Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/323830333a363436303a3a2f33322d3336203d3e20323637383334.roa
File:                     323830333a363436303a3a2f33322d3336203d3e20323637383334.roa (raw, json)
Hash identifier:          VdytJg9VFLMwLMx0xKiAFZ1s2A6gi7Lf4l0JH+7Ak2w=
Subject key identifier:   33:4D:4D:C6:50:40:6D:B3:E5:74:55:E3:D1:82:31:7D:04:2D:CC:98
Certificate issuer:       /CN=D2F7F610DA168FB1B0A47B65FB92BD5365773B03
Certificate serial:       21D2D2362658C5C5A8CE269AC7FD452ADCB12C62
Authority key identifier: D2:F7:F6:10:DA:16:8F:B1:B0:A4:7B:65:FB:92:BD:53:65:77:3B:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/323830333a363436303a3a2f33322d3336203d3e20323637383334.roa
Signing time:             Fri 26 Apr 2024 14:15:00 +0000
ROA not before:           Fri 26 Apr 2024 14:10:00 +0000
ROA not after:            Fri 25 Apr 2025 14:15:00 +0000
asID:                     267834
IP address blocks:        2803:6460::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d2:d2:36:26:58:c5:c5:a8:ce:26:9a:c7:fd:45:2a:dc:b1:2c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F7F610DA168FB1B0A47B65FB92BD5365773B03
        Validity
            Not Before: Apr 26 14:10:00 2024 GMT
            Not After : Apr 25 14:15:00 2025 GMT
        Subject: CN=334D4DC650406DB3E57455E3D182317D042DCC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:6f:1f:ef:b5:91:ff:75:cf:fb:b8:86:c7:
                    ef:94:0a:62:42:94:c5:2e:61:9f:4d:5b:db:37:c8:
                    ad:4b:fb:8d:6d:38:b5:26:95:a0:2d:b3:de:aa:e1:
                    c3:86:a8:a4:3d:71:ac:e9:c5:b7:84:23:90:75:df:
                    60:0a:7a:e6:1f:b4:12:05:c1:4f:4b:81:36:68:d4:
                    24:5c:ad:65:55:68:65:24:00:db:f2:95:11:b1:95:
                    db:a6:6b:10:3d:39:ae:81:98:89:48:44:f4:74:5c:
                    e6:78:55:29:3f:03:76:a0:66:b9:f5:bb:94:8b:95:
                    31:6b:ca:3f:02:2d:04:58:b7:67:5b:68:08:b2:40:
                    77:0d:cd:ef:dd:32:6d:c2:0b:c8:b9:ed:54:ba:6a:
                    2c:c7:91:4b:4d:06:78:e4:c7:21:b1:58:84:bc:40:
                    1c:59:34:9f:9a:99:c7:a1:47:81:44:9e:62:46:ae:
                    30:07:df:a8:51:c5:57:4e:54:62:09:a9:70:47:03:
                    cf:48:19:97:a3:12:ce:a4:03:b3:a3:49:9d:74:ca:
                    40:a3:90:38:ba:5c:c1:e9:59:07:0b:52:63:aa:a3:
                    3d:2f:89:47:ed:74:ea:59:ad:eb:ce:75:be:94:01:
                    a1:e0:36:46:43:d6:50:fe:72:a9:7a:27:fd:25:e1:
                    46:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4D:4D:C6:50:40:6D:B3:E5:74:55:E3:D1:82:31:7D:04:2D:CC:98
            X509v3 Authority Key Identifier:
                keyid:D2:F7:F6:10:DA:16:8F:B1:B0:A4:7B:65:FB:92:BD:53:65:77:3B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F7F610DA168FB1B0A47B65FB92BD5365773B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77EA999F2FFDE6598FEBAB48ADBB1B1BD5B90AE44644D3039F0241CA1BA658DC/0/323830333a363436303a3a2f33322d3336203d3e20323637383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6460::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:f3:23:e0:e9:3e:2f:66:8c:62:e1:79:5e:1f:e2:b6:07:
         45:22:02:c3:a1:94:bc:fe:b5:1e:e2:75:b1:e9:aa:7e:42:da:
         12:f9:de:e7:5b:ca:8c:8c:86:8a:1a:0a:0d:cd:72:c5:2e:46:
         ae:ce:2f:d0:53:a4:34:c4:30:ff:1b:e5:d7:16:16:17:90:64:
         7a:1b:20:50:98:b0:21:3a:4d:6a:52:f8:89:c5:0d:73:a7:6c:
         03:7b:9c:72:da:56:e8:6f:17:76:c2:78:a9:2e:45:2c:eb:c3:
         03:3b:3f:95:86:ca:e8:fb:55:33:28:43:b0:d0:17:52:ef:3f:
         55:a3:c6:81:6e:f2:e6:a7:73:5f:ca:75:d7:66:1d:47:00:63:
         c8:e7:12:86:c6:9f:22:6a:c0:81:4a:ce:56:78:e0:c8:70:fe:
         88:70:43:60:39:e8:a9:07:29:c6:f4:bd:ea:e2:01:36:7f:5b:
         b0:a7:d3:b5:b4:8e:12:67:ab:9a:c1:b2:6e:15:87:cd:8a:c2:
         c6:b3:43:9e:9c:5b:42:98:29:f9:1a:35:c7:de:56:89:de:54:
         49:20:a4:20:cd:9a:58:3f:c9:59:df:17:4f:c6:b5:55:40:2e:
         dc:eb:9a:c2:16:ab:81:92:0c:ec:d7:87:1d:82:35:73:18:04:
         b3:fd:a5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----