Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/323830333a623532303a3a2f33322d3438203d3e20323636363933.roa
File:                     323830333a623532303a3a2f33322d3438203d3e20323636363933.roa (raw, json)
Hash identifier:          4SbgkV6+wHC/ircuQgG7VfchIxUetQj02L1GptCxs/E=
Subject key identifier:   69:EC:0C:6C:1E:96:29:D9:A0:73:A5:21:94:1E:EF:9C:B9:EC:40:D2
Certificate issuer:       /CN=BDCCFDE2FE1388F24130105293A56A9F271FF8D9
Certificate serial:       1F5C52F14BE600206F187BBE0BB68FBF501C0CD1
Authority key identifier: BD:CC:FD:E2:FE:13:88:F2:41:30:10:52:93:A5:6A:9F:27:1F:F8:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/323830333a623532303a3a2f33322d3438203d3e20323636363933.roa
Signing time:             Tue 05 Mar 2024 18:06:56 +0000
ROA not before:           Tue 05 Mar 2024 18:01:56 +0000
ROA not after:            Tue 04 Mar 2025 18:06:56 +0000
asID:                     266693
IP address blocks:        2803:b520::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5c:52:f1:4b:e6:00:20:6f:18:7b:be:0b:b6:8f:bf:50:1c:0c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDCCFDE2FE1388F24130105293A56A9F271FF8D9
        Validity
            Not Before: Mar  5 18:01:56 2024 GMT
            Not After : Mar  4 18:06:56 2025 GMT
        Subject: CN=69EC0C6C1E9629D9A073A521941EEF9CB9EC40D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:80:b0:62:40:ef:3f:97:10:00:fe:81:14:a2:
                    cb:4b:12:22:f3:58:be:a3:c5:72:92:6c:49:e9:34:
                    82:50:c0:af:77:40:9f:2b:9b:ff:ca:d2:75:cb:48:
                    42:c9:9d:d4:df:46:84:46:22:8c:03:37:53:e9:e8:
                    b3:25:69:22:2c:e1:b8:f3:e4:48:02:29:3d:23:52:
                    d9:c1:f8:69:14:ed:ae:f6:0a:58:5e:14:b7:e8:ac:
                    16:37:b2:30:d0:4c:15:7b:01:7a:b1:d4:5d:51:b6:
                    8c:20:ff:76:28:7c:0e:ec:c0:27:7c:c6:3e:41:5c:
                    89:6b:28:5d:ae:5b:83:92:83:01:41:a9:75:7f:2e:
                    b0:d1:c0:cb:28:e2:f5:e8:e7:d6:12:c5:08:8a:a8:
                    85:be:44:be:b9:bb:c1:21:31:77:74:aa:1e:89:13:
                    00:69:bc:e9:01:c3:e9:92:c8:bc:61:1e:67:97:3f:
                    42:5f:94:37:82:d3:e6:3d:d9:4f:fa:9a:10:fa:8d:
                    32:b2:63:93:6b:df:3e:b5:d9:1e:7d:1d:96:e7:ab:
                    60:cb:e2:89:be:38:b9:e6:42:b5:e7:4c:fc:a5:6a:
                    8b:ce:81:fa:dc:e9:2e:bb:8f:10:b1:cc:28:c4:5c:
                    a3:f0:28:4c:82:b8:08:9a:3f:98:41:0b:a9:f7:fd:
                    fe:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EC:0C:6C:1E:96:29:D9:A0:73:A5:21:94:1E:EF:9C:B9:EC:40:D2
            X509v3 Authority Key Identifier:
                keyid:BD:CC:FD:E2:FE:13:88:F2:41:30:10:52:93:A5:6A:9F:27:1F:F8:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDCCFDE2FE1388F24130105293A56A9F271FF8D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D8D389EFB2AB3FA1807B96BA53497ABE04A0F5972C2681E622A3540646E0E20/0/323830333a623532303a3a2f33322d3438203d3e20323636363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b520::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:74:50:2b:19:31:a1:7b:7f:4a:7d:bd:07:26:ad:73:68:ab:
         65:c7:f3:c5:42:2b:6c:50:f2:a2:fb:8d:3d:5c:79:ba:ac:bc:
         cc:9c:ac:f9:94:95:d6:52:94:07:b7:38:86:07:71:47:0b:ba:
         f7:dc:10:4c:33:a4:13:7a:1c:37:7a:82:9d:b7:c5:06:54:49:
         a1:d7:22:1e:2f:ab:fa:52:fb:58:e0:cb:aa:98:2e:fd:63:b5:
         1d:5e:e5:85:39:38:a8:87:75:92:a8:46:6f:9c:f7:2f:c9:3e:
         f0:50:9d:0c:1e:2a:50:29:56:bd:9f:46:69:e9:34:f1:cb:4b:
         96:92:f5:77:38:26:b4:5f:d3:ae:b7:83:b4:3c:ea:58:76:7c:
         ca:df:53:45:66:4d:51:f5:74:80:9d:c2:f2:24:6e:f7:0c:55:
         15:6f:a8:8a:a5:df:b8:e3:fa:10:62:61:c2:57:e8:de:47:da:
         17:1c:22:f9:92:45:99:87:f0:00:f1:43:8b:c7:53:e6:dd:b6:
         86:5f:9e:f9:30:09:a4:f4:43:b3:85:4e:da:0f:58:c6:ca:92:
         e6:ea:07:c0:26:c8:48:75:a5:b5:43:31:c2:3a:0e:9c:b2:37:
         d3:90:e8:ca:b3:c5:fb:fd:a6:ae:f0:b6:90:17:6d:b2:75:11:
         81:7e:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----