Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/323830333a3230303a3a2f33322d3332203d3e203532323834.roa
File:                     323830333a3230303a3a2f33322d3332203d3e203532323834.roa (raw, json)
Hash identifier:          RL2JYUHSuLnrAOlbqcwzzZvcmB1zCFgvslGXJdWc7aA=
Subject key identifier:   13:3A:24:0B:82:00:77:2E:58:41:85:F9:35:AA:22:5B:5C:F0:4B:92
Certificate issuer:       /CN=3C0D9824A61951890549A3BAB2843EF4DD28F6EF
Certificate serial:       2AF58103A40E58A0C07F03BD920E1CAE4DEE808A
Authority key identifier: 3C:0D:98:24:A6:19:51:89:05:49:A3:BA:B2:84:3E:F4:DD:28:F6:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/323830333a3230303a3a2f33322d3332203d3e203532323834.roa
Signing time:             Tue 05 Mar 2024 18:16:35 +0000
ROA not before:           Tue 05 Mar 2024 18:11:35 +0000
ROA not after:            Tue 04 Mar 2025 18:16:35 +0000
asID:                     52284
IP address blocks:        2803:200::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f5:81:03:a4:0e:58:a0:c0:7f:03:bd:92:0e:1c:ae:4d:ee:80:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C0D9824A61951890549A3BAB2843EF4DD28F6EF
        Validity
            Not Before: Mar  5 18:11:35 2024 GMT
            Not After : Mar  4 18:16:35 2025 GMT
        Subject: CN=133A240B8200772E584185F935AA225B5CF04B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:a6:c6:c7:af:3c:0f:03:bc:6f:6e:f1:b7:
                    c8:e0:83:f4:c3:1f:86:64:5c:08:94:0f:74:00:ff:
                    96:1e:f6:b5:ab:f0:10:2d:25:b2:b2:a5:dd:bc:60:
                    82:54:61:df:28:4f:6e:45:ba:81:53:81:41:89:85:
                    ca:77:a4:d8:9e:f4:6c:12:27:11:5e:d4:04:37:79:
                    77:88:59:55:f8:c4:db:fe:93:1b:0e:7d:85:c9:20:
                    53:d9:04:45:aa:70:77:ad:6e:bf:10:4d:0b:7d:d3:
                    80:9c:0a:7f:d0:9f:9c:be:00:74:4d:e1:bd:fb:ed:
                    e7:70:28:05:ac:05:31:59:f4:1c:5c:8e:00:91:36:
                    cc:00:39:c4:2e:3e:23:43:fe:83:51:01:dc:c7:0b:
                    18:10:db:de:2c:20:39:ff:24:de:6c:1d:6a:d6:09:
                    f7:c3:53:4a:c4:d4:9a:30:f1:60:0f:e7:1e:cc:04:
                    e4:f7:af:c5:7c:6f:08:2d:61:d8:bf:f4:5e:9e:c3:
                    07:dc:c3:aa:a6:ae:18:30:aa:e3:54:db:06:c2:d7:
                    93:b7:5b:8d:c9:50:3f:28:9b:46:97:1b:73:6a:70:
                    cf:a1:05:1c:f7:08:77:10:5a:9c:ac:f7:e9:54:5e:
                    92:b4:25:34:c5:c3:a4:a6:d8:f6:53:44:4a:e4:ac:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3A:24:0B:82:00:77:2E:58:41:85:F9:35:AA:22:5B:5C:F0:4B:92
            X509v3 Authority Key Identifier:
                keyid:3C:0D:98:24:A6:19:51:89:05:49:A3:BA:B2:84:3E:F4:DD:28:F6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C0D9824A61951890549A3BAB2843EF4DD28F6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69BB55EA9235D147025B32B9AEC5160107DE56283C0F0D8550BE32B0883CFF0C/0/323830333a3230303a3a2f33322d3332203d3e203532323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:200::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:a2:2b:07:fd:83:fb:f6:9a:51:1b:a6:73:91:d4:e9:32:
         66:36:5d:ee:c2:b1:ed:d5:dc:9c:c6:8a:9e:59:a2:ae:69:98:
         27:48:fe:3e:ba:77:fc:70:9f:3b:e3:89:da:1c:e1:ac:55:1b:
         8c:67:c1:a1:1f:69:67:a2:56:cc:1d:f2:b2:90:e5:14:8a:eb:
         2f:90:ed:89:e4:57:44:1d:45:cb:6b:3d:0f:b2:d1:97:8a:03:
         88:90:fb:c8:dc:63:2c:36:92:0f:b4:c4:6d:d0:01:9f:53:69:
         f5:f6:a7:3a:e6:42:7b:c1:30:95:e3:e9:b8:1d:a3:32:20:23:
         1e:b5:2d:46:90:7a:0e:c7:b3:37:1c:00:46:46:0f:37:d3:8f:
         2b:d1:54:0a:c0:af:23:6e:87:92:66:30:b7:6d:8d:42:7e:07:
         6b:b0:7d:f4:b1:d7:7c:f7:7b:fd:f0:6d:25:55:42:08:e4:22:
         04:6d:01:34:3e:68:21:db:ac:36:7f:87:60:a5:4d:95:11:74:
         ec:c8:23:60:a2:6b:25:27:6f:58:dd:24:fd:b2:4f:d1:67:11:
         9c:5b:f3:4a:ba:1a:51:8b:b2:6e:15:c2:9c:c0:fe:83:5d:9e:
         27:7e:66:4b:85:8f:07:2c:61:3e:b0:29:33:7a:7b:c6:fc:c5:
         dd:ae:7c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----