Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e203238303037.roa
File:                     323830333a643036303a3a2f33322d3438203d3e203238303037.roa (raw, json)
Hash identifier:          8EvtXTSqpwB8Ov0G/PiRWLDu5wlv5UpykV0SHgki3TQ=
Subject key identifier:   8E:D1:71:00:6C:76:57:06:01:6D:87:82:4F:11:A4:07:52:F1:3F:10
Certificate issuer:       /CN=4D9026847D6FE56DC1DEEB9668FE178CF317D9F8
Certificate serial:       30F649217B3B518C17749A1CB19DF41792916AFD
Authority key identifier: 4D:90:26:84:7D:6F:E5:6D:C1:DE:EB:96:68:FE:17:8C:F3:17:D9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 18:16:46 +0000
ROA not before:           Tue 05 Mar 2024 18:11:46 +0000
ROA not after:            Tue 04 Mar 2025 18:16:46 +0000
asID:                     28007
IP address blocks:        2803:d060::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f6:49:21:7b:3b:51:8c:17:74:9a:1c:b1:9d:f4:17:92:91:6a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9026847D6FE56DC1DEEB9668FE178CF317D9F8
        Validity
            Not Before: Mar  5 18:11:46 2024 GMT
            Not After : Mar  4 18:16:46 2025 GMT
        Subject: CN=8ED171006C765706016D87824F11A40752F13F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:4c:bd:d4:33:42:fd:ec:d4:0f:85:bd:82:
                    fd:af:94:21:bd:f5:85:8f:33:cc:4b:a4:72:e9:dc:
                    58:dc:d6:f9:e0:55:8b:bc:e1:6a:8c:a8:0c:d9:d2:
                    ee:ba:fc:a6:92:0a:04:d0:5c:81:96:28:80:b4:a7:
                    26:f7:16:e5:6f:bb:a8:b2:d7:cf:20:98:e1:67:3a:
                    19:90:ac:db:cc:ce:29:8a:cb:c7:eb:fb:6f:60:0f:
                    7e:c7:20:c5:0a:8c:99:4f:a6:fc:ee:0e:8a:24:55:
                    bf:de:32:d8:86:f5:05:74:3a:6e:15:f3:67:9a:4a:
                    d4:8d:f5:b7:2b:5e:3c:cc:d2:2b:22:3d:1e:49:b2:
                    6e:e1:82:71:cb:03:36:13:96:19:a5:96:06:55:c0:
                    a2:09:78:c6:ef:c7:11:bd:25:fe:09:ee:29:57:74:
                    63:d6:66:1d:12:46:7d:39:1d:b0:c5:0d:f5:c6:8e:
                    0f:13:97:42:2c:f6:2e:76:7d:ed:d4:18:bf:17:e2:
                    72:e0:b8:14:51:28:8d:70:db:0c:af:cb:9d:90:a1:
                    49:19:a4:39:e5:64:f4:0b:71:5e:4b:df:5d:75:59:
                    9a:7f:85:59:5b:01:be:3a:99:9a:39:24:81:ce:0e:
                    80:33:5b:c0:be:d4:69:99:03:cb:db:91:bb:07:61:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D1:71:00:6C:76:57:06:01:6D:87:82:4F:11:A4:07:52:F1:3F:10
            X509v3 Authority Key Identifier:
                keyid:4D:90:26:84:7D:6F:E5:6D:C1:DE:EB:96:68:FE:17:8C:F3:17:D9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4D9026847D6FE56DC1DEEB9668FE178CF317D9F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A77F139A6B465FB69147DCC2A212FB3DF9BFD83B441E8770AD919B555E7EFE49/0/323830333a643036303a3a2f33322d3438203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d060::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:f7:5d:7c:a6:9b:d2:ca:b3:7b:a1:df:e9:9f:25:eb:e9:84:
         8c:eb:b0:11:79:4c:45:af:20:7d:8f:bc:cc:ec:a6:88:6c:e5:
         e9:2c:77:4f:bb:53:6f:7f:0d:72:3a:35:b0:a5:20:87:90:c2:
         2b:af:98:82:70:fb:8a:c3:a0:6d:66:a0:94:35:05:b7:fc:db:
         47:11:12:80:ac:03:26:a5:7c:ad:29:a5:e3:82:2e:8b:b6:5e:
         0c:ae:6a:e4:92:25:8f:52:e8:37:f2:1b:1b:a8:3f:ce:81:71:
         a1:96:95:4e:6e:af:59:44:83:ad:14:95:07:3b:f7:46:fa:72:
         c2:f7:92:e7:79:c2:33:33:18:cd:f7:4a:29:47:83:e9:37:71:
         12:3a:33:49:63:34:ad:29:8c:35:a5:c5:9d:6c:11:7c:43:0a:
         e2:50:cd:9a:39:f6:a7:24:7b:b3:b9:ba:8f:64:a5:e0:90:b9:
         8a:54:d8:69:09:68:1f:0f:d1:57:f7:22:a4:97:76:8d:ec:e0:
         85:a4:4b:56:50:38:bc:2f:2f:c4:39:55:6c:b4:04:95:a5:64:
         4a:d3:34:50:59:fa:32:52:3e:dd:d4:2f:02:3d:7e:16:b4:cd:
         50:c7:0a:cf:52:26:b8:08:aa:93:fe:00:b9:e3:69:4b:32:74:
         ca:d0:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----