Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/323830333a363763303a3a2f33322d3438203d3e20323730303136.roa
File:                     323830333a363763303a3a2f33322d3438203d3e20323730303136.roa (raw, json)
Hash identifier:          soYnLkupQXdaLqA8KdniTi1FEBsM7qEi/HZm37C0Thg=
Subject key identifier:   2C:69:5C:43:67:9C:1B:91:8B:FA:53:89:37:86:C9:4C:34:13:6E:1D
Certificate issuer:       /CN=F4BCD849C61EEEDA3F9A792A027FD58727547CCD
Certificate serial:       02DD18D9465D67F45B5189124B3110183EC110DF
Authority key identifier: F4:BC:D8:49:C6:1E:EE:DA:3F:9A:79:2A:02:7F:D5:87:27:54:7C:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/323830333a363763303a3a2f33322d3438203d3e20323730303136.roa
Signing time:             Tue 05 Mar 2024 17:58:35 +0000
ROA not before:           Tue 05 Mar 2024 17:53:35 +0000
ROA not after:            Tue 04 Mar 2025 17:58:35 +0000
asID:                     270016
IP address blocks:        2803:67c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:dd:18:d9:46:5d:67:f4:5b:51:89:12:4b:31:10:18:3e:c1:10:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4BCD849C61EEEDA3F9A792A027FD58727547CCD
        Validity
            Not Before: Mar  5 17:53:35 2024 GMT
            Not After : Mar  4 17:58:35 2025 GMT
        Subject: CN=2C695C43679C1B918BFA53893786C94C34136E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fe:31:a8:d4:b9:47:7a:88:d1:b7:0c:60:28:
                    61:30:f0:f0:0c:40:72:19:19:70:9e:22:ea:fa:b5:
                    14:80:3c:ad:26:f2:02:f8:70:c2:78:98:49:41:7e:
                    f1:5b:0a:eb:91:ca:8e:81:57:db:bb:91:24:e3:a5:
                    01:4f:45:a2:f0:50:95:cc:1d:29:f9:1d:7b:58:88:
                    ff:fa:14:98:a9:53:f4:ca:b6:1a:51:65:f2:2d:08:
                    39:77:f7:f1:3f:4f:dd:e0:32:2a:5c:60:39:98:ef:
                    68:e2:ff:d4:7c:fc:f4:42:8d:cc:84:a6:bc:68:50:
                    80:2b:97:41:a0:5a:26:08:f4:ec:c7:9d:e5:22:4e:
                    2d:88:fa:ec:dc:b7:e3:17:fb:29:93:97:f8:59:e5:
                    e9:e6:63:d0:80:cc:e4:ba:18:a7:34:ea:3a:23:e5:
                    c5:5e:72:d8:dc:97:3b:c6:16:78:ed:8f:4b:41:0f:
                    09:be:a9:04:d9:26:11:82:74:97:bd:5f:f1:83:67:
                    9a:c9:a6:83:bf:f7:0f:89:6a:41:c0:9b:e4:e5:fe:
                    cc:de:30:1c:f2:f7:2d:68:77:a0:8b:7f:d2:64:77:
                    84:c4:e5:50:be:93:dc:46:27:b1:0a:6e:bb:68:a9:
                    18:e2:fc:83:59:9e:34:a8:06:17:1d:fe:10:c1:53:
                    b0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:69:5C:43:67:9C:1B:91:8B:FA:53:89:37:86:C9:4C:34:13:6E:1D
            X509v3 Authority Key Identifier:
                keyid:F4:BC:D8:49:C6:1E:EE:DA:3F:9A:79:2A:02:7F:D5:87:27:54:7C:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4BCD849C61EEEDA3F9A792A027FD58727547CCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B496B9726EB2DB18BB31288FC39CA00442BE6765B66066275E2CC4BEC510FDCB/0/323830333a363763303a3a2f33322d3438203d3e20323730303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:67c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:d4:60:6d:38:f5:a6:06:0b:c4:e8:a9:a8:e7:0d:d5:00:90:
         4a:e8:cb:0d:f4:1c:12:6b:a7:c4:5b:f3:37:15:f0:f0:cd:49:
         ca:be:35:64:fe:dc:e1:4b:44:fa:04:64:20:b9:85:29:7c:6e:
         39:38:0d:ea:71:0e:a6:d2:cf:62:3a:f5:0c:4a:75:0a:4e:8b:
         c3:dc:5e:51:55:58:ce:71:ac:a9:9f:d1:a8:88:7a:ac:b5:ff:
         58:62:1d:c4:49:93:3a:30:26:a9:de:a3:f0:2c:bd:0b:66:c0:
         3a:d1:7d:83:8e:a4:46:70:4f:8c:26:18:42:b0:e9:86:27:cb:
         fb:57:99:9a:2d:3d:30:1d:ac:9c:b7:0d:b9:34:83:c3:ca:86:
         f1:13:