Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/323830313a3138363a3a2f34342d3434203d3e203237393531.roa
File:                     323830313a3138363a3a2f34342d3434203d3e203237393531.roa (raw, json)
Hash identifier:          nzW4ZPrwNaWnG4TS5Av6tg7x1sttot0iNympnk69/GA=
Subject key identifier:   D4:2E:20:8E:E4:71:86:09:F0:CA:36:50:F5:63:94:53:22:A0:00:96
Certificate issuer:       /CN=D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466
Certificate serial:       02027BCB183CCC636AE8EA4BF5F7BD12F8D8C517
Authority key identifier: D0:9A:0E:1E:A6:05:B7:A8:EA:80:B5:B3:9D:56:BD:8E:02:A0:A4:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/323830313a3138363a3a2f34342d3434203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 17:57:43 +0000
ROA not before:           Tue 05 Mar 2024 17:52:43 +0000
ROA not after:            Tue 04 Mar 2025 17:57:43 +0000
asID:                     27951
IP address blocks:        2801:186::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:02:7b:cb:18:3c:cc:63:6a:e8:ea:4b:f5:f7:bd:12:f8:d8:c5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466
        Validity
            Not Before: Mar  5 17:52:43 2024 GMT
            Not After : Mar  4 17:57:43 2025 GMT
        Subject: CN=D42E208EE4718609F0CA3650F563945322A00096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:b9:16:bf:d9:62:8d:9c:0f:1e:38:6d:84:
                    ff:d6:51:dc:dc:e7:71:dd:01:47:84:1b:8b:05:ac:
                    b0:08:bd:f9:09:1e:4b:f1:c5:4a:e1:56:50:40:e5:
                    26:d3:87:83:6c:76:cf:7b:14:1f:10:86:0a:91:2f:
                    34:46:05:b5:11:08:7f:2c:59:fe:1c:dc:48:b3:c3:
                    bc:3e:73:85:e0:69:f1:7f:16:ac:95:d5:71:39:a8:
                    e8:60:7c:ab:1f:a9:43:32:a1:20:c2:f6:e6:26:11:
                    a1:53:36:7d:74:23:ad:5b:df:de:ff:ae:09:1c:8d:
                    23:de:1e:d3:78:2f:e8:55:a1:f8:c2:48:74:b0:71:
                    c2:07:77:c5:5c:93:6c:9f:49:19:54:68:d9:f5:c4:
                    73:c4:fa:92:63:d4:74:43:6e:6a:b2:72:2f:7e:65:
                    9b:49:ed:34:01:c4:4c:81:22:64:03:11:97:b2:b5:
                    2a:a1:35:d1:3c:c4:59:52:ac:a4:cc:33:b3:84:86:
                    b4:24:5e:64:37:4a:18:5e:36:65:1b:66:5c:7b:34:
                    b9:c6:ec:92:2f:5a:50:cd:57:b2:a2:9f:54:04:52:
                    5a:e5:5c:d9:97:d7:05:91:ea:16:51:09:77:74:c4:
                    11:18:b1:d1:4b:20:58:3e:6e:f8:8f:82:8a:ba:ab:
                    5d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2E:20:8E:E4:71:86:09:F0:CA:36:50:F5:63:94:53:22:A0:00:96
            X509v3 Authority Key Identifier:
                keyid:D0:9A:0E:1E:A6:05:B7:A8:EA:80:B5:B3:9D:56:BD:8E:02:A0:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09A0E1EA605B7A8EA80B5B39D56BD8E02A0A466.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DFE756F5760F3EF1FE3613EC028AAA91EBD4E244D2B2676686CEDE84EF20DD5/0/323830313a3138363a3a2f34342d3434203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:186::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:d5:58:04:cc:bf:62:cd:b6:d6:cd:1c:42:a1:df:00:a4:bd:
         0e:40:a2:d9:ed:6f:ae:97:57:c5:2e:30:f2:e6:bd:37:73:76:
         18:ba:04:72:08:83:45:48:4b:11:c8:34:ec:99:f4:70:49:82:
         81:5e:bd:25:75:2d:b7:11:51:32:65:a7:48:3b:26:a8:b3:10:
         e7:0b:10:51:34:f3:00:f7:88:f5:a0:04:fa:58:27:ac:25:18:
         20:fc:45:85:af:07:fc:22:d0:c1:1e:cb:fe:90:d3:a5:89:32:
         cb:3f:9b:3d:7f:3b:c1:48:0c:15:9b:30:cc:ec:cf:e4:a9:21:
         ed:80:53:1d:a5:2e:07:40:52:6d:be:c7:95:7f:35:08:89:29:
         f7:94:7c:b0:e7:fc:d9:0d:e1:6d:c9:4f:f4:7f:48:56:9a:78:
         d4:66:1f:7d:01:62:42:a8:61:04:b2:a1:24:ce:3e:4a:53:76:
         47:4e:c2:5f:1f:9f:da:01:7a:ff:13:eb:ed:03:47:2e:f1:94:
         a5:8d:8b:43:ac:fe:66:8a:83:b3:1a:8f:54:92:7d:63:c3:67:
         eb:15:00:04:f8:60:a7:8c:6f:13:38:af:19:50:57:96:54:bc:
         ae:38:6d:62:71:12:b9:cb:47:0f:1f:0b:53:d7:94:fd:fd:0a:
         e6:95:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----