Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/323830333a383864303a3a2f33322d3438203d3e20323733393833.roa
File:                     323830333a383864303a3a2f33322d3438203d3e20323733393833.roa (raw, json)
Hash identifier:          MlxqKMcFV0MZ2rbyBgGZFNWbRn5DJP2RqGo9CVkU+QM=
Subject key identifier:   89:CC:EA:E6:AE:30:7C:34:24:A9:F2:83:61:F3:9B:65:39:5D:B5:FB
Certificate issuer:       /CN=D13DA981D2AB4A09FB017D899B24125D3FD57AF2
Certificate serial:       7662B60C47224D6E1F73D2FCEFCC6BD32DA52F84
Authority key identifier: D1:3D:A9:81:D2:AB:4A:09:FB:01:7D:89:9B:24:12:5D:3F:D5:7A:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/323830333a383864303a3a2f33322d3438203d3e20323733393833.roa
Signing time:             Thu 26 Dec 2024 16:00:00 +0000
ROA not before:           Thu 26 Dec 2024 15:55:00 +0000
ROA not after:            Thu 25 Dec 2025 16:00:00 +0000
asID:                     273983
IP address blocks:        2803:88d0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:62:b6:0c:47:22:4d:6e:1f:73:d2:fc:ef:cc:6b:d3:2d:a5:2f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D13DA981D2AB4A09FB017D899B24125D3FD57AF2
        Validity
            Not Before: Dec 26 15:55:00 2024 GMT
            Not After : Dec 25 16:00:00 2025 GMT
        Subject: CN=89CCEAE6AE307C3424A9F28361F39B65395DB5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:50:ae:c0:24:53:85:3f:48:0d:27:43:e2:
                    17:6b:62:c2:ff:2f:a7:e5:31:59:b3:8a:c8:fc:cf:
                    92:74:6f:56:3d:50:d6:7b:09:9e:62:74:ee:f6:f5:
                    df:65:07:72:e2:94:6f:3b:8a:5b:38:1b:cb:cb:98:
                    d3:25:52:21:b0:eb:39:c1:47:4e:22:9d:fe:f1:5b:
                    af:6a:d1:4a:c8:b0:02:4d:a0:c3:2f:f5:ea:b1:8b:
                    88:e4:77:0c:22:10:3c:ba:26:f4:80:68:a6:9a:59:
                    bf:82:1a:58:8f:e1:e1:65:2d:0b:86:8d:e4:2c:de:
                    e6:2f:51:40:6b:e9:e6:88:af:b0:3f:9b:30:23:e0:
                    fd:4c:9b:63:17:3c:86:24:94:80:8d:82:73:2a:7f:
                    99:ce:52:27:a5:dc:7e:e2:2b:7b:a2:03:b3:73:38:
                    8e:7b:92:1e:ee:9a:3c:58:bc:f8:80:32:1d:f9:75:
                    93:a7:d3:1a:a3:af:7d:8e:76:c2:76:4a:a9:90:06:
                    33:19:65:0b:e1:6b:a1:d2:44:84:38:61:c9:0d:35:
                    33:22:ab:9f:9e:61:a9:6e:32:f7:c1:9d:9c:02:74:
                    5a:37:3b:e6:cf:df:86:4a:78:e5:99:00:a5:bd:0c:
                    fa:39:07:fb:0f:a9:5b:fd:2d:8a:eb:40:ae:31:6a:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CC:EA:E6:AE:30:7C:34:24:A9:F2:83:61:F3:9B:65:39:5D:B5:FB
            X509v3 Authority Key Identifier:
                keyid:D1:3D:A9:81:D2:AB:4A:09:FB:01:7D:89:9B:24:12:5D:3F:D5:7A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D13DA981D2AB4A09FB017D899B24125D3FD57AF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/939692FCBA2CBFEC64CB9594463B43E1D89DE4C453690BA02D1AFF801AB84162/0/323830333a383864303a3a2f33322d3438203d3e20323733393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:88d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:53:ec:d7:5d:fe:a0:c5:5b:f2:79:0e:17:64:57:a3:29:ad:
         e6:bc:7e:f8:65:35:eb:e5:d4:a2:2b:a0:86:21:d6:75:86:c6:
         1b:73:64:c0:6f:cc:ed:aa:34:4e:6d:4e:e8:a0:61:0a:f2:48:
         f5:81:d0:9e:4d:de:84:e4:f1:f0:41:08:5a:a0:2b:02:76:91:
         e8:9a:84:90:a2:dc:9d:d0:da:67:3e:03:16:a7:0f:77:c2:1b:
         48:82:03:4d:e2:db:23:34:22:74:78:6e:9b:4a:cd:dd:40:68:
         3b:36:79:33:80:f9:1e:d0:6a:e2:7e:1c:a9:13:6e:57:75:c5:
         e7:ad:87:bf:31:1b:0a:3a:f4:35:54:47:08:bd:ea:d4:40:61:
         0f:84:08:c0:4b:c0:ba:30:9b:66:1b:cb:88:33:d4:fc:ef:84:
         f2:7d:c2:ab:97:46:aa:ee:7e:2d:49:b4:00:ba:8f:53:6a:ad:
         0e:f9:9f:43:b4:ea:d3:ba:d5:26:3a:b5:1a:24:aa:8a:88:34:
         52:dc:f1:ad:bd:b2:6c:1e:76:41:d7:b9:90:57:5b:08:92:de:
         4c:6b:e4:8e:7a:60:c1:d6:aa:78:eb:f9:47:42:20:a3:45:b9:
         5c:47:b3:8c:97:29:00:c8:5a:3c:3d:0f:ca:16:c3:6a:68:84:
         03:c4:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----