Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/323830333a343730303a3a2f33312d3337203d3e203238303733.roa
File:                     323830333a343730303a3a2f33312d3337203d3e203238303733.roa (raw, json)
Hash identifier:          6D96A8B93F1ISQem2b2IFy+SwIMAMuBdy6aSn7CJvVw=
Subject key identifier:   34:47:D7:FD:14:EA:C1:BA:56:AC:E8:D8:15:D2:7D:75:1B:D8:0F:D1
Certificate issuer:       /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial:       6719B60BCA3425D0AB0B3889D20A9BB8DF09F78E
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/323830333a343730303a3a2f33312d3337203d3e203238303733.roa
Signing time:             Tue 05 Mar 2024 17:46:14 +0000
ROA not before:           Tue 05 Mar 2024 17:41:14 +0000
ROA not after:            Tue 04 Mar 2025 17:46:14 +0000
asID:                     28073
IP address blocks:        2803:4700::/31 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:19:b6:0b:ca:34:25:d0:ab:0b:38:89:d2:0a:9b:b8:df:09:f7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
        Validity
            Not Before: Mar  5 17:41:14 2024 GMT
            Not After : Mar  4 17:46:14 2025 GMT
        Subject: CN=3447D7FD14EAC1BA56ACE8D815D27D751BD80FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:2f:55:d9:6c:0f:0a:f3:76:5d:8a:cc:59:
                    b4:e8:8b:47:40:2e:14:34:95:d1:5a:84:7b:e0:c0:
                    74:d2:fc:e2:c1:42:eb:2b:9c:eb:46:fb:57:10:76:
                    4b:c1:6a:69:f0:1d:2a:4f:26:06:c1:6c:8a:c8:6b:
                    16:25:9f:13:33:fe:a4:7c:08:48:e9:81:72:31:6c:
                    bd:2e:8b:4c:ed:06:10:b4:91:e6:fa:1d:09:19:75:
                    18:39:28:2b:69:15:67:aa:1b:89:ce:47:15:9b:3d:
                    e1:22:77:61:51:a7:c4:ec:1a:01:4e:11:45:86:2e:
                    5b:e0:8f:b1:42:ba:57:a2:28:18:ca:a8:5c:c7:4d:
                    48:56:8c:5b:25:62:1d:fc:e4:12:54:91:2c:34:d2:
                    a7:db:93:1e:d9:56:1f:db:8f:47:b9:98:ce:4c:7d:
                    00:35:11:d5:46:cd:3a:69:de:f7:d2:56:67:5a:82:
                    ad:80:d4:f2:db:b8:92:db:6e:65:26:4f:86:d0:9a:
                    18:e1:01:ad:20:2e:87:22:c4:b2:8a:cc:ed:45:96:
                    49:88:9c:ab:61:b1:19:16:7b:4c:a1:2b:18:1b:0d:
                    ae:42:af:79:3f:56:36:da:fc:08:fe:89:41:d3:50:
                    f7:ff:58:a2:43:0c:d9:36:2a:5d:d5:ce:95:df:32:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:47:D7:FD:14:EA:C1:BA:56:AC:E8:D8:15:D2:7D:75:1B:D8:0F:D1
            X509v3 Authority Key Identifier:
                keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/323830333a343730303a3a2f33312d3337203d3e203238303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4700::/31

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:82:88:b4:a5:bb:ac:bb:73:7a:55:dd:49:28:ae:05:78:
         d0:06:36:3b:04:69:9c:e7:74:fb:16:af:38:46:a2:b3:00:1c:
         e3:fc:fa:e2:c9:79:d2:f9:9d:d3:8e:39:a6:67:e5:b7:63:ea:
         57:b9:00:d9:46:1c:61:a7:3b:c4:c3:06:b6:99:cb:ce:a3:2c:
         86:bc:15:7a:4e:44:0b:32:4a:52:47:d2:8a:f7:b7:ac:1b:04:
         b0:48:4a:11:e1:6f:97:ae:15:92:1a:a0:15:df:04:c8:5c:ee:
         5d:52:11:40:27:88:1f:fb:28:91:32:fa:1d:b0:6e:ba:f9:54:
         34:0e:ec:8e:15:34:47:2d:5d:d0:44:ab:e3:cc:f8:9d:3b:75:
         24:29:00:07:8d:00:27:ad:51:6f:e0:eb:33:44:de:7a:18:46:
         28:ac:ee:45:02:79:39:6b:12:9c:d8:09:23:bd:23:5c:fa:b5:
         3e:02:5e:31:e3:c0:3b:ba:a7:5c:8f:7b:74:dc:90:ba:85:6f:
         4c:6d:0e:fd:91:e6:e3:86:6e:2d:55:49:23:7d:d2:9f:53:f7:
         76:36:10:a5:4d:b9:9f:6d:a0:20:7b:84:c6:dc:be:3e:ff:c7:
         9f:6b:3d:8f:d5:08:5f:8d:e2:1c:60:d6:0a:e2:a7:b7:c3:af:
         47:b4:1b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----