Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/323830313a31623a663030303a3a2f34382d3438203d3e20323637373033.roa
File:                     323830313a31623a663030303a3a2f34382d3438203d3e20323637373033.roa (raw, json)
Hash identifier:          6hbZFdWOjwiUnUJ9wuRogNcPT2wmd/M2IDMh1k/KXMU=
Subject key identifier:   BF:4E:77:66:C4:90:E5:11:BE:D6:D1:48:CE:F1:A2:82:EC:4A:34:B5
Certificate issuer:       /CN=503D82ECFA9B049714A0487B354E037EB0FE6DAB
Certificate serial:       0123DE87CB2EF323FAC588C3048F199E2356A321
Authority key identifier: 50:3D:82:EC:FA:9B:04:97:14:A0:48:7B:35:4E:03:7E:B0:FE:6D:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/503D82ECFA9B049714A0487B354E037EB0FE6DAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/323830313a31623a663030303a3a2f34382d3438203d3e20323637373033.roa
Signing time:             Tue 05 Mar 2024 17:51:45 +0000
ROA not before:           Tue 05 Mar 2024 17:46:45 +0000
ROA not after:            Tue 04 Mar 2025 17:51:45 +0000
asID:                     267703
IP address blocks:        2801:1b:f000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:23:de:87:cb:2e:f3:23:fa:c5:88:c3:04:8f:19:9e:23:56:a3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503D82ECFA9B049714A0487B354E037EB0FE6DAB
        Validity
            Not Before: Mar  5 17:46:45 2024 GMT
            Not After : Mar  4 17:51:45 2025 GMT
        Subject: CN=BF4E7766C490E511BED6D148CEF1A282EC4A34B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:03:6d:a5:17:dc:0f:12:3f:d9:16:72:26:
                    fd:ae:62:ff:df:ce:99:3e:61:87:e4:f6:74:1e:9e:
                    a8:67:c9:a3:36:ab:ef:1c:5a:d4:1c:dd:a2:cd:1a:
                    f0:df:7f:28:ab:5c:8a:74:85:b3:63:29:f7:41:d3:
                    a5:88:30:c4:cb:eb:de:6a:02:39:61:85:fb:29:c7:
                    ec:78:8b:8c:81:d7:e5:95:8f:29:b4:0e:cb:a3:39:
                    2a:60:21:41:d3:96:31:2a:eb:5c:7e:77:5e:92:85:
                    81:2a:40:63:9a:3b:9c:c2:69:52:d8:71:9b:6c:fe:
                    3c:d6:18:63:80:d9:37:82:27:26:d2:de:18:39:f1:
                    22:c4:03:77:fa:56:34:34:bf:55:a0:b9:12:b3:26:
                    03:cc:bd:ed:35:b5:7f:67:1c:85:8a:7c:60:24:88:
                    08:9d:c5:f8:80:ea:10:e4:65:17:26:d7:1c:ad:8d:
                    b2:fc:fa:27:5b:41:0e:f7:49:51:4d:3a:7d:7c:75:
                    1d:f7:18:60:a9:df:2e:fd:65:98:fe:8b:a8:e7:ff:
                    bc:a3:4e:8e:ac:39:4e:ed:9e:db:6f:97:bd:59:77:
                    8d:b9:b8:29:0b:66:fb:04:aa:86:8d:60:c0:39:d1:
                    75:fd:9f:11:a8:4d:ef:20:21:d3:6a:cc:04:9e:16:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4E:77:66:C4:90:E5:11:BE:D6:D1:48:CE:F1:A2:82:EC:4A:34:B5
            X509v3 Authority Key Identifier:
                keyid:50:3D:82:EC:FA:9B:04:97:14:A0:48:7B:35:4E:03:7E:B0:FE:6D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/503D82ECFA9B049714A0487B354E037EB0FE6DAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/503D82ECFA9B049714A0487B354E037EB0FE6DAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/323830313a31623a663030303a3a2f34382d3438203d3e20323637373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:7d:a7:96:61:54:40:4a:57:89:78:11:fe:06:30:37:aa:
         e3:3e:d4:27:7b:9b:d5:db:87:3a:69:86:33:ad:45:e2:2e:b6:
         df:41:b1:8b:24:7e:0f:f5:64:64:63:b1:e4:75:46:fc:93:ec:
         70:4d:33:09:c1:8b:99:76:dd:17:a5:a3:03:dc:07:7c:87:a4:
         0e:84:70:cd:41:c1:92:0c:99:43:58:77:67:b1:e0:95:1e:7e:
         6e:04:16:7b:a3:da:fb:05:44:d0:4d:1e:49:72:66:8f:20:ff:
         21:2a:ff:a4:f8:5b:6e:67:41:af:04:98:56:23:5f:59:98:0f:
         74:25:ed:45:4f:91:ee:d4:d9:7b:1d:a0:7d:da:c5:ce:19:0f:
         1f:4d:4d:d4:30:6c:bf:f9:fa:a6:2a:8d:6e:39:e5:c3:6f:eb:
         a5:83:34:77:91:b9:a6:c1:ad:03:80:4c:82:13:06:1f:b6:0d:
         fb:64:13:26:8a:80:9a:c5:e8:03:ec:0f:12:9f:13:5f:ba:d5:
         43:16:c1:12:b1:22:b0:4b:ca:00:a6:98:2a:f1:e1:a0:a8:1a:
         c9:97:20:df:71:77:89:c0:2c:94:46:db:6e:a3:a8:0e:63:c9:
         b5:63:23:47:5a:37:bd:1b:67:e6:47:48:9d:ee:61:a0:84:97:
         25:c5:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----