f:fa:8f:1d:cc:
         28:e0:93:f1:9a:15:06:f9:72:21:dd:fc:9b:4d:d1:09:1c:8b:
         96:8a:51:75:68:e1:75:ef:d9:89:21:e4:54:70:4c:fa:9c:e9:
         9c:28:69:ac:1e:9a:bd:88:eb:bd:33:99:6d:cd:ba:56:79:74:
         32:4e:15:b6:42:39:eb:5a:64:a2:54:2b:01:33:93:7c:c3:22:
         50:e0:1f:6f:74:6f:60:ce:21:e7:2b:f0:f1:60:26:65:19:a1:
         78:d5:42:06:44:23:7a:e6:0b:27:5e:92:36:35:b5:6c:39:3c:
         3d:b0:09:c0:91:8e:3d:2e:79:cb:f4:6b:ff:f1:db:20:f9:a7:
         9b:5c:44:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----