Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa
File:                     323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa (raw, json)
Hash identifier:          H3qrC8R5qAWF5F52sABuELwp72QQGoKKkspRfOY9x5U=
Subject key identifier:   32:E9:36:62:F8:75:61:52:F9:AB:11:39:8D:95:28:A6:B7:44:A0:E8
Certificate issuer:       /CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
Certificate serial:       35B9C3231DEEAB6F660DBDFBC96D9F7105919EAC
Authority key identifier: A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa
Signing time:             Sat 21 Dec 2024 00:15:01 +0000
ROA not before:           Sat 21 Dec 2024 00:10:01 +0000
ROA not after:            Sat 20 Dec 2025 00:15:01 +0000
asID:                     273123
IP address blocks:        2803:450:1700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b9:c3:23:1d:ee:ab:6f:66:0d:bd:fb:c9:6d:9f:71:05:91:9e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A198FA87174B8B00FBA9F65DCF1B605476A4B9FD
        Validity
            Not Before: Dec 21 00:10:01 2024 GMT
            Not After : Dec 20 00:15:01 2025 GMT
        Subject: CN=32E93662F8756152F9AB11398D9528A6B744A0E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:2c:51:99:43:58:22:15:ec:75:7e:04:a8:
                    19:28:be:c1:54:a9:a6:b2:20:64:09:e1:2c:36:a9:
                    89:f3:60:25:bf:cc:6b:17:25:b8:da:aa:76:c7:47:
                    e3:14:c0:02:e7:82:5d:1a:04:30:00:1d:4d:f3:eb:
                    90:c2:42:bb:62:6d:69:aa:d9:e3:f9:1b:48:14:81:
                    4d:ac:5c:05:4a:b5:cc:58:3b:ac:10:ca:fe:8e:99:
                    11:57:35:9e:18:1a:17:90:22:b2:86:22:2b:36:47:
                    9f:80:81:40:76:24:a3:25:1d:be:ef:04:cd:8e:b3:
                    a2:72:ec:59:c9:5b:0c:49:ab:74:3b:a0:f9:05:ce:
                    de:38:99:9a:30:f0:f9:5c:cd:f1:f7:fc:b5:23:ba:
                    e5:be:e7:52:ea:6b:0c:bd:fd:23:8d:65:81:0f:33:
                    f5:cc:a3:60:76:cc:8e:a5:b7:77:32:1d:a8:64:82:
                    62:80:7a:e4:6a:e3:0b:fa:e1:7f:1f:c7:c9:19:74:
                    47:00:e2:3d:e6:26:77:dd:ce:87:e5:91:ff:18:1a:
                    ea:01:2f:55:59:20:a2:8d:91:66:37:1e:3a:88:f2:
                    1d:1e:e0:d7:46:b4:34:f8:b8:57:89:ec:c7:7a:3f:
                    3e:87:2b:6e:3e:85:fb:94:4b:fb:7d:b3:aa:11:23:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E9:36:62:F8:75:61:52:F9:AB:11:39:8D:95:28:A6:B7:44:A0:E8
            X509v3 Authority Key Identifier:
                keyid:A1:98:FA:87:17:4B:8B:00:FB:A9:F6:5D:CF:1B:60:54:76:A4:B9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A198FA87174B8B00FBA9F65DCF1B605476A4B9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E285A55B6E9C358D027784A4BAD976E9E7B8F378EF5F39B87B7B17A43063A04/0/323830333a3435303a313730303a3a2f34302d3430203d3e20323733313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:54:56:0e:f4:27:2c:c1:2e:5f:b5:17:fe:97:2c:73:7f:
         07:a9:d0:02:ed:73:c7:0a:0d:45:d1:bb:17:b1:ec:3b:da:6a:
         cb:bf:f9:3b:5d:2d:01:8a:79:3a:1d:b3:7b:54:e5:45:5d:a4:
         33:b3:d2:19:4e:3a:e7:a5:ca:c0:99:61:79:7b:da:f7:31:c0:
         d2:8d:94:25:bc:ff:e4:3b:ef:2b:78:4c:d3:22:7f:f7:60:b9:
         c7:b5:58:88:3f:e2:2c:74:00:f9:7a:bb:b3:73:c2:dc:94:52:
         d8:13:1b:7a:aa:67:88:bd:9c:bb:e2:07:9e:85:12:31:e6:67:
         9b:b0:5f:17:cf:ce:ff:f5:34:58:80:2c:97:09:27:e5:23:89:
         3e:f0:db:3c:17:89:6b:b2:4a:a2:3f:72:72:05:ff:ba:40:1d:
         22:42:c4:8f:b1:fc:71:b7:08:1d:6b:3b:39:56:0f:10:0c:74:
         0f:7c:b4:fc:49:b5:20:2b:16:4f:05:8c:50:0a:a6:9c:a6:d8:
         8c:92:c7:42:35:8a:ad:e4:56:19:ea:6c:78:e6:79:37:e3:8b:
         e1:16:99:f5:74:0e:3c:d2:2e:15:7f:2f:95:c5:cd:83:72:e9:
         d2:19:51:e8:77:2b:48:be:1a:4c:16:75:17:3f:9c:59:9e:93:
         f7:59:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----