Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/323830333a353831303a3a2f33322d3438203d3e203139313639.roa
File:                     323830333a353831303a3a2f33322d3438203d3e203139313639.roa (raw, json)
Hash identifier:          dD5iE9io71ZAvM+OQMSQ5/fHe6LhvHrBfOGZVaw6VqA=
Subject key identifier:   70:8A:5A:4E:44:4E:D2:92:49:1B:E7:95:AC:B9:E3:C5:EA:36:2F:B2
Certificate issuer:       /CN=13F664EFE791C2FAE7E4B151E394302E508408AF
Certificate serial:       647ECFC7D1AEE43A598C2BF4D5ED9166250662A7
Authority key identifier: 13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/323830333a353831303a3a2f33322d3438203d3e203139313639.roa
Signing time:             Tue 05 Mar 2024 18:11:03 +0000
ROA not before:           Tue 05 Mar 2024 18:06:03 +0000
ROA not after:            Tue 04 Mar 2025 18:11:03 +0000
asID:                     19169
IP address blocks:        2803:5810::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7e:cf:c7:d1:ae:e4:3a:59:8c:2b:f4:d5:ed:91:66:25:06:62:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F664EFE791C2FAE7E4B151E394302E508408AF
        Validity
            Not Before: Mar  5 18:06:03 2024 GMT
            Not After : Mar  4 18:11:03 2025 GMT
        Subject: CN=708A5A4E444ED292491BE795ACB9E3C5EA362FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:f7:2d:93:40:e5:fd:7c:f2:ff:9b:c1:a4:
                    6a:1a:b6:15:ce:d8:72:20:d7:45:77:60:f7:f8:d7:
                    60:e6:77:92:af:81:a7:b4:2e:35:db:9e:72:4b:32:
                    77:92:cf:c5:0e:eb:65:f8:a0:32:16:56:1a:7e:fa:
                    6c:51:4f:71:d6:1d:d4:fe:db:6b:e1:b4:17:6f:04:
                    31:ad:cd:4f:fe:cd:d8:e7:04:ee:13:24:75:cb:99:
                    14:3a:66:c1:c8:ba:0c:6f:fb:84:41:3e:e1:df:d4:
                    9e:85:3f:22:9c:a8:47:bf:22:9d:71:73:02:06:b1:
                    fb:56:e3:1f:88:79:85:2f:29:93:21:b8:34:8d:ad:
                    29:03:41:59:aa:95:0c:fc:0c:04:71:7e:b1:4f:c8:
                    1a:d7:f0:a8:c8:55:8b:ae:82:ca:4c:d5:ee:d8:ee:
                    31:a9:6c:27:22:2a:81:fb:c2:8c:90:d1:6d:7b:96:
                    1c:d7:39:75:cc:2e:42:18:59:3d:fc:bc:1a:83:a6:
                    70:65:cf:22:3b:00:c2:a8:e7:80:27:42:b7:3a:d2:
                    fc:2e:7d:16:b5:f3:18:19:9c:32:8e:ca:0f:c8:fe:
                    4f:68:b2:77:d0:d2:c7:65:b8:e0:18:6f:d8:a8:05:
                    bc:73:fc:10:d7:6e:92:46:5c:d5:7a:de:a5:7d:c0:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8A:5A:4E:44:4E:D2:92:49:1B:E7:95:AC:B9:E3:C5:EA:36:2F:B2
            X509v3 Authority Key Identifier:
                keyid:13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/323830333a353831303a3a2f33322d3438203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5810::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:5f:93:87:09:48:6d:39:55:42:9e:d8:7b:6b:ad:11:ca:ca:
         06:3c:c9:05:c9:58:9b:93:71:08:47:57:a5:ca:f5:3d:99:28:
         5c:83:06:f7:78:6d:44:29:2c:e8:3d:07:c3:d2:3a:22:5c:ce:
         41:c5:96:4b:90:db:e7:b8:24:c5:3f:6a:ca:47:5e:f7:ed:72:
         e5:4c:f4:80:ef:3c:9f:ce:b0:65:58:00:a4:0d:36:92:03:90:
         6e:14:27:69:58:4f:7e:41:63:0b:00:7b:92:be:c9:70:f4:37:
         dd:cf:73:4d:20:ab:f5:da:3b:45:e7:16:1b:60:77:71:1e:04:
         31:d2:e0:b0:10:38:d1:30:29:77:4d:08:df:6d:fe:45:af:30:
         ac:f9:ae:38:b6:70:ec:53:81:de:fb:0d:83:b6:55:c0:a3:64:
         30:62:66:b8:49:31:ba:4e:6a:ed:71:31:1d:91:f9:21:1b:ff:
         e5:75:12:55:0a:29:50:34:4a:92:0c:4d:e5:89:1a:55:4e:70:
         9e:7b:b7:c5:71:69:64:a1:9c:e8:45:f3:49:d4:a4:37:56:88:
         cb:19:6e:87:a2:fa:89:b6:09:3e:93:be:a3:96:5b:ba:55:cc:
         28:47:00:96:3c:55:e8:4b:ca:5d:7e:f2:8e:85:57:97:2f:89:
         dc:e1:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----