Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EA939E628822BE854D6AD9CBFB008321B2586826BECF9767653F858568B7109/0/323830333a333236303a3a2f33322d3332203d3e20323637383734.roa
File:                     323830333a333236303a3a2f33322d3332203d3e20323637383734.roa (raw, json)
Hash identifier:          nGd9P/zvUCTyBtReZC350F4ARpJENtWTjf8o1C/R7o8=
Subject key identifier:   23:DA:B1:CA:62:86:C9:26:1B:B3:4C:B3:E3:7B:AC:B8:D1:85:18:07
Certificate issuer:       /CN=C97459DB1B7385B812E7431C896F0FCEC92EBE03
Certificate serial:       02518DD3BF8AC0F68664E62EAC40ED4705E2F2D1
Authority key identifier: C9:74:59:DB:1B:73:85:B8:12:E7:43:1C:89:6F:0F:CE:C9:2E:BE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C97459DB1B7385B812E7431C896F0FCEC92EBE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EA939E628822BE854D6AD9CBFB008321B2586826BECF9767653F858568B7109/0/323830333a333236303a3a2f33322d3332203d3e20323637383734.roa
Signing time:             Tue 05 Mar 2024 17:44:48 +0000
ROA not before:           Tue 05 Mar 2024 17:39:48 +0000
ROA not after:            Tue 04 Mar 2025 17:44:48 +0000
asID:                     267874
IP address blocks:        2803:3260::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:51:8d:d3:bf:8a:c0:f6:86:64:e6:2e:ac:40:ed:47:05:e2:f2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C97459DB1B7385B812E7431C896F0FCEC92EBE03
        Validity
            Not Before: Mar  5 17:39:48 2024 GMT
            Not After : Mar  4 17:44:48 2025 GMT
        Subject: CN=23DAB1CA6286C9261BB34CB3E37BACB8D1851807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:3c:7f:59:45:59:75:38:0e:5a:bd:32:1a:
                    51:be:65:eb:0d:50:db:50:68:38:a0:30:7f:22:b2:
                    b8:21:7c:1a:7e:6f:6b:86:1a:ab:a7:ac:95:09:fe:
                    7c:96:30:6b:77:a2:2f:75:a4:2b:df:f8:10:bd:4a:
                    7e:d1:55:81:87:17:fc:91:df:0a:9c:98:b0:e7:d3:
                    22:71:11:23:82:6c:71:46:ee:ec:59:6f:d1:8e:2d:
                    a2:40:4c:13:4a:8d:6a:b0:c3:dd:01:97:2f:b6:27:
                    99:61:43:5d:d3:1a:9a:d9:4d:70:1c:c7:15:5d:78:
                    fa:2f:9f:b7:b9:b8:46:c4:a2:f4:b4:27:54:54:52:
                    b8:df:45:97:ba:8f:01:b0:ce:38:72:08:e2:1c:7a:
                    cd:6a:0f:4f:e7:4b:f6:9a:e3:a3:c6:b7:b2:e8:37:
                    ec:22:0b:f3:7c:bd:3a:cc:9c:4e:69:84:5e:d7:9f:
                    8d:05:42:07:55:f9:6f:ff:46:5e:0e:1e:a2:71:c5:
                    1f:b3:e0:2b:2b:d7:97:2c:8a:ee:64:45:57:58:1d:
                    95:a2:59:e8:8a:c8:d6:70:67:b1:24:dc:76:fc:83:
                    df:42:65:a8:10:ad:05:8d:cc:53:3b:93:fb:d8:39:
                    c8:5e:50:5d:bb:b0:41:40:8f:f1:a2:79:99:6d:68:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DA:B1:CA:62:86:C9:26:1B:B3:4C:B3:E3:7B:AC:B8:D1:85:18:07
            X509v3 Authority Key Identifier:
                keyid:C9:74:59:DB:1B:73:85:B8:12:E7:43:1C:89:6F:0F:CE:C9:2E:BE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EA939E628822BE854D6AD9CBFB008321B2586826BECF9767653F858568B7109/0/C97459DB1B7385B812E7431C896F0FCEC92EBE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C97459DB1B7385B812E7431C896F0FCEC92EBE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EA939E628822BE854D6AD9CBFB008321B2586826BECF9767653F858568B7109/0/323830333a333236303a3a2f33322d3332203d3e20323637383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3260::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:05:f8:5c:29:0d:6f:d3:87:df:b2:c3:70:a2:4e:e8:04:14:
         bc:c8:81:dd:8b:35:11:fd:14:84:da:a9:7f:a2:0c:a7:c8:a1:
         35:9a:71:00:f8:10:02:82:54:a7:ee:c4:e7:d5:5f:59:90:74:
         5f:31:a1:63:d9:73:2e:9d:74:af:20:3a:88:fc:fd:5a:c6:14:
         8c:36:a4:9d:02:9c:6a:90:15:bc:d6:9a:f8:4f:ac:bf:a6:95:
         17:36:63:46:2b:d7:99:2e:e3:f9:61:bb:06:02:35:90:e7:74:
         6c:2a:50:b2:92:03:f2:e9:60:ef:ba:a9:f6:68:b4:d9:2e:f2:
         c2:fa:d6:bd:74:c3:54:4e:b3:a9:72:bf:ae:ce:83:e0:fe:ea:
         8f:2d:81:7c:d5:04:2a:ac:ba:b3:38:05:04:6e:02:88:7b:21:
         be:98:ea:b8:c5:83:9b:50:9d:7b:9d:01:ab:0d:d2:62:a5:47:
         db:fb:b0:6c:31:2f:f6:cb:02:f6:6b:6b:dd:ae:00:72:6c:3c:
         18:89:30:82:09:7a:03:c1:3a:36:c0:87:1e:61:6c:44:66:06:
         1d:71:0a:78:1b:65:87:6c:8d:cd:5c:53:c5:7e:a6:c9:56:d2:
         d4:9a:0a:18:e9:cb:4a:94:67:e0:f7:f5:72:de:b2:f4:72:99:
         7e:a1:1e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----