Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/323830333a316431303a3a2f33322d3438203d3e20323732303531.roa
File:                     323830333a316431303a3a2f33322d3438203d3e20323732303531.roa (raw, json)
Hash identifier:          MvhQ0eXuAM1bsyxAlz+JhW4Qv3WkXKD0SvrhbvVt7hw=
Subject key identifier:   EE:86:38:D2:D1:94:2A:62:48:AC:21:1C:91:F4:8D:EA:B4:00:F8:49
Certificate issuer:       /CN=6FA9D8355B4041A0E854F533B0B64560F79C9808
Certificate serial:       7573485B1F52855B978DC5841E119CA08F8B1A2E
Authority key identifier: 6F:A9:D8:35:5B:40:41:A0:E8:54:F5:33:B0:B6:45:60:F7:9C:98:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/323830333a316431303a3a2f33322d3438203d3e20323732303531.roa
Signing time:             Tue 05 Mar 2024 18:23:05 +0000
ROA not before:           Tue 05 Mar 2024 18:18:05 +0000
ROA not after:            Tue 04 Mar 2025 18:23:05 +0000
asID:                     272051
IP address blocks:        2803:1d10::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:73:48:5b:1f:52:85:5b:97:8d:c5:84:1e:11:9c:a0:8f:8b:1a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FA9D8355B4041A0E854F533B0B64560F79C9808
        Validity
            Not Before: Mar  5 18:18:05 2024 GMT
            Not After : Mar  4 18:23:05 2025 GMT
        Subject: CN=EE8638D2D1942A6248AC211C91F48DEAB400F849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:d7:ff:bc:ff:0c:f6:a2:38:eb:3c:a8:60:
                    38:05:72:fd:3e:56:f2:4d:f5:d7:aa:1c:8b:51:bc:
                    f1:c1:63:79:a1:9d:0d:22:ad:9a:6c:f2:66:58:98:
                    7d:ed:09:45:26:07:23:74:59:48:4a:29:4a:1c:f9:
                    df:a3:3d:a7:69:ca:e2:b9:b0:fc:87:34:9d:8f:2e:
                    2c:03:66:ee:d1:4b:07:94:1f:0b:fb:c4:50:1d:62:
                    00:38:83:4b:9a:bf:3a:44:54:6c:e8:bc:91:10:43:
                    2f:80:00:41:a3:8d:c9:9a:4c:a2:11:46:9b:28:ef:
                    45:f9:09:d1:32:92:39:5a:ae:27:ec:11:cc:ee:a4:
                    1d:91:70:25:6a:90:01:c5:b3:20:9e:e8:2e:05:04:
                    cb:09:b6:03:17:58:08:6d:35:0f:a7:96:b6:81:b6:
                    4d:01:b0:85:79:e4:71:3b:96:67:8a:8c:2b:56:5c:
                    a6:49:0e:bf:c9:df:54:c4:3a:c6:b9:ba:e4:4f:98:
                    d7:7b:3b:18:bd:a7:96:74:24:c5:9c:ae:ae:6d:4b:
                    09:19:7d:e7:2c:b1:0d:0a:0d:30:b1:88:cf:71:40:
                    22:06:ff:3e:05:f1:16:5d:07:65:6b:ac:96:7e:a9:
                    98:47:94:9a:19:6f:88:dd:c5:69:b5:af:e0:22:0c:
                    69:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:86:38:D2:D1:94:2A:62:48:AC:21:1C:91:F4:8D:EA:B4:00:F8:49
            X509v3 Authority Key Identifier:
                keyid:6F:A9:D8:35:5B:40:41:A0:E8:54:F5:33:B0:B6:45:60:F7:9C:98:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/323830333a316431303a3a2f33322d3438203d3e20323732303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:79:d4:81:42:fd:3d:ee:47:f3:11:e6:10:2b:7e:ea:21:
         7f:73:93:ba:3c:d1:22:0a:ef:f9:a5:ea:2a:5d:1d:f6:71:e7:
         4e:cf:95:b7:95:4d:f1:6f:5d:ee:35:16:5a:15:d6:49:1b:cc:
         77:2e:59:39:c9:13:27:32:11:59:ab:46:5c:2d:aa:3f:63:2b:
         ba:d9:16:5c:43:86:c1:19:da:34:53:8a:ce:b2:90:68:9c:ac:
         d9:65:6a:64:bc:4b:11:e4:9f:d8:20:38:a8:a0:d7:a1:f5:ae:
         3d:e5:7f:33:61:e8:7d:6f:2b:62:26:df:89:6e:9e:35:4a:15:
         fd:88:38:70:f0:96:3f:40:86:4a:94:73:4c:38:42:7b:96:4d:
         0e:03:69:a5:36:35:62:00:cf:0e:16:6c:96:39:b1:b9:e3:3a:
         28:73:84:80:71:f1:b7:96:e9:63:9c:80:26:d6:70:30:d8:b7:
         1b:9f:2b:65:e7:0b:9d:aa:0b:7e:71:21:d0:f8:e3:56:fa:cb:
         fb:fd:b5:74:37:51:2b:7e:f4:72:ae:a6:bd:ee:5b:ba:cb:af:
         27:d2:a6:4b:72:6f:d2:15:8c:12:40:7e:d0:69:a9:8d:4d:4e:
         36:83:80:96:62:e0:37:bd:d8:d2:6b:0c:e8:8c:9b:3a:72:a2:
         9f:18:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----