Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa
File:                     323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa (raw, json)
Hash identifier:          vhEn7jdTZn+jQNf6pi7Hku36c9XBAtJzw56hkQq1HD4=
Subject key identifier:   C4:3B:38:67:29:79:01:E5:0E:08:5F:B3:7C:C2:F6:E7:E5:42:60:4A
Certificate issuer:       /CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
Certificate serial:       29697A4A4FF8C33995BD916C5C36934ED04E851C
Authority key identifier: CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa
Signing time:             Tue 05 Mar 2024 18:17:46 +0000
ROA not before:           Tue 05 Mar 2024 18:12:46 +0000
ROA not after:            Tue 04 Mar 2025 18:17:46 +0000
asID:                     61497
IP address blocks:        2803:d040:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:69:7a:4a:4f:f8:c3:39:95:bd:91:6c:5c:36:93:4e:d0:4e:85:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED1302EBC484C7C69E637E45AEF6775D5E618A9
        Validity
            Not Before: Mar  5 18:12:46 2024 GMT
            Not After : Mar  4 18:17:46 2025 GMT
        Subject: CN=C43B3867297901E50E085FB37CC2F6E7E542604A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:9d:fa:21:46:51:51:bd:bf:46:79:61:67:
                    66:e7:17:3f:02:aa:5d:22:a3:1b:3a:eb:07:d6:71:
                    a2:3d:60:43:4d:29:b8:ec:5e:55:d3:29:83:56:2f:
                    89:5a:d1:6c:66:01:50:01:a3:1e:66:47:50:3a:b3:
                    e9:13:a1:cd:33:93:cf:c8:93:73:fe:fa:ae:0c:81:
                    25:93:c9:3f:21:04:3d:51:19:78:9d:f0:49:96:31:
                    79:9b:3c:23:ce:09:24:b7:14:aa:38:1b:21:e1:85:
                    0a:fa:25:d0:df:35:fa:88:70:3c:c6:e3:9e:7a:6d:
                    6e:3a:05:e3:a9:53:dd:8b:1e:4f:c0:40:d8:10:ac:
                    a3:94:2b:b6:3e:98:98:b6:e2:6e:4d:fe:cb:2d:a9:
                    68:ef:22:99:b4:58:04:d4:26:e1:86:7c:c3:68:8d:
                    25:49:47:24:2b:7e:bf:4d:d0:a8:8e:58:d0:be:e0:
                    67:1b:5d:d5:2d:51:d8:7e:8c:fa:1d:63:4d:ed:ed:
                    d4:02:e0:88:0b:79:88:f0:ea:e8:15:15:a4:c0:95:
                    34:29:04:ed:bf:80:ff:92:a3:44:9a:89:c3:2d:09:
                    ff:47:2e:29:de:09:d7:9f:02:93:45:2b:15:8f:17:
                    eb:2a:32:17:54:3d:79:41:10:5c:7a:3b:eb:e5:7e:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3B:38:67:29:79:01:E5:0E:08:5F:B3:7C:C2:F6:E7:E5:42:60:4A
            X509v3 Authority Key Identifier:
                keyid:CE:D1:30:2E:BC:48:4C:7C:69:E6:37:E4:5A:EF:67:75:D5:E6:18:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CED1302EBC484C7C69E637E45AEF6775D5E618A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76429D3FC4898C43FD0C89E905ACAE83D553D45217106A8E0DB04088EE4FF11D/0/323830333a643034303a313a3a2f34382d3438203d3e203631343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d040:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:4a:87:4a:87:b0:00:a6:a9:39:95:23:58:43:9a:9e:b4:a3:
         14:20:1f:8a:17:ae:78:85:2b:22:73:1d:a2:69:7c:bc:94:e7:
         19:42:8a:93:2f:f1:39:fd:06:06:ff:71:a5:f5:f7:69:0d:a3:
         45:94:39:04:6b:00:fa:0e:e9:23:d5:d1:04:e2:b4:74:4e:e1:
         69:93:66:37:f7:24:15:1f:f8:a8:6d:3f:0b:62:e8:20:0e:1c:
         fb:61:d0:40:ea:83:d2:15:a3:b7:2d:32:d2:38:21:d2:81:be:
         af:b4:43:b3:9f:1e:22:6b:da:46:8f:e9:18:50:24:b3:aa:37:
         17:e6:fc:12:4b:ab:fd:d5:11:83:c5:08:40:63:ce:14:ad:4c:
         eb:b6:93:54:da:81:9d:6b:a6:2b:fa:05:a0:92:c4:82:8f:72:
         54:b8:28:0c:89:ca:76:20:53:cb:d1:20:96:3b:2f:4d:32:51:
         c3:7e:e8:3c:39:5c:2a:98:9f:ba:32:5c:80:d1:4a:b6:c2:31:
         d1:74:44:3e:a0:8b:1a:57:df:bb:29:32:39:4a:15:7d:36:03:
         0e:8a:33:9d:0e:5f:87:83:f7:02:d9:de:6a:19:c0:7f:28:87:
         c1:a9:98:1e:83:55:ab:7f:34:f0:63:62:5c:da:a0:74:5f:9d:
         c9:c3:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----