Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/323830333a373438303a3a2f33322d3438203d3e203532343936.roa
File:                     323830333a373438303a3a2f33322d3438203d3e203532343936.roa (raw, json)
Hash identifier:          iS58EFeiIn3Va24X2ICLFu4NMl44ord1pyoMHP6NBWo=
Subject key identifier:   3F:7B:1B:7C:D3:17:04:5A:43:DB:7B:3D:D5:63:D3:67:FA:48:D8:B7
Certificate issuer:       /CN=D4C98CFE5BCADD08104C88B86C13259A2A3D3E67
Certificate serial:       3B1A9CA7A8AAE88E5852F3694A34C884BC7C17E8
Authority key identifier: D4:C9:8C:FE:5B:CA:DD:08:10:4C:88:B8:6C:13:25:9A:2A:3D:3E:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/323830333a373438303a3a2f33322d3438203d3e203532343936.roa
Signing time:             Tue 05 Mar 2024 17:59:15 +0000
ROA not before:           Tue 05 Mar 2024 17:54:15 +0000
ROA not after:            Tue 04 Mar 2025 17:59:15 +0000
asID:                     52496
IP address blocks:        2803:7480::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1a:9c:a7:a8:aa:e8:8e:58:52:f3:69:4a:34:c8:84:bc:7c:17:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C98CFE5BCADD08104C88B86C13259A2A3D3E67
        Validity
            Not Before: Mar  5 17:54:15 2024 GMT
            Not After : Mar  4 17:59:15 2025 GMT
        Subject: CN=3F7B1B7CD317045A43DB7B3DD563D367FA48D8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:8d:df:f1:d5:83:73:90:40:0b:b7:00:dc:
                    a7:17:dd:fc:10:0b:62:c3:a1:95:5e:6f:00:87:93:
                    13:bf:87:53:01:ef:bd:74:30:68:b4:c6:93:3a:5e:
                    3d:0a:44:b9:15:50:37:dd:8e:29:46:c0:32:76:47:
                    97:db:87:19:70:71:dd:77:38:66:c9:61:c8:f1:b9:
                    33:48:4c:13:88:d4:13:50:24:d4:e1:36:b9:f3:37:
                    07:73:12:fe:ab:9c:4c:99:d4:90:68:e8:2c:9e:69:
                    03:dd:90:7f:55:5e:dd:25:bc:9f:ba:d2:60:90:a3:
                    89:18:13:06:a4:4c:01:af:91:2e:52:d5:12:60:da:
                    29:63:d2:39:1a:ac:0e:bd:49:0e:99:3f:4a:5f:99:
                    1d:98:57:8b:b9:c6:ab:5a:20:6b:17:27:be:d9:cc:
                    09:9f:e0:f1:53:af:b0:e3:ac:ec:06:0e:06:18:4d:
                    dd:6f:9d:d2:ac:ec:c4:51:eb:96:3b:2a:9c:bf:ba:
                    20:c9:c5:e8:36:ce:2a:55:43:48:ae:54:ac:11:b0:
                    c2:8f:72:e0:ae:22:09:d4:ad:c3:01:e7:f9:da:5b:
                    c0:fe:7d:c1:14:fa:da:bf:69:b2:22:c1:3e:26:89:
                    dc:7f:44:52:1d:09:bf:ed:50:62:f9:55:76:54:f8:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7B:1B:7C:D3:17:04:5A:43:DB:7B:3D:D5:63:D3:67:FA:48:D8:B7
            X509v3 Authority Key Identifier:
                keyid:D4:C9:8C:FE:5B:CA:DD:08:10:4C:88:B8:6C:13:25:9A:2A:3D:3E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4C98CFE5BCADD08104C88B86C13259A2A3D3E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6A9731AA4CA522EC3D5B2588C0B5231AADF366E2D2BF6B897FECA3F38E7CF018/0/323830333a373438303a3a2f33322d3438203d3e203532343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7480::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:1f:12:b2:a7:68:45:55:19:bf:da:fb:64:ec:e8:d9:52:9b:
         83:cb:b7:ff:e4:1d:8f:a9:8f:a4:8a:1e:36:38:5d:e3:95:1c:
         b2:f4:1e:ab:42:d0:9b:10:28:79:ce:cc:b5:8b:67:be:a1:e9:
         9f:a3:06:dc:bc:4e:73:67:5b:35:7e:62:66:71:27:4f:35:b5:
         e3:a0:73:01:a4:4e:86:1d:09:83:31:af:90:52:63:2e:50:44:
         ea:df:58:31:c1:05:fa:6f:5a:8e:9c:6d:73:85:aa:5a:d9:55:
         2d:57:0d:82:dd:52:cb:dc:e2:9a:1f:f4:81:a8:9c:1e:b9:88:
         dc:aa:f1:56:56:7e:f4:e9:90:ce:d7:ba:55:ef:1e:16:7b:18:
         0d:50:5b:3d:5c:fa:e4:cd:d6:f8:a2:30:51:cf:da:56:84:ad:
         b6:55:6d:3a:78:51:49:04:8e:9f:ba:2a:23:dd:9c:bd:58:5f:
         9e:0e:38:3d:0a:fa:14:07:f3:7e:3c:16:e4:f6:fc:a3:d4:dd:
         b7:13:ca:fb:64:7e:06:24:03:5e:66:f6:0a:25:ba:c7:62:dc:
         45:f4:6d:ad:27:f8:e9:ac:cd:0b:a5:0f:cd:31:88:a1:1d:d6:
         e7:6c:8b:db:dc:d6:b8:ba:8b:99:5c:ca:54:28:b2:49:53:56:
         a6:22:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----