Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a613030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a613030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          guvEyWF/mwccBu1c4j3g7C0sgVzOzSNBioIHGzuUfsw=
Subject key identifier:   18:E9:56:40:66:68:58:CA:DA:BD:F9:93:53:AC:6E:40:03:0E:49:FF
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       05A0F752375162F58749AB1895F05BD82F090566
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a613030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 05 Mar 2024 18:17:11 +0000
ROA not before:           Tue 05 Mar 2024 18:12:11 +0000
ROA not after:            Tue 04 Mar 2025 18:17:11 +0000
asID:                     27818
IP address blocks:        2803:3380:a000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a0:f7:52:37:51:62:f5:87:49:ab:18:95:f0:5b:d8:2f:09:05:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Mar  5 18:12:11 2024 GMT
            Not After : Mar  4 18:17:11 2025 GMT
        Subject: CN=18E95640666858CADABDF99353AC6E40030E49FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:b8:be:44:6b:58:67:4f:cd:0a:9a:74:1f:
                    cf:91:2d:3a:20:79:6a:b4:6d:cb:36:a8:37:55:60:
                    64:da:ee:6b:90:7a:01:70:41:2d:fa:c9:ee:32:f3:
                    4a:a4:1a:cc:b2:7b:ca:98:84:06:59:f4:40:9f:e8:
                    a3:82:e4:16:9a:30:93:60:ac:a6:0f:da:b7:4d:70:
                    85:c0:6a:e8:15:8d:4e:e5:a5:3b:18:05:75:29:15:
                    16:cb:9a:70:7f:2c:00:41:b9:50:43:fe:02:fd:17:
                    09:a0:a5:86:1b:46:af:54:79:3f:75:53:fb:f2:3d:
                    c0:2b:82:84:82:9c:82:3d:e9:60:57:1a:69:34:b3:
                    9e:0e:16:91:1b:6e:a2:1b:8d:79:d8:a2:48:2c:b4:
                    d9:44:1b:51:55:ea:62:e5:20:2b:11:6e:a8:e5:7f:
                    d2:55:2f:67:7b:66:2d:d1:54:62:07:0a:2d:a0:d0:
                    3f:f6:69:2b:d7:e1:86:4c:fd:62:f1:de:1c:07:68:
                    49:ea:d7:b4:da:b3:c4:9f:7c:4b:81:e2:0a:e0:ce:
                    b7:7d:e3:ee:68:87:27:7c:9c:0f:a4:99:e8:32:39:
                    d4:5b:32:56:82:01:89:8b:fd:eb:b3:0a:e7:9c:27:
                    f5:a1:4a:89:f4:5d:c6:71:f2:0d:87:5e:2d:ec:52:
                    be:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:56:40:66:68:58:CA:DA:BD:F9:93:53:AC:6E:40:03:0E:49:FF
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a613030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:14:a0:ac:3c:71:fe:0f:d6:ca:f6:15:af:b8:e5:34:3a:a9:
         f2:7c:10:06:af:35:5b:57:bc:d3:9d:21:dc:5b:82:be:f4:87:
         99:b9:71:28:72:05:2c:bd:31:1a:68:4e:91:4b:95:12:67:90:
         31:10:e0:4e:1d:65:7b:4e:23:d2:86:e4:aa:6e:3c:ef:c8:e5:
         1f:d1:62:d0:15:28:83:e8:36:2e:8a:b6:67:8e:5f:11:4a:93:
         15:a8:ac:27:4d:25:89:5d:23:9c:08:3c:59:92:4d:bb:d1:6e:
         72:a3:4e:7b:03:c6:19:25:ce:10:bc:47:ce:bd:88:e7:8f:e3:
         0b:fe:df:6f:05:71:c1:6e:e3:93:7a:c1:4f:ba:8e:d6:09:d1:
         14:32:ba:4d:07:95:40:a4:6f:61:f9:d5:71:6c:a2:f0:45:79:
         cd:4a:95:00:3a:13:b6:81:1b:d9:91:6e:eb:bb:ba:d4:4f:f3:
         1d:c1:48:6e:e7:40:3b:08:90:a0:22:e1:af:bb:6d:6d:15:38:
         b2:e6:a0:6f:fe:c6:15:c3:86:70:dd:a4:07:22:64:2a:9f:18:
         10:d0:9a:22:ae:29:33:66:af:49:ed:96:33:71:08:24:6e:ef:
         f3:9c:0b:44:1c:78:59:89:17:23:bb:55:0a:07:70:f7:b6:10:
         99:43:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----