Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3530303a3a2f34302d3430203d3e20323733383538.roa
File:                     323830333a333535303a3530303a3a2f34302d3430203d3e20323733383538.roa (raw, json)
Hash identifier:          50/2W+d+Xzye63lDJoxMCnCcpcRIkRcDiJAeHhoIkLw=
Subject key identifier:   63:BB:4D:D0:CB:B6:D0:44:96:A7:A0:AD:E9:DE:5D:74:FF:EC:E8:C2
Certificate issuer:       /CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
Certificate serial:       3655704909DC178C17199800162E3569F4911DD3
Authority key identifier: 5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3530303a3a2f34302d3430203d3e20323733383538.roa
Signing time:             Thu 27 Jun 2024 03:50:00 +0000
ROA not before:           Thu 27 Jun 2024 03:45:00 +0000
ROA not after:            Thu 26 Jun 2025 03:50:00 +0000
asID:                     273858
IP address blocks:        2803:3550:500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:55:70:49:09:dc:17:8c:17:19:98:00:16:2e:35:69:f4:91:1d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C
        Validity
            Not Before: Jun 27 03:45:00 2024 GMT
            Not After : Jun 26 03:50:00 2025 GMT
        Subject: CN=63BB4DD0CBB6D04496A7A0ADE9DE5D74FFECE8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:da:35:46:8f:5e:38:16:e0:80:0d:25:a5:
                    d0:0a:9a:58:6e:8b:73:84:ea:47:21:56:49:a2:be:
                    64:e2:9f:22:2b:0e:29:84:4a:25:bd:92:23:b8:2f:
                    83:7e:5c:26:77:6d:99:9b:8d:a3:5d:77:37:45:d6:
                    cc:8b:b5:22:e9:6a:ba:6f:b8:f4:d5:8d:9c:2a:bd:
                    16:0c:1e:12:47:03:ac:84:b9:0e:6b:00:79:53:55:
                    cd:d6:63:fa:85:81:c9:20:14:e1:69:09:b0:93:7f:
                    2f:0c:b7:35:71:70:07:f2:b6:94:a7:6c:8f:ef:d9:
                    6f:24:36:e7:d9:0f:3f:e3:23:56:73:59:a4:c1:8f:
                    76:e0:e7:2b:ab:dd:9c:22:56:db:b7:85:df:0d:55:
                    18:83:e5:99:2c:be:88:ce:db:1a:1d:30:07:5b:5d:
                    58:12:ff:3b:37:91:3e:76:a1:90:ab:a4:78:6f:da:
                    25:62:ab:76:48:3e:93:f3:d8:a9:56:53:ac:5d:39:
                    69:ee:60:94:b1:6a:7b:a0:3c:b4:fe:5a:b3:c5:f3:
                    82:16:77:bb:53:de:bc:58:bf:7b:9b:84:0b:02:eb:
                    48:c2:67:aa:af:73:45:cd:43:90:a4:ec:9c:14:ef:
                    ed:88:09:51:32:63:a4:6d:a4:e9:c0:a6:24:17:c0:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BB:4D:D0:CB:B6:D0:44:96:A7:A0:AD:E9:DE:5D:74:FF:EC:E8:C2
            X509v3 Authority Key Identifier:
                keyid:5E:C3:FC:6F:A5:D9:D0:34:3A:B9:37:E3:0A:4D:6E:DA:A5:C8:7D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EC3FC6FA5D9D0343AB937E30A4D6EDAA5C87D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A132E6697C4E8AF8F3FE65A97E190959707B0C0EB79900AD2C8CBD615BF4B66/0/323830333a333535303a3530303a3a2f34302d3430203d3e20323733383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3550:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:98:d3:9b:19:e0:73:a8:47:1a:42:74:16:37:4e:80:b6:f5:
         60:6c:27:d1:82:15:22:81:46:7c:c7:4c:fe:c8:88:fa:5d:69:
         72:43:c7:0e:ef:2b:98:43:4e:d7:e9:d9:39:e3:b9:4f:57:22:
         c5:65:84:16:0d:3c:c3:4b:3a:1e:98:a8:c8:eb:36:59:03:61:
         8f:f7:c4:d6:97:2c:6d:57:03:35:f3:48:a6:b8:83:e9:50:10:
         52:b7:4c:00:6c:dc:26:64:00:13:67:ad:87:61:41:8e:22:5a:
         6e:ce:45:4b:67:fd:af:92:0f:68:26:eb:58:58:11:4a:b8:e7:
         22:0d:9c:77:82:a2:87:f9:3f:01:47:44:4c:dc:89:2d:28:f2:
         7f:40:05:92:6d:9c:63:26:ec:9f:da:c7:4e:39:04:71:5e:dc:
         64:89:92:00:1c:d9:db:3a:bc:24:23:65:e9:da:d8:3b:63:82:
         49:cc:03:3a:38:d1:f4:9e:14:91:5c:23:5a:b0:71:d9:ef:f5:
         64:6c:bb:1d:a5:c6:db:b5:5b:c5:d3:86:2f:c9:94:16:1c:d7:
         0c:83:84:87:34:ad:07:de:cc:10:23:46:d1:93:fb:4b:3f:7d:
         0f:7d:5c:09:ef:9d:84:10:95:30:5c:25:da:fa:b4:1c:82:4b:
         88:d9:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----