Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa
File:                     323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa (raw, json)
Hash identifier:          ATWK8uFM2PpcKgkYLix3lBY3IN/zj18uTYj5w1A5QvY=
Subject key identifier:   7E:51:1F:B8:1B:3B:55:B1:9F:8D:C4:4F:98:6A:41:B3:22:5D:5C:DD
Certificate issuer:       /CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
Certificate serial:       55D16C201060C2C7A2F396CD8CF825F78B1F705E
Authority key identifier: FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:23:18 +0000
ROA not before:           Tue 05 Mar 2024 18:18:18 +0000
ROA not after:            Tue 04 Mar 2025 18:23:18 +0000
asID:                     27947
IP address blocks:        2801:16:9800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d1:6c:20:10:60:c2:c7:a2:f3:96:cd:8c:f8:25:f7:8b:1f:70:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
        Validity
            Not Before: Mar  5 18:18:18 2024 GMT
            Not After : Mar  4 18:23:18 2025 GMT
        Subject: CN=7E511FB81B3B55B19F8DC44F986A41B3225D5CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:cc:7c:1a:c5:ef:42:43:e0:9f:87:f6:02:
                    41:87:6e:8d:fa:3a:c3:67:ef:b2:9a:5e:fc:b4:91:
                    a1:21:5e:e2:55:32:db:65:5b:7e:61:9e:5a:2a:34:
                    7f:b3:4e:66:4f:68:c3:35:de:da:2c:ab:46:03:eb:
                    c2:42:82:fa:66:40:5e:a9:81:76:58:a0:c9:6c:9d:
                    af:44:f0:57:e9:20:3c:0b:a7:d4:89:fa:1c:4c:e0:
                    e7:c7:78:a0:a7:37:4a:b8:83:7c:52:ce:39:f2:aa:
                    d7:95:c5:69:19:6d:5c:05:d9:1c:bf:f1:da:92:40:
                    21:e4:0d:0e:91:49:99:44:d9:d7:7a:88:65:0e:cb:
                    9d:2f:a4:ce:9c:4d:91:f0:a4:96:16:7c:13:8b:15:
                    97:41:05:f8:1f:d7:d5:10:59:c2:88:dc:0a:e3:f2:
                    90:6f:f4:cb:a5:7a:90:97:bf:93:62:77:00:a0:bb:
                    0b:7c:f5:7e:5b:9a:d9:76:27:5f:c9:89:79:09:1d:
                    e2:25:0d:a3:f1:b1:d7:cd:7a:af:20:f7:3c:e6:87:
                    27:a0:9c:21:fe:c0:6f:60:b0:ec:fe:fb:9a:44:9d:
                    1a:85:9f:a4:76:d0:00:ff:ce:64:16:12:db:c0:b9:
                    c8:94:48:bb:00:4a:80:0a:e0:0d:af:7d:4b:c1:88:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:1F:B8:1B:3B:55:B1:9F:8D:C4:4F:98:6A:41:B3:22:5D:5C:DD
            X509v3 Authority Key Identifier:
                keyid:FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:4c:cf:78:91:8f:e1:d2:4d:3f:02:70:c1:dc:e4:d4:78:c4:
         fe:52:3d:12:91:71:66:b7:83:89:49:06:41:dd:32:e5:f5:67:
         e8:99:87:e6:23:c4:1e:6c:b1:d0:d8:ce:80:d2:1d:56:a9:f1:
         0c:3e:03:23:ba:5f:77:8b:8a:5a:8d:79:09:c2:d1:7e:0a:db:
         2b:d4:1a:87:7f:5c:1f:f5:a7:d5:80:be:72:fc:fd:0a:29:ca:
         0b:a4:dd:97:a1:51:d6:49:89:c9:94:7f:41:4a:e2:b7:f3:7b:
         01:cc:77:08:0d:4c:16:7c:95:f9:d3:04:d8:04:2d:48:83:ba:
         25:ba:08:ea:97:f0:7c:c5:0d:17:f3:77:29:1b:9a:02:de:7c:
         27:da:b9:42:d5:53:ec:65:84:82:c7:a2:82:da:8b:6c:3f:ef:
         33:45:5a:82:f3:d0:3c:9a:4e:3a:a4:0c:42:6c:45:1a:65:d7:
         de:d9:71:e0:18:83:65:fd:68:2e:97:ad:24:e7:d2:d9:52:df:
         79:86:a9:38:65:33:e1:fb:57:81:29:c2:b6:c0:d1:89:c3:48:
         d5:68:5a:47:d2:06:27:d1:35:76:44:a8:da:a8:30:e0:7e:95:
         2c:bb:bc:7a:a5:5a:58:da:79:ec:b5:74:75:79:13:2e:6b:45:
         fd:cf:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----