Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/323830333a383465303a3a2f33322d3332203d3e20323733303036.roa
File:                     323830333a383465303a3a2f33322d3332203d3e20323733303036.roa (raw, json)
Hash identifier:          jMwuR7MMzreVPxChJ/3PaS6Z5f4M8qo4Znw8uoQFYX8=
Subject key identifier:   61:6E:7A:C4:26:F4:36:82:0B:E3:70:F4:CE:48:BD:48:00:9C:EC:16
Certificate issuer:       /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial:       0D832C5C482001B46591C9EB486240FFFBB5182C
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/323830333a383465303a3a2f33322d3332203d3e20323733303036.roa
Signing time:             Tue 05 Mar 2024 17:40:54 +0000
ROA not before:           Tue 05 Mar 2024 17:35:54 +0000
ROA not after:            Tue 04 Mar 2025 17:40:54 +0000
asID:                     273006
IP address blocks:        2803:84e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:83:2c:5c:48:20:01:b4:65:91:c9:eb:48:62:40:ff:fb:b5:18:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
        Validity
            Not Before: Mar  5 17:35:54 2024 GMT
            Not After : Mar  4 17:40:54 2025 GMT
        Subject: CN=616E7AC426F436820BE370F4CE48BD48009CEC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:ac:7f:c4:9b:02:a8:3a:80:c0:aa:f7:58:
                    e1:f7:9a:3a:b8:1a:08:7c:20:84:25:ae:4f:89:a2:
                    ff:71:67:09:03:6d:23:94:c9:54:80:04:b9:b1:39:
                    68:28:d0:7d:a3:8d:82:59:35:93:19:89:6d:6f:11:
                    bf:7d:da:8c:e1:cd:af:e9:53:a1:a1:30:f1:df:67:
                    f8:5e:50:36:12:5b:49:c7:c7:2c:6a:cd:e0:3f:fb:
                    55:2a:97:d4:fc:18:80:67:08:45:ef:2e:bf:ac:4c:
                    95:6a:dd:b6:1f:3d:5c:ee:7d:a1:24:21:4f:81:44:
                    84:86:d3:24:71:28:22:f4:93:bc:1a:f6:4c:c9:69:
                    34:5a:1d:bb:5d:67:6f:3a:40:39:4b:fc:18:de:df:
                    bd:9c:4f:10:a5:5b:15:56:20:3c:b7:a0:3b:9d:2a:
                    e1:98:02:96:93:be:6e:ca:1f:fa:cc:95:f2:2d:ab:
                    e2:06:f9:ae:32:f3:1b:49:54:9f:da:f4:44:79:61:
                    f4:42:98:9d:0e:1e:c4:75:09:31:ac:1d:f1:60:f6:
                    17:8c:42:54:e7:50:2a:a7:79:ff:b7:9a:75:5b:97:
                    e2:9f:7d:bc:44:5a:4e:3a:68:ff:62:86:d0:27:9e:
                    5a:fc:83:df:36:ff:4f:bb:9d:cb:e3:17:57:6d:1f:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6E:7A:C4:26:F4:36:82:0B:E3:70:F4:CE:48:BD:48:00:9C:EC:16
            X509v3 Authority Key Identifier:
                keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/323830333a383465303a3a2f33322d3332203d3e20323733303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:84e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:09:f9:b2:be:7a:da:e7:ec:1b:ce:8e:1e:3b:d2:71:6c:8c:
         14:7d:ab:5a:61:24:1f:61:9b:56:e7:3c:42:3b:b5:85:62:ff:
         4c:71:7d:2f:d3:2a:e1:a0:08:51:21:b7:77:2f:1a:c0:e6:36:
         87:93:23:c9:35:b7:4e:66:4a:f4:7c:84:fa:59:fb:2e:b1:50:
         c1:4a:a0:48:43:1b:c2:57:84:ef:f9:0e:3c:3f:2b:b9:9a:b0:
         80:73:93:5c:4c:d4:1c:74:3f:f1:25:a7:eb:b5:33:2e:05:d8:
         09:b7:1b:31:b7:f9:16:75:e7:9b:0b:33:80:3d:23:85:d2:f6:
         aa:ec:34:48:a3:94:2d:6f:75:d2:37:c1:c2:36:0c:7f:4d:90:
         bb:c6:28:13:9e:db:aa:d7:f1:d7:73:a5:27:8a:91:a7:88:bb:
         87:25:bc:c0:15:cd:9b:df:74:54:8c:ec:0e:f1:f5:82:18:19:
         d8:7f:ec:bc:ab:60:84:57:3a:e8:a3:1c:9c:a1:9d:a1:e3:29:
         cb:e7:dc:d0:c2:68:09:c1:cd:f3:13:14:00:a5:f5:3e:db:29:
         f7:98:33:48:c9:4d:fb:b0:80:16:1f:08:61:d4:4b:26:15:c0:
         b9:f6:1f:27:7e:42:f8:63:79:41:66:b3:0c:bb:28:6c:b9:b1:
         a7:ee:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----