Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/323830303a6233303a3a2f33312d3334203d3e203237373430.roa
File:                     323830303a6233303a3a2f33312d3334203d3e203237373430.roa (raw, json)
Hash identifier:          yqO83Sa4a/wmU4+J+5e7f5WWCyvRbGgeCxG2KKJ7tOk=
Subject key identifier:   AF:93:74:92:45:2A:F9:0A:42:48:D0:72:C2:79:C4:05:A0:8C:FA:1D
Certificate issuer:       /CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1
Certificate serial:       10EBE81DE97BDFB3E549EEDCA9E8980865CCA6BE
Authority key identifier: C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/323830303a6233303a3a2f33312d3334203d3e203237373430.roa
Signing time:             Tue 05 Mar 2024 18:09:21 +0000
ROA not before:           Tue 05 Mar 2024 18:04:21 +0000
ROA not after:            Tue 04 Mar 2025 18:09:21 +0000
asID:                     27740
IP address blocks:        2800:b30::/31 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:eb:e8:1d:e9:7b:df:b3:e5:49:ee:dc:a9:e8:98:08:65:cc:a6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1
        Validity
            Not Before: Mar  5 18:04:21 2024 GMT
            Not After : Mar  4 18:09:21 2025 GMT
        Subject: CN=AF937492452AF90A4248D072C279C405A08CFA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:ee:ea:81:16:d2:e7:6b:a8:50:50:80:ae:
                    5c:a5:f5:04:15:e4:5b:2c:8b:74:ae:8c:dd:de:15:
                    27:5a:0e:bd:16:04:a2:5a:5f:45:e2:5a:91:33:f3:
                    57:08:d8:df:21:1e:8a:4c:6d:53:f1:06:e5:a4:b5:
                    d1:ce:13:54:61:c8:60:37:d2:43:5e:9f:bc:f2:c8:
                    64:61:f9:5b:af:86:c0:84:29:3f:93:22:0f:c6:31:
                    0d:e6:36:ff:82:a6:ab:d8:1c:93:5c:7d:a8:f3:86:
                    c3:35:b7:bb:b5:b0:a9:83:da:b2:0c:27:7f:e8:d9:
                    3f:c7:63:79:5b:b8:eb:55:1f:ea:ba:a7:01:20:cc:
                    0d:38:29:ce:6e:11:38:9a:bf:f4:4b:99:f8:1c:91:
                    28:2b:26:c6:32:a7:cb:c1:a6:a5:6a:78:70:58:67:
                    1f:60:1a:33:9a:7e:2b:03:cf:ae:91:42:6f:aa:8b:
                    dd:5d:e3:d6:87:f4:2f:87:9f:aa:38:87:3a:70:17:
                    26:37:55:3d:cb:a5:35:d0:66:7a:fa:59:c7:17:6c:
                    a2:a5:c1:3c:6a:59:46:6a:e8:93:a9:66:b2:51:92:
                    3b:46:bb:1f:56:6c:ec:78:4c:d9:a0:37:d4:a4:f4:
                    57:11:5f:61:cb:9f:28:13:99:5f:7b:3b:d9:63:34:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:93:74:92:45:2A:F9:0A:42:48:D0:72:C2:79:C4:05:A0:8C:FA:1D
            X509v3 Authority Key Identifier:
                keyid:C2:0B:1C:E4:6D:24:F9:B4:B4:1A:A6:CD:DD:9E:B9:6E:8B:23:C2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C20B1CE46D24F9B4B41AA6CDDD9EB96E8B23C2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC0B589F850E684378BA6014D00CE1F1D73964753ECC02ACC3FB899CE3645A3/0/323830303a6233303a3a2f33312d3334203d3e203237373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b30::/31

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:e9:1a:bb:ff:8c:95:de:14:01:e6:26:22:50:4f:34:49:
         c0:ef:af:6d:65:e7:4a:e6:49:05:aa:18:c6:61:12:02:82:4f:
         4a:0f:2e:e2:dd:d0:a0:55:90:cb:60:44:e3:f0:78:04:b9:3c:
         01:6c:ac:4b:8a:1d:a4:fd:fe:67:69:46:19:cc:61:7b:ae:2c:
         5b:ce:93:a8:f7:96:5b:3e:ca:9a:6c:b0:ce:fe:0b:a4:f8:46:
         70:f9:84:10:64:57:bb:0b:40:c9:c8:9f:a9:c1:05:46:1b:52:
         e5:0b:24:7b:20:4a:52:32:2b:22:18:61:fb:d8:79:95:a8:2c:
         12:d4:5c:f3:44:22:95:a4:fc:37:70:de:28:3c:32:82:7b:26:
         ce:1d:9e:22:40:de:f7:d0:c4:14:36:ce:23:8d:20:33:0f:c0:
         b6:fe:79:67:0b:5b:25:fa:d7:8f:cd:f3:97:0f:f3:28:e5:34:
         c6:22:ea:98:7b:99:c8:95:18:0a:22:9d:a3:23:a1:c3:ec:ee:
         35:72:44:e3:10:1d:2c:bc:f9:86:ec:d1:b4:a2:ca:b1:7c:7d:
         3d:b4:a5:c5:17:26:70:3a:a7:3a:7a:f5:de:be:68:5e:15:34:
         31:6e:83:4c:4e:8d:de:da:ef:34:29:30:8a:f4:a7:9c:07:d0:
         ec:f2:3a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----