Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/323830333a316438303a3a2f33322d3336203d3e203631343831.roa
File:                     323830333a316438303a3a2f33322d3336203d3e203631343831.roa (raw, json)
Hash identifier:          8LIeW+OB225NiIERsDe49gKRGwBewD5+TgjPeyc2zAc=
Subject key identifier:   94:17:7E:3C:62:CF:FC:F8:30:A1:89:DA:F3:F0:6E:BF:A0:85:DF:87
Certificate issuer:       /CN=D636489E9694DE73AF7AED57962E848C6463F92F
Certificate serial:       31B6304D3EB265AA8A3D94640AA3B95D511CC8A2
Authority key identifier: D6:36:48:9E:96:94:DE:73:AF:7A:ED:57:96:2E:84:8C:64:63:F9:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D636489E9694DE73AF7AED57962E848C6463F92F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/323830333a316438303a3a2f33322d3336203d3e203631343831.roa
Signing time:             Tue 05 Mar 2024 17:41:33 +0000
ROA not before:           Tue 05 Mar 2024 17:36:33 +0000
ROA not after:            Tue 04 Mar 2025 17:41:33 +0000
asID:                     61481
IP address blocks:        2803:1d80::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b6:30:4d:3e:b2:65:aa:8a:3d:94:64:0a:a3:b9:5d:51:1c:c8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D636489E9694DE73AF7AED57962E848C6463F92F
        Validity
            Not Before: Mar  5 17:36:33 2024 GMT
            Not After : Mar  4 17:41:33 2025 GMT
        Subject: CN=94177E3C62CFFCF830A189DAF3F06EBFA085DF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:a9:76:eb:59:d0:f6:9b:9a:82:6f:08:6b:
                    92:7b:40:ff:21:1d:dc:b3:76:1d:99:c7:a2:c9:45:
                    44:85:7f:d5:29:a9:9e:4a:a4:6b:e8:e6:42:c6:3f:
                    1a:c2:09:92:41:e5:fe:69:9f:07:66:4c:2f:a6:70:
                    6e:b7:07:4b:c3:79:31:88:f2:50:23:c0:a9:50:ed:
                    82:03:92:63:07:55:ee:39:d8:44:7c:47:f8:14:c1:
                    a5:76:eb:92:4f:0f:65:ca:92:f7:b1:5b:eb:93:db:
                    6f:4e:77:24:28:b9:51:b3:d2:79:5e:0c:e8:93:8f:
                    b1:50:67:77:d2:86:4f:35:f5:71:51:8c:8a:3f:c4:
                    8f:7e:bc:23:49:2a:4f:82:58:60:dd:b5:9d:4d:15:
                    b0:2c:1b:4b:7a:46:92:5b:3d:4f:e9:10:c5:93:50:
                    23:cb:f8:78:cf:61:f4:a8:80:f7:d3:6a:02:ec:09:
                    2f:56:3d:48:8f:7b:47:b3:3c:44:bb:e6:9e:4d:3a:
                    8f:c5:7f:cf:b4:aa:bd:d1:33:68:44:a8:c4:88:b6:
                    43:0e:be:5f:74:2c:83:4c:97:1e:2e:b8:1f:2c:aa:
                    65:27:b6:01:6b:65:1e:96:81:30:98:56:16:b4:aa:
                    0e:32:d2:3c:67:b5:08:4f:eb:fd:4b:e1:f9:30:26:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:7E:3C:62:CF:FC:F8:30:A1:89:DA:F3:F0:6E:BF:A0:85:DF:87
            X509v3 Authority Key Identifier:
                keyid:D6:36:48:9E:96:94:DE:73:AF:7A:ED:57:96:2E:84:8C:64:63:F9:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/D636489E9694DE73AF7AED57962E848C6463F92F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D636489E9694DE73AF7AED57962E848C6463F92F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BE3C4731C212A65BEA251671CDE1A3CA544C0FEC54D95877353C8835F5F299/0/323830333a316438303a3a2f33322d3336203d3e203631343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:5d:10:b6:91:d2:9d:d4:fc:06:68:45:c8:4f:96:db:8b:
         a3:fe:30:98:be:3d:a0:e6:d6:95:a6:c1:d4:73:11:c3:49:9e:
         8a:d1:3a:8d:0c:90:05:da:a7:e0:ae:e3:71:13:6b:95:be:bd:
         3a:b8:50:d5:08:8a:cc:7b:62:6c:0d:4b:eb:f0:65:3f:dd:5b:
         d3:9a:e4:e3:a8:bf:fe:42:6c:4b:d0:76:bf:af:7f:07:bb:60:
         30:c8:04:aa:f8:c3:85:9a:d4:79:63:fa:04:d7:50:29:ab:bc:
         ab:9e:8a:c4:ae:d2:5d:88:b5:99:83:e6:c5:c1:1d:fd:1f:07:
         2f:b7:3a:27:f3:f7:93:5b:ca:d3:d0:1c:28:66:e5:b0:ad:9a:
         d1:d4:32:c9:9b:44:0e:cd:38:05:f7:c8:f5:9f:71:ff:57:24:
         12:42:0f:ba:6d:44:ee:ea:0d:54:1f:a8:a3:76:3b:2a:09:63:
         8a:6f:38:ed:c6:cf:15:1a:cd:3d:a3:75:26:05:8b:e3:89:9f:
         4e:2d:ba:5e:83:14:19:38:f4:65:e1:19:f4:c1:92:5a:7b:02:
         c3:89:25:52:6a:7f:44:3d:8a:7d:75:41:9c:ca:40:93:14:b9:
         5d:52:f5:8c:cc:7e:07:41:23:33:8b:70:e4:95:0a:d0:e3:e0:
         c2:08:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----