Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/323830333a353831303a3a2f33322d3438203d3e203237393437.roa
File:                     323830333a353831303a3a2f33322d3438203d3e203237393437.roa (raw, json)
Hash identifier:          METwk9Tm7ArejEkAHygjGwXvpHHcKscPAT1FaCxBiC4=
Subject key identifier:   36:85:2D:3B:4F:E7:1C:6D:97:D2:3D:7A:F9:63:C2:FB:A8:07:3F:8B
Certificate issuer:       /CN=13F664EFE791C2FAE7E4B151E394302E508408AF
Certificate serial:       06668E91663E71AE387140A9C9DBC3ACB6710E68
Authority key identifier: 13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/323830333a353831303a3a2f33322d3438203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:11:04 +0000
ROA not before:           Tue 05 Mar 2024 18:06:04 +0000
ROA not after:            Tue 04 Mar 2025 18:11:04 +0000
asID:                     27947
IP address blocks:        2803:5810::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:66:8e:91:66:3e:71:ae:38:71:40:a9:c9:db:c3:ac:b6:71:0e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13F664EFE791C2FAE7E4B151E394302E508408AF
        Validity
            Not Before: Mar  5 18:06:04 2024 GMT
            Not After : Mar  4 18:11:04 2025 GMT
        Subject: CN=36852D3B4FE71C6D97D23D7AF963C2FBA8073F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:cd:7a:80:d4:1e:45:bb:39:3d:ed:41:29:
                    f4:cc:06:59:7f:30:bd:e2:cb:0c:dc:c2:35:03:72:
                    e0:ec:a6:c1:32:50:9d:88:30:2d:52:c3:5b:2e:43:
                    2e:6a:40:86:89:cf:8d:78:1c:1f:71:5a:07:bd:5f:
                    3c:a2:46:b9:02:d4:ae:fa:b0:a7:50:4f:2a:94:ef:
                    b3:e6:27:1f:f9:53:c3:da:61:6e:66:fb:bf:60:36:
                    73:77:a6:45:ce:94:ca:24:5a:9e:01:79:40:38:84:
                    e5:4b:8f:f7:1a:2a:07:a8:57:8a:60:ee:0f:90:15:
                    99:94:e0:ec:38:36:98:8b:14:6b:fa:48:c5:37:77:
                    e7:d5:37:33:ac:cd:cc:4d:67:22:18:10:09:29:05:
                    19:f9:41:c2:3e:74:83:51:2d:ad:d2:ca:e0:a7:78:
                    85:18:47:88:0c:e2:3f:41:97:1c:3a:9e:8b:d5:38:
                    81:ed:ee:1c:ad:bc:19:58:0a:ee:bc:f6:bd:3e:af:
                    29:64:45:5d:16:f3:73:04:09:44:39:42:c7:01:16:
                    63:fe:3d:9a:4f:cc:22:3a:25:d6:7b:0a:7e:a8:eb:
                    72:a7:1d:2f:31:21:8f:0f:8d:c7:e3:36:1e:ad:47:
                    2b:79:20:9d:a6:55:b1:b6:c0:f3:99:d9:d9:be:d7:
                    61:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:85:2D:3B:4F:E7:1C:6D:97:D2:3D:7A:F9:63:C2:FB:A8:07:3F:8B
            X509v3 Authority Key Identifier:
                keyid:13:F6:64:EF:E7:91:C2:FA:E7:E4:B1:51:E3:94:30:2E:50:84:08:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/13F664EFE791C2FAE7E4B151E394302E508408AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13F664EFE791C2FAE7E4B151E394302E508408AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/849566C79F323F01399D1376D62003D03DEA34B0BD6A2FD5CBA74393F0E9B5D6/0/323830333a353831303a3a2f33322d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5810::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:b5:79:63:d8:89:a4:72:e0:08:6a:ef:51:16:93:8a:f5:09:
         b6:9d:38:ec:e6:5a:ab:9d:0a:f3:d1:bc:f7:17:43:69:fa:c4:
         55:1a:13:87:b9:d7:8a:47:fa:33:06:85:0f:1c:0a:b0:3d:bc:
         ec:43:ce:88:8c:64:79:45:ef:b1:5f:61:5a:18:5a:8f:cd:b5:
         2a:6a:62:bf:dd:6b:fa:8a:ca:da:e5:4f:28:8e:23:2f:5b:41:
         0b:58:36:c1:87:d3:ea:93:40:ca:81:e6:06:5d:24:57:ee:36:
         41:5c:4e:8c:27:c2:59:4f:b5:ee:29:19:e2:20:cc:14:5d:73:
         53:f4:54:00:b5:1a:07:eb:6c:1e:56:9a:94:55:86:27:bd:87:
         91:ec:41:8a:55:52:54:e8:8f:64:e3:74:9a:bc:da:53:cf:24:
         dd:d8:99:d6:63:3c:96:53:a9:30:59:84:e0:c2:8c:a8:e6:45:
         55:6f:c3:34:80:38:4d:6f:05:d6:28:59:8c:d5:78:e5:5c:cf:
         4a:4a:7b:c8:2b:c5:bb:ee:28:f9:0e:28:44:05:fb:f9:de:4c:
         20:23:d0:a2:4d:90:76:0b:0d:36:84:36:67:48:1e:98:96:51:
         d9:63:c2:ea:95:25:0f:2b:a3:cb:47:43:2e:af:f6:3e:f9:09:
         74:cf:de:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----