Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/323830333a6330303a3a2f33322d3438203d3e20323632323330.roa
File:                     323830333a6330303a3a2f33322d3438203d3e20323632323330.roa (raw, json)
Hash identifier:          zrFeiHmYlycxlQVOgZmOhpzoYVqtxuKAnwZlX0so/jQ=
Subject key identifier:   C4:2C:B5:74:EB:2A:E0:29:DD:5B:40:26:44:95:81:8E:65:E6:6B:38
Certificate issuer:       /CN=5476D3DCCFF32D40304F300362E14E912C59544D
Certificate serial:       64C2820717187C2EA5FD3FDCA83B6801C5FB2867
Authority key identifier: 54:76:D3:DC:CF:F3:2D:40:30:4F:30:03:62:E1:4E:91:2C:59:54:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5476D3DCCFF32D40304F300362E14E912C59544D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/323830333a6330303a3a2f33322d3438203d3e20323632323330.roa
Signing time:             Tue 05 Mar 2024 18:20:21 +0000
ROA not before:           Tue 05 Mar 2024 18:15:21 +0000
ROA not after:            Tue 04 Mar 2025 18:20:21 +0000
asID:                     262230
IP address blocks:        2803:c00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c2:82:07:17:18:7c:2e:a5:fd:3f:dc:a8:3b:68:01:c5:fb:28:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5476D3DCCFF32D40304F300362E14E912C59544D
        Validity
            Not Before: Mar  5 18:15:21 2024 GMT
            Not After : Mar  4 18:20:21 2025 GMT
        Subject: CN=C42CB574EB2AE029DD5B40264495818E65E66B38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:80:75:f5:68:e9:ae:18:55:e1:4b:14:38:6e:
                    c2:26:d1:4e:2a:70:8f:57:3c:d7:50:5d:a7:e8:d6:
                    f0:75:e7:8f:09:22:45:12:5d:88:0d:3f:1d:a3:ff:
                    c3:bc:37:4a:5e:ef:b7:4d:19:ca:16:51:5b:66:ba:
                    25:80:71:b6:f6:73:3f:ab:23:fa:ca:83:2b:32:43:
                    33:c4:43:a5:6d:a5:20:d0:72:4f:ba:4d:c9:6f:a2:
                    a1:6a:6f:af:3f:39:d6:40:94:1b:d1:29:78:02:89:
                    39:25:a2:1f:a1:3a:0d:eb:d8:fb:c6:50:e8:a7:b8:
                    1b:cc:97:41:c1:57:f0:af:c8:13:a1:e8:b2:d8:c8:
                    9a:c0:a6:a4:9f:b4:51:e3:27:f1:bd:27:65:8c:bf:
                    3f:5d:c4:d8:0e:7d:90:c9:14:33:49:82:3d:e4:03:
                    66:80:6c:8e:a8:da:ba:32:1f:e8:63:e3:ec:61:32:
                    3d:fc:1f:f8:b9:2e:3e:38:90:ee:0f:ab:ca:de:d6:
                    14:33:02:10:ae:51:29:34:f1:a3:9e:26:96:57:3a:
                    d0:c2:4d:79:14:7e:fc:6a:9e:65:1b:da:f3:59:86:
                    5f:cf:dc:83:d7:9e:de:04:47:36:14:cc:90:7c:a7:
                    1f:e2:e1:e8:ed:50:17:34:17:de:ec:71:24:98:01:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2C:B5:74:EB:2A:E0:29:DD:5B:40:26:44:95:81:8E:65:E6:6B:38
            X509v3 Authority Key Identifier:
                keyid:54:76:D3:DC:CF:F3:2D:40:30:4F:30:03:62:E1:4E:91:2C:59:54:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/5476D3DCCFF32D40304F300362E14E912C59544D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5476D3DCCFF32D40304F300362E14E912C59544D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E7C7C2E8CEFF1F0B7CE10658E66DA5009FC817A092037046029D11802837D2F/0/323830333a6330303a3a2f33322d3438203d3e20323632323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:b8:82:62:49:72:ed:81:0d:52:a7:84:20:ce:5b:a9:79:
         15:4b:4c:8c:83:02:8f:50:56:2e:d2:c8:cf:a3:04:0e:35:58:
         30:e6:5f:1a:54:dd:01:b0:95:d3:c8:99:4a:a5:0a:2f:eb:f6:
         89:bb:97:cf:c9:ba:30:7e:e6:b4:4d:97:c7:a7:c3:a0:0c:e3:
         9d:8d:0b:13:4c:c3:0f:0d:48:43:7f:8f:ed:03:78:c6:6f:43:
         38:30:dd:30:b9:e0:6b:d8:49:9c:bd:88:6c:90:66:be:27:52:
         28:fa:55:50:7a:82:39:d0:7c:fb:55:02:27:65:b1:35:91:92:
         d2:3c:12:d6:8c:7c:40:8f:ab:27:8d:b1:da:22:63:2a:ba:ac:
         23:37:bd:0f:b5:6e:e1:d2:89:c4:03:bf:48:2e:b4:eb:46:f9:
         1a:24:1b:56:09:bc:db:a5:71:b4:9e:10:38:78:c6:93:b8:fa:
         da:9f:ce:b3:48:2f:ba:50:60:4e:aa:fd:af:fa:96:70:52:eb:
         93:98:c4:7f:a8:b3:30:f3:c3:97:36:54:49:d3:28:6b:3a:4c:
         23:5e:4e:cf:1b:35:70:b5:3e:89:87:34:02:47:a9:2e:20:67:
         9c:42:c8:45:ca:ea:57:a6:04:50:5d:4c:8c:8f:ee:a7:1f:f2:
         a8:0c:b1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----