Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/323830333a333530303a3a2f33322d3438203d3e203532343332.roa
File:                     323830333a333530303a3a2f33322d3438203d3e203532343332.roa (raw, json)
Hash identifier:          2eFr42/tTx2H32TPmUEN6I8GhXTizUpF0oBT9H2R5Y0=
Subject key identifier:   99:57:0B:9A:D6:E9:C8:79:B6:0A:5C:F5:05:27:A5:2B:67:0C:93:F1
Certificate issuer:       /CN=C403FA78404641A71D95DA750617F0EEF3DD464B
Certificate serial:       5F414F5EDEE5AFBDDA130505D295E6BF4C43A959
Authority key identifier: C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/323830333a333530303a3a2f33322d3438203d3e203532343332.roa
Signing time:             Tue 05 Mar 2024 18:21:03 +0000
ROA not before:           Tue 05 Mar 2024 18:16:03 +0000
ROA not after:            Tue 04 Mar 2025 18:21:03 +0000
asID:                     52432
IP address blocks:        2803:3500::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:41:4f:5e:de:e5:af:bd:da:13:05:05:d2:95:e6:bf:4c:43:a9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C403FA78404641A71D95DA750617F0EEF3DD464B
        Validity
            Not Before: Mar  5 18:16:03 2024 GMT
            Not After : Mar  4 18:21:03 2025 GMT
        Subject: CN=99570B9AD6E9C879B60A5CF50527A52B670C93F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:58:41:99:d8:8a:13:0f:d4:76:1a:24:61:
                    53:95:3c:05:1d:f4:bb:9f:93:c0:f1:fe:0c:3b:4d:
                    c6:9f:d9:63:84:2f:4f:45:f8:5c:36:71:c0:3e:19:
                    a1:80:84:61:cb:f6:70:8d:05:f4:83:0c:91:02:51:
                    ab:db:79:44:50:95:03:5d:15:05:a9:65:ef:5f:54:
                    ae:2e:fc:01:fa:56:15:a5:29:57:70:20:6d:e7:bb:
                    e0:ba:55:3f:88:4b:79:62:a6:c3:a4:34:27:62:2b:
                    a7:3f:aa:d8:fe:51:4d:bd:5f:e5:01:3c:18:a0:85:
                    10:78:72:bc:09:81:bc:e3:09:3f:2e:38:2d:77:7b:
                    5d:bc:ff:97:79:b2:cc:a7:3e:fe:f7:fb:ad:3a:b0:
                    72:9a:11:bc:ec:5a:ef:fd:33:dd:f7:f5:bf:8d:3b:
                    b3:c1:68:cc:fb:94:3e:c2:13:5e:61:17:98:a5:d7:
                    f0:c5:57:39:3c:6c:18:55:36:84:8d:f7:b4:0b:75:
                    bf:e9:12:fa:4f:29:3e:0f:a1:ab:65:a3:bc:04:be:
                    5c:6a:21:5d:0f:d8:2a:55:13:ed:0c:fa:6d:84:bd:
                    2e:25:88:66:6b:5b:c4:72:cb:91:b9:24:2b:ce:27:
                    79:4c:b8:03:e8:01:b1:d7:a6:5d:e8:75:60:13:09:
                    fa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:57:0B:9A:D6:E9:C8:79:B6:0A:5C:F5:05:27:A5:2B:67:0C:93:F1
            X509v3 Authority Key Identifier:
                keyid:C4:03:FA:78:40:46:41:A7:1D:95:DA:75:06:17:F0:EE:F3:DD:46:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/C403FA78404641A71D95DA750617F0EEF3DD464B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C403FA78404641A71D95DA750617F0EEF3DD464B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8845FD2F70326969EBF4B2A372A240B5C13FB4949337A5F5DDBB41CBBD731B04/0/323830333a333530303a3a2f33322d3438203d3e203532343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3500::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:2d:28:f9:a5:af:c8:29:c5:ec:1f:14:03:32:a4:2b:4d:4c:
         ba:62:0c:be:ed:bd:cb:b7:c9:31:93:2d:b4:23:0b:c9:d7:bd:
         33:ab:23:01:26:b6:a6:d4:ab:67:8a:9d:3b:30:30:ce:68:59:
         9b:48:ab:58:28:84:7b:71:4a:90:d7:2c:21:98:10:b2:52:4a:
         64:c2:a2:d7:de:94:c0:95:16:7d:c7:db:db:19:89:d7:f8:3f:
         56:64:12:4f:c5:e2:99:65:8b:86:32:19:8e:88:33:b5:78:e6:
         4a:2d:12:ec:f0:19:2c:e0:27:d3:6e:52:4b:91:ae:fe:61:20:
         71:64:d8:68:37:af:08:72:30:d4:20:d7:7e:af:ee:51:f2:28:
         da:a6:94:22:a0:a7:aa:f1:a7:e7:3c:21:33:db:f1:ac:68:38:
         9d:d2:79:dd:c0:fe:bc:d3:3f:6a:2a:37:80:ff:59:c2:b4:c3:
         f9:48:17:9b:f0:1c:58:17:33:5f:ca:31:fc:4f:99:5b:90:91:
         01:1f:f1:2d:c8:d0:f3:65:e2:58:8d:9c:a7:1a:ec:66:6f:09:
         89:31:7a:95:5b:b0:5f:1b:c1:d4:cf:ec:da:9a:14:18:25:e7:
         11:1b:c5:81:31:d5:a4:ad:14:d7:d3:5d:23:95:69:a5:65:71:
         fc:d6:3b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----