Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/323830333a393636303a3a2f33322d3438203d3e20323637393030.roa
File:                     323830333a393636303a3a2f33322d3438203d3e20323637393030.roa (raw, json)
Hash identifier:          b+zZUsH3tjjEtxmyTguAjuDTE1AlDSaTTRufzyTmgss=
Subject key identifier:   55:01:4C:33:F6:17:E9:66:FA:D3:F6:8A:87:D7:46:AD:80:3E:54:29
Certificate issuer:       /CN=0918EDFA09C0F51BF9F8F32C7D833032AED84DC7
Certificate serial:       146068FF09494837336269BAC2C68DF6A62EB0B0
Authority key identifier: 09:18:ED:FA:09:C0:F5:1B:F9:F8:F3:2C:7D:83:30:32:AE:D8:4D:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/323830333a393636303a3a2f33322d3438203d3e20323637393030.roa
Signing time:             Tue 05 Mar 2024 18:05:15 +0000
ROA not before:           Tue 05 Mar 2024 18:00:15 +0000
ROA not after:            Tue 04 Mar 2025 18:05:15 +0000
asID:                     267900
IP address blocks:        2803:9660::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:60:68:ff:09:49:48:37:33:62:69:ba:c2:c6:8d:f6:a6:2e:b0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0918EDFA09C0F51BF9F8F32C7D833032AED84DC7
        Validity
            Not Before: Mar  5 18:00:15 2024 GMT
            Not After : Mar  4 18:05:15 2025 GMT
        Subject: CN=55014C33F617E966FAD3F68A87D746AD803E5429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:19:4d:77:32:fa:b8:55:cd:df:8d:70:02:
                    2e:f3:ea:91:fc:bf:f9:23:c8:bf:3b:46:31:b8:0b:
                    3a:bf:c5:a9:9d:d9:02:42:f2:31:26:97:11:0c:86:
                    a0:c8:93:87:59:4d:a1:b7:14:bd:cb:14:64:8c:a3:
                    c9:7f:8d:ca:d2:a8:95:48:dc:3d:10:ea:f2:93:55:
                    e4:45:6a:54:a9:50:b7:17:28:97:ee:26:b4:38:25:
                    43:cc:29:bd:b8:43:b3:00:bb:6e:2f:0a:16:c1:8c:
                    d4:fb:68:1b:8c:fc:87:42:cc:ba:96:5d:36:7a:d2:
                    b2:b7:c7:1a:65:e6:50:85:d7:77:a4:5e:bd:c2:d5:
                    24:b4:9c:27:4f:ce:f5:33:3b:40:6c:79:ee:47:67:
                    88:44:f1:7e:43:37:96:51:df:ae:17:a4:93:b5:4e:
                    49:41:3e:4c:77:b9:1b:3a:9b:d7:05:bb:ca:58:24:
                    5e:31:f8:38:41:67:79:ee:fc:0c:24:97:64:39:10:
                    2b:a8:b4:01:d1:e2:a2:a8:b2:fb:f2:9f:3f:a3:04:
                    a7:9d:ef:fd:05:59:2b:14:47:2c:ec:d9:0d:92:0a:
                    d6:7b:6b:b7:81:26:ac:f7:b4:65:19:9b:b5:e4:b9:
                    e2:ef:b5:74:e5:56:80:41:9b:84:33:63:05:35:a0:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:01:4C:33:F6:17:E9:66:FA:D3:F6:8A:87:D7:46:AD:80:3E:54:29
            X509v3 Authority Key Identifier:
                keyid:09:18:ED:FA:09:C0:F5:1B:F9:F8:F3:2C:7D:83:30:32:AE:D8:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/323830333a393636303a3a2f33322d3438203d3e20323637393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9660::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:a8:66:c4:19:18:79:55:1d:bf:40:38:e5:20:37:e5:bf:db:
         6b:1e:59:0d:5b:4a:66:1c:21:88:05:3e:37:c2:4b:86:a8:7a:
         f1:06:04:5f:c7:23:40:b3:c0:0b:78:03:e3:b2:70:94:39:ae:
         02:36:be:cd:ff:48:21:a2:c8:5c:de:8a:80:33:2e:e8:d9:a5:
         6e:97:67:73:72:e2:f3:7c:e7:bc:2e:9d:53:0d:1f:a6:b9:f6:
         99:09:8f:1d:ac:7c:8a:f3:ea:a1:8b:56:14:71:e7:95:81:d8:
         15:3c:8c:ac:b4:95:3c:19:c0:1c:b9:69:fa:81:53:82:c7:c6:
         73:15:be:75:8c:50:49:13:04:10:d2:b8:95:7a:b4:7c:84:2c:
         aa:51:1b:6e:08:42:25:e6:39:29:1e:67:91:a1:67:0a:3f:89:
         88:95:9d:fb:6e:9a:54:4e:97:52:81:39:fa:66:55:f2:bb:ab:
         69:c2:91:28:32:65:b9:77:4e:4d:e5:6a:f2:45:bb:f9:ae:29:
         09:fb:36:86:06:1e:40:cf:32:fb:fe:40:55:a9:a6:1a:bd:4c:
         cb:20:ab:88:26:6b:df:2d:26:3a:aa:9a:27:02:48:d8:71:5c:
         d6:62:8a:88:17:ec:a9:be:c0:7f:a9:db:72:cb:f9:3f:7a:cb:
         a4:ed:d3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----