Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/323830303a3132303a3a2f33322d3438203d3e203237383433.roa
File:                     323830303a3132303a3a2f33322d3438203d3e203237383433.roa (raw, json)
Hash identifier:          ogtD6liUOZuSpfFK0hPlRoqmuw9GzcLV19sM/Tf37Ac=
Subject key identifier:   38:DD:68:9A:E4:68:20:86:1A:E7:7B:78:11:C6:10:8D:21:22:88:92
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       2B96069E963836B71D8DC70238F192C5F3993C6A
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/323830303a3132303a3a2f33322d3438203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:44:41 +0000
ROA not before:           Tue 05 Mar 2024 17:39:41 +0000
ROA not after:            Tue 04 Mar 2025 17:44:41 +0000
asID:                     27843
IP address blocks:        2800:120::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:96:06:9e:96:38:36:b7:1d:8d:c7:02:38:f1:92:c5:f3:99:3c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Mar  5 17:39:41 2024 GMT
            Not After : Mar  4 17:44:41 2025 GMT
        Subject: CN=38DD689AE46820861AE77B7811C6108D21228892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:3d:1c:1a:df:29:44:85:8b:c1:7f:ee:84:
                    30:86:c6:38:d5:d4:b4:bc:24:32:07:89:fd:96:3e:
                    11:16:65:8c:49:36:f7:93:86:f5:e0:d4:f4:46:ff:
                    58:d5:4e:8b:5f:12:6c:cd:5b:09:0d:df:a6:fc:d2:
                    0f:c9:56:6f:86:ca:74:80:21:a6:a8:34:e8:7d:b8:
                    42:01:d1:84:aa:9e:5a:80:87:e8:ab:a6:c7:54:80:
                    2a:11:b7:5c:36:32:e4:ab:e9:e1:c8:3b:72:cf:84:
                    cb:3e:b5:41:75:5c:5d:26:13:95:3b:d9:66:12:5d:
                    89:84:96:ea:b8:24:ba:48:f6:07:b1:8c:66:b6:84:
                    5c:86:54:d1:03:fd:9c:98:36:53:dc:87:bc:66:07:
                    87:98:57:11:ff:7a:5d:29:57:a6:51:b7:f1:4f:d2:
                    ca:f4:e8:47:68:46:a1:9d:9b:40:8b:a4:ec:6b:2b:
                    86:16:c0:21:30:4e:16:e2:fc:74:a3:ee:e8:e2:29:
                    4b:d7:13:02:e4:6e:49:58:b1:2f:27:67:a0:f8:59:
                    d6:23:38:f7:b2:05:fa:b4:15:bf:86:6c:81:6e:78:
                    27:ab:e0:81:ed:11:a2:3c:98:24:6f:a1:38:f0:14:
                    33:d4:ca:16:fb:9b:36:57:72:22:da:88:73:af:d1:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DD:68:9A:E4:68:20:86:1A:E7:7B:78:11:C6:10:8D:21:22:88:92
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/323830303a3132303a3a2f33322d3438203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:120::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:c0:17:c0:4a:3e:20:54:a8:22:c4:9c:fa:fe:5c:c9:0b:a5:
         04:16:cc:d4:b7:df:c4:ac:ea:d4:0c:66:a6:6f:cf:5f:bb:4c:
         01:31:1d:8b:7c:bd:bc:10:7b:c1:18:4d:f0:88:c3:2e:80:a4:
         ba:b4:17:30:fd:51:e7:9c:ca:f1:4b:98:7d:40:f0:1d:f0:9b:
         7c:ba:e2:6a:3a:b8:4a:a1:d0:ff:1f:dc:bd:0f:de:07:85:aa:
         40:22:c4:35:44:d9:b3:ec:cf:ca:fa:8e:be:aa:2b:20:01:10:
         82:4f:6a:1d:97:29:be:bb:fc:91:5d:28:ef:91:95:88:32:f6:
         72:d3:de:10:ac:e5:4b:dc:f3:eb:de:fd:58:12:a0:2d:03:8b:
         e9:9d:4b:11:1f:8e:66:ec:17:e1:8c:f3:69:84:f4:6a:7c:cf:
         ee:d0:c1:55:18:56:79:9b:ff:cc:7a:98:28:66:35:5b:ce:ce:
         ef:10:76:5f:86:c3:f8:68:24:e6:ca:bd:7c:a4:4e:1a:9d:f2:
         df:b2:3e:c5:68:26:13:5f:67:5b:a7:53:ad:87:37:d3:f7:ec:
         11:bc:c8:59:2c:97:f6:eb:94:87:8c:9e:76:f9:ec:77:d5:fd:
         1d:5c:13:a4:b6:e5:8b:e1:f0:6e:ab:e8:8e:45:88:50:ee:9f:
         20:7a:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----