Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          X9fE8NS5SLl4cy3C1DauwaSDMJYSdO0zd/PGEUL5VIM=
Subject key identifier:   F4:A3:43:E2:50:4F:14:1A:F7:12:13:E8:EB:CB:CE:C2:47:CA:28:C2
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       25E6F87C78498F64A4F0A185B2AD60973BF99E76
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:11 +0000
ROA not before:           Tue 05 Mar 2024 18:12:11 +0000
ROA not after:            Tue 04 Mar 2025 18:17:11 +0000
asID:                     27818
IP address blocks:        2803:3380:6000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e6:f8:7c:78:49:8f:64:a4:f0:a1:85:b2:ad:60:97:3b:f9:9e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:11 2024 GMT
            Not After : Mar  4 18:17:11 2025 GMT
        Subject: CN=F4A343E2504F141AF71213E8EBCBCEC247CA28C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:ee:83:90:1f:00:6d:e0:a8:ec:5c:90:c3:
                    38:ee:1d:55:93:6e:67:d9:9d:9e:54:55:33:de:ab:
                    39:1a:72:54:e9:bc:fe:b5:d7:ac:6b:17:c6:21:72:
                    63:11:f1:6f:36:68:88:aa:6f:fc:55:d0:fb:76:0f:
                    73:b5:07:de:da:a8:8d:05:a4:59:08:41:a7:17:83:
                    11:94:80:ab:ba:65:4c:8b:5b:4e:2c:23:1d:ac:a8:
                    ae:73:77:ea:79:2d:95:8f:68:b3:54:e4:1d:83:e1:
                    da:02:d6:a2:4d:af:da:29:1f:1a:2f:07:02:03:a2:
                    31:18:28:e5:00:b0:d7:bc:c5:16:94:6c:fb:e4:ce:
                    ce:2b:5e:08:17:c9:c0:74:6b:7b:1d:64:af:4a:95:
                    10:9e:1c:ee:b8:37:88:44:6b:80:10:25:ed:d7:67:
                    3c:68:ee:76:e4:5f:8b:e6:cd:31:63:46:06:b7:6f:
                    8b:2e:9a:0a:4f:91:b9:06:08:0a:29:69:fb:49:43:
                    0a:6f:00:0f:22:fb:20:2d:84:ba:ef:92:aa:70:91:
                    8b:07:b5:9a:41:de:b4:44:c4:7e:d8:51:7e:5a:ce:
                    04:6a:87:6e:4d:ad:da:c9:6c:a5:f0:44:1e:fd:49:
                    cc:bb:27:d3:07:87:fe:10:95:90:bd:1d:bf:04:e8:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A3:43:E2:50:4F:14:1A:F7:12:13:E8:EB:CB:CE:C2:47:CA:28:C2
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a363030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:d9:1a:e8:ad:10:34:7d:ec:b7:1b:f5:71:41:44:aa:a3:67:
         4a:4e:bd:f7:39:3e:e6:88:57:e5:79:f9:31:11:66:aa:18:36:
         e9:2e:e7:c6:08:30:33:c3:cd:23:25:c2:bf:92:65:35:38:cb:
         1e:f8:27:da:b4:b1:5d:a2:38:c1:78:98:18:b8:1e:e0:4c:b9:
         9a:6a:c2:e3:0e:e3:bd:5e:ba:f6:95:89:58:e9:09:dd:a0:80:
