Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/72EA4D136B20E59E7C2644AF459C7B77DF7EF53984D3A9388E6850324C266FF0/0/323830333a393234303a3a2f33322d3438203d3e20323633383038.roa
File:                     323830333a393234303a3a2f33322d3438203d3e20323633383038.roa (raw, json)
Hash identifier:          EXD7kM+K3S9maRkbXs0veks8irJk4TElWv5SL9bDgyA=
Subject key identifier:   E3:24:79:18:C0:0B:F7:88:07:1B:08:F0:83:14:84:12:3B:CD:A6:0E
Certificate issuer:       /CN=EC10C9CADB7DBD590B08CF5996AE27024C9DD050
Certificate serial:       7BD59E71C87F48F84B80B5234D5AE05123D0F22A
Authority key identifier: EC:10:C9:CA:DB:7D:BD:59:0B:08:CF:59:96:AE:27:02:4C:9D:D0:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC10C9CADB7DBD590B08CF5996AE27024C9DD050.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/72EA4D136B20E59E7C2644AF459C7B77DF7EF53984D3A9388E6850324C266FF0/0/323830333a393234303a3a2f33322d3438203d3e20323633383038.roa
Signing time:             Tue 05 Mar 2024 18:08:18 +0000
ROA not before:           Tue 05 Mar 2024 18:03:18 +0000
ROA not after:            Tue 04 Mar 2025 18:08:18 +0000
asID:                     263808
IP address blocks:        2803:9240::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d5:9e:71:c8:7f:48:f8:4b:80:b5:23:4d:5a:e0:51:23:d0:f2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC10C9CADB7DBD590B08CF5996AE27024C9DD050
        Validity
            Not Before: Mar  5 18:03:18 2024 GMT
            Not After : Mar  4 18:08:18 2025 GMT
        Subject: CN=E3247918C00BF788071B08F0831484123BCDA60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:e2:f4:2c:b6:bb:27:ce:1c:f9:41:3f:22:
                    0a:26:a8:3e:54:7d:26:50:5e:fa:20:4d:13:e7:91:
                    55:96:28:56:78:d0:60:79:fd:70:d5:40:f9:3c:6d:
                    da:2b:a9:b3:9a:ea:5a:33:c7:34:d5:28:25:bf:f1:
                    5d:12:e4:8e:e7:1b:9d:27:dd:4b:f2:b2:2d:fd:85:
                    f5:40:1a:c9:0f:7e:f3:9f:8d:1d:d9:da:4c:27:bb:
                    fe:4b:0b:99:a1:37:d8:8d:24:cd:ac:50:a0:ec:2c:
                    e4:ca:41:e2:68:c2:e3:7c:9e:1d:1b:c6:2d:f9:d2:
                    00:dc:d2:e5:0b:f8:6a:c8:a0:24:a9:f9:17:0f:0b:
                    9a:17:4d:f6:cd:bc:23:11:70:4c:2c:e6:57:6f:92:
                    ff:8a:5f:fd:2a:17:c1:dd:27:8b:17:d0:d1:66:eb:
                    06:9e:ef:c1:ef:7f:1b:ae:7e:e4:45:5e:c7:0b:89:
                    35:9b:16:61:fa:a3:0b:14:37:a3:cb:b3:05:c9:9a:
                    24:42:1c:9c:26:c5:1e:2f:91:c4:f5:85:ad:0f:0a:
                    f5:ed:68:fe:24:86:cb:21:d5:01:f1:fb:ef:91:38:
                    d9:95:90:29:2d:9b:80:11:a6:43:00:aa:0b:90:69:
                    27:c8:b2:b5:78:c4:0f:23:bf:fe:44:8a:4a:2e:30:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:79:18:C0:0B:F7:88:07:1B:08:F0:83:14:84:12:3B:CD:A6:0E
            X509v3 Authority Key Identifier:
                keyid:EC:10:C9:CA:DB:7D:BD:59:0B:08:CF:59:96:AE:27:02:4C:9D:D0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/72EA4D136B20E59E7C2644AF459C7B77DF7EF53984D3A9388E6850324C266FF0/0/EC10C9CADB7DBD590B08CF5996AE27024C9DD050.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC10C9CADB7DBD590B08CF5996AE27024C9DD050.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/72EA4D136B20E59E7C2644AF459C7B77DF7EF53984D3A9388E6850324C266FF0/0/323830333a393234303a3a2f33322d3438203d3e20323633383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9240::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:c8:3c:cf:21:1f:81:ce:94:df:ba:d2:3b:3d:0f:fc:ca:5c:
         98:5f:44:97:8a:53:9e:a8:37:b0:ac:be:7a:13:f3:f4:37:67:
         ab:32:4d:63:7c:d7:6d:2d:73:50:82:ee:61:20:82:c4:3e:fa:
         0b:ef:4f:ec:80:eb:80:c1:f3:ee:32:16:ee:2b:7a:1d:ea:98:
         b5:44:5f:11:0e:d9:a5:5f:f0:e9:48:50:16:c8:3e:63:83:5d:
         66:65:4d:99:e9:4c:c1:43:10:c8:86:b8:dc:fb:7b:97:ff:3c:
         e5:4e:19:db:5b:40:d7:b7:61:cb:89:84:3f:f5:07:46:c9:f9:
         74:bf:ca:e3:f2:3d:c3:e4:92:43:f1:1b:f7:ff:ff:79:e1:02:
         d1:61:a7:26:0b:d3:fd:7d:89:2d:e7:9b:3c:32:eb:bc:5f:e0:
         1e:42:f4:51:53:52:ce:0a:5c:9c:5e:69:49:23:bd:ff:6a:0a:
         c1:e1:5c:02:5d:d1:63:f1:2b:59:b8:53:1a:d7:06:44:3b:96:
         24:00:4a:7b:05:c1:ef:66:30:a8:58:f6:98:4f:52:f5:97:8a:
         df:61:62:3b:39:b2:e9:06:58:df:fb:13:f0:5c:c2:e0:6b:0c:
         65:8d:e4:af:38:75:3d:13:2f:7f:96:e1:4f:09:ff:5c:9b:fc:
         b6:e9:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----