Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313030303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313030303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          BIi5d/L6kdub78gZtFuGOjeFOTUCagYZBNOOAmgZVcg=
Subject key identifier:   0D:5F:D3:90:50:DD:48:C1:0D:07:2A:CC:9A:66:15:03:E7:A0:79:7A
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       69891449653FF28DDD1692925F2F128AD2B7B9EF
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313030303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Thu 25 Jul 2024 23:50:02 +0000
ROA not before:           Thu 25 Jul 2024 23:45:02 +0000
ROA not after:            Thu 24 Jul 2025 23:50:02 +0000
asID:                     273123
IP address blocks:        2803:450:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:89:14:49:65:3f:f2:8d:dd:16:92:92:5f:2f:12:8a:d2:b7:b9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Jul 25 23:45:02 2024 GMT
            Not After : Jul 24 23:50:02 2025 GMT
        Subject: CN=0D5FD39050DD48C10D072ACC9A661503E7A0797A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:77:ce:1a:1d:6d:07:ba:bf:27:9a:14:8c:
                    e3:45:9c:45:a2:a1:21:ae:3f:ac:9c:eb:19:38:d4:
                    b3:c2:9b:5a:ec:f6:74:f9:09:53:2c:b1:3b:8a:b9:
                    c1:a5:57:08:af:61:11:d0:28:12:5b:10:e3:82:ba:
                    2e:d3:58:20:2b:9e:92:f9:80:46:7c:d8:3d:0d:90:
                    11:6d:bb:fb:ad:34:9e:31:e4:b0:0e:04:19:e5:4b:
                    5d:ea:76:15:39:b1:67:6a:52:d2:de:71:dd:1f:15:
                    67:22:6e:9a:bd:64:d8:83:e1:95:a5:50:08:f6:91:
                    68:a4:ce:95:c5:e3:c1:ce:fe:62:70:8a:ae:9a:71:
                    18:c0:dc:83:e1:cf:03:53:95:d5:41:90:a8:22:20:
                    bb:4d:34:57:8a:92:2f:d3:b6:a1:af:2b:65:87:85:
                    4c:44:d5:45:e4:bb:e8:41:f1:13:45:b0:e7:df:db:
                    c3:e4:05:7a:79:34:29:11:e9:8e:c4:8a:78:45:47:
                    64:4d:71:68:19:b4:59:ed:b6:2e:c4:4a:a4:a5:cb:
                    76:4e:a3:76:af:bd:63:ef:e3:15:26:e8:e8:a6:89:
                    30:12:af:24:8d:36:ed:9e:9c:2a:47:a4:b3:b8:c0:
                    40:d7:5c:bd:9e:f3:50:bb:4a:b6:88:ed:fe:43:b7:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5F:D3:90:50:DD:48:C1:0D:07:2A:CC:9A:66:15:03:E7:A0:79:7A
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313030303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:7d:79:9f:41:7f:69:ad:a8:26:12:ae:b8:f4:c6:2f:a0:4c:
         32:06:c1:95:be:ec:d7:a4:91:e5:50:59:fc:f6:58:f1:54:40:
         fa:1b:10:73:46:51:04:f8:54:89:88:44:fb:00:6f:5a:b9:f8:
         98:bb:13:3d:df:5e:64:85:1a:22:85:fe:6d:a1:b2:d9:f1:df:
         b1:9e:a0:18:ba:91:ff:5e:9e:e3:22:c6:ca:57:82:1d:0c:5e:
         cf:fe:7b:02:6a:81:8b:98:e1:1f:f7:56:7a:50:bf:30:b4:18:
         3e:e5:6a:8a:0d:13:ec:2c:b5:de:60:8e:45:6d:1d:53:bd:a3:
         01:2d:19:ef:6c:06:35:b4:ca:f0:e4:15:02:1f:f7:c0:f0:5f:
         5e:01:37:ed:86:93:0b:f8:2e:f9:04:70:fa:36:b6:a2:1f:98:
         d3:97:aa:b6:09:45:4c:e4:91:52:98:07:c5:2c:ff:b7:49:a3:
         4e:b7:43:47:07:ef:48:03:39:ca:96:3b:5d:b0:51:01:af:7f:
         39:0a:10:74:bf:0b:aa:6b:f4:7a:cc:8b:65:f9:b7:09:9c:bb:
         9f:51:8b:a4:15:6a:89:51:23:fa:c8:a5:14:88:40:f6:b7:0a:
         be:d8:b5:27:ec:10:fb:d7:ec:98:de:1e:4d:11:3c:56:93:fe:
         df:86:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----