         ab:55:73:58:87:08:48:d6:c7:ec:3e:5d:b3:88:e9:b9:d9:0e:
         e5:cf:14:92:ee:93:a9:c7:aa:b2:67:d6:41:65:eb:55:3d:58:
         06:c9:47:74:e1:c8:e8:79:e5:c7:00:f3:ba:95:f6:62:58:26:
         38:06:74:51:95:39:0e:53:1b:a3:e9:a4:d7:d3:1a:83:ed:1f:
         cd:71:cc:cd:15:18:2a:38:13:66:de:60:03:c0:31:fe:8c:02:
         a0:8d:48:f4:06:80:7f:25:3f:cd:56:52:0a:22:0f:f1:91:51:
         07:2f:47:2b:e8:af:9a:67:81:9f:6b:1f:f0:58:20:99:4b:c4:
         a2:0a:59:f0:89:bb:d8:f8:bd:8c:f8:4e:f5:64:46:cf:c7:20:
         7f:22:a5:79:f6:1d:e7:6a:9e:f0:81:42:4e:9a:e3:72:1e:e4:
         c0:71:26:5f
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUJeb4fHhJj2Sk8KGFsq1glzv5nnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEREI0NjVGMDdFMEM0Q0Y4MjQ0RTNBMjYwNTE5NUI0
MUFEQTNCQjAeFw0yNDAzMDUxODEyMTFaFw0yNTAzMDQxODE3MTFaMDMxMTAvBgNV
BAMTKEY0QTM0M0UyNTA0RjE0MUFGNzEyMTNFOEVCQ0JDRUMyNDdDQTI4QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfre6DkB8AbeCo7FyQwzjuHVWT
bmfZnZ5UVTPeqzkaclTpvP6116xrF8YhcmMR8W82aIiqb/xV0Pt2D3O1B97aqI0F
pFkIQacXgxGUgKu6ZUyLW04sIx2sqK5zd+p5LZWPaLNU5B2D4doC1qJNr9opHxov
BwIDojEYKOUAsNe8xRaUbPvkzs4rXggXycB0a3sdZK9KlRCeHO64N4hEa4AQJe3X
Zzxo7nbkX4vmzTFjRga3b4sumgpPkbkGCAopaftJQwpvAA8i+yAthLrvkqpwkYsH
tZpB3rRExH7YUX5azgRqh25NrdrJbKXwRB79Scy7J9MHh/4QlZC9Hb8E6A/DAgMB
AAGjggLSMIICzjAdBgNVHQ4EFgQU9KND4lBPFBr3EhPo68vOwkfKKMIwHwYDVR0j
BBgwFoAUIN20ZfB+DEz4JE46JgUZW0Gto7swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTY2MzVGQTIxNjJENzMzQUU2NTYzMzkzRkEyMzM0MzYz
NzdCMERDNTRFMzJDRUEyODFDMzAxRjcxMzRGRkQ0LzAvMjBEREI0NjVGMDdFMEM0
Q0Y4MjQ0RTNBMjYwNTE5NUI0MUFEQTNCQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMEREQjQ2NUYwN0UwQzRDRjgy
NDRFM0EyNjA1MTk1QjQxQURBM0JCLmNlcjCBzwYIKwYBBQUHAQsEgcIwgb8wgbwG
CCsGAQUFBzALhoGvcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U2NjM1RkEyMTYyRDczM0FFNjU2MzM5M0ZBMjMzNDM2Mzc3QjBEQzU0
RTMyQ0VBMjgxQzMwMUY3MTM0RkZENC8wLzMyMzgzMDMzM2EzMzMzMzgzMDNhMzYz
MDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM3MzgzMTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYEKAMzgGAwDQYJKoZIhvcNAQELBQADggEBAELZGuitEDR97Lcb9XFBRKqjZ0pO
vfc5PuaIV+V5+TERZqoYNuku58YIMDPDzSMlwr+SZTU4yx74J9q0sV2iOMF4mBi4
HuBMuZpqwuMO471euvaViVjpCd2ggKtVc1iHCEjWx+w+XbOI6bnZDuXPFJLuk6nH
qrJn1kFl61U9WAbJR3ThyOh55ccA87qV9mJYJjgGdFGVOQ5TG6PppNfTGoPtH81x
zM0VGCo4E2beYAPAMf6MAqCNSPQGgH8lP81WUgoiD/GRUQcvRyvor5pngZ9rH/BY
IJlLxKIKWfCJu9j4vYz4TvVkRs/HIH8ipXn2HedqnvCBQk6a43Ie5MBxJl8=
-----END CERTIFICATE-----