Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/323830333a383263303a3a2f33322d3634203d3e20323634383332.roa
File:                     323830333a383263303a3a2f33322d3634203d3e20323634383332.roa (raw, json)
Hash identifier:          dlfQJg9ty30pb7mvQIhZC82aJrW3j18ce57VYvVueSg=
Subject key identifier:   35:CA:52:E1:D1:0D:30:97:7D:FD:53:E0:2F:E4:64:E9:E1:B1:C2:B1
Certificate issuer:       /CN=C0A959C99718A77FC3BADB1D875B782D01705927
Certificate serial:       55C26937F759EE22EEC4F3DEF572147461D038E1
Authority key identifier: C0:A9:59:C9:97:18:A7:7F:C3:BA:DB:1D:87:5B:78:2D:01:70:59:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0A959C99718A77FC3BADB1D875B782D01705927.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/323830333a383263303a3a2f33322d3634203d3e20323634383332.roa
Signing time:             Tue 05 Mar 2024 18:08:45 +0000
ROA not before:           Tue 05 Mar 2024 18:03:45 +0000
ROA not after:            Tue 04 Mar 2025 18:08:45 +0000
asID:                     264832
IP address blocks:        2803:82c0::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c2:69:37:f7:59:ee:22:ee:c4:f3:de:f5:72:14:74:61:d0:38:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0A959C99718A77FC3BADB1D875B782D01705927
        Validity
            Not Before: Mar  5 18:03:45 2024 GMT
            Not After : Mar  4 18:08:45 2025 GMT
        Subject: CN=35CA52E1D10D30977DFD53E02FE464E9E1B1C2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:f3:df:2b:1a:53:c7:9e:ee:f4:64:ff:eb:
                    6b:d2:e3:ef:d5:bd:af:a9:2a:bf:6d:a1:4a:1e:18:
                    21:6c:e5:4c:0f:63:a7:63:92:c9:ae:25:3a:28:ad:
                    c7:80:2c:8e:e0:31:d1:6f:dc:b5:58:3f:92:96:26:
                    9f:5d:89:8d:55:05:ad:09:0e:31:6b:e3:fd:50:72:
                    1a:05:58:94:50:ab:85:62:89:f9:d7:37:19:1a:fe:
                    b0:76:7b:fa:5b:56:42:ff:70:7d:07:61:1d:4e:90:
                    8f:bb:b9:72:54:51:2e:95:51:c5:b2:24:b4:28:93:
                    d8:a5:1b:62:4b:62:15:b0:68:c5:6e:ff:f2:11:34:
                    dd:e5:db:27:25:f7:1d:2e:11:8b:bb:d9:96:75:d1:
                    91:90:50:9a:10:71:5a:06:23:fe:d6:fd:a6:b6:7a:
                    da:ac:1d:68:9a:20:5e:6c:2a:52:0e:b8:51:a6:7d:
                    88:3f:9c:fa:90:a3:b2:c0:ab:33:12:36:ae:31:3f:
                    59:2a:27:20:5d:6c:62:05:58:61:a8:78:5b:83:a0:
                    10:71:0a:7c:1f:20:ec:81:61:bc:f4:23:18:70:64:
                    19:dc:43:0e:ba:e9:25:f2:10:45:78:c5:39:27:d8:
                    80:fe:85:ba:33:76:40:8a:8c:36:27:5f:5b:07:69:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CA:52:E1:D1:0D:30:97:7D:FD:53:E0:2F:E4:64:E9:E1:B1:C2:B1
            X509v3 Authority Key Identifier:
                keyid:C0:A9:59:C9:97:18:A7:7F:C3:BA:DB:1D:87:5B:78:2D:01:70:59:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/C0A959C99718A77FC3BADB1D875B782D01705927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0A959C99718A77FC3BADB1D875B782D01705927.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/323830333a383263303a3a2f33322d3634203d3e20323634383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:82c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:47:07:de:1f:67:41:f4:28:1d:ff:21:4c:fe:6d:ec:ff:
         be:c2:f9:b6:ec:84:81:6a:af:af:ec:25:05:4e:90:7c:7a:e8:
         60:cb:7d:6b:0d:91:47:07:ac:43:26:61:c3:63:75:e2:3e:6b:
         71:3a:b4:21:fa:99:17:bc:5d:0c:cb:5d:e4:80:bd:62:5e:fa:
         84:54:70:7b:0f:d5:ee:d2:5e:25:0a:8e:a8:03:91:05:d1:66:
         84:b7:9a:5d:e2:fe:24:80:e3:7c:68:d5:97:b1:31:00:af:ea:
         39:98:b7:8a:9c:6d:ca:84:4c:64:21:c1:3b:b3:f2:0a:80:77:
         b0:ab:7c:ed:ae:22:1d:fc:34:4a:ef:38:c0:dd:4b:4b:0f:af:
         77:64:ea:98:69:7b:de:16:ef:1b:22:78:ec:e8:56:a9:3b:ee:
         a3:f8:55:21:09:61:3f:69:9b:11:98:47:ec:63:f1:c5:6a:8d:
         9a:ff:33:22:df:2e:fc:11:49:87:05:f3:58:10:c3:86:b9:19:
         45:d7:d6:65:1b:d3:0f:9a:93:79:11:f7:f0:78:5c:f7:42:16:
         b7:56:6e:1e:16:16:aa:70:95:bc:82:03:65:2e:6f:8c:42:f9:
         58:ab:d9:cc:8e:4c:47:a6:06:93:c0:2c:98:f2:8b:68:eb:d7:
         c2:50:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----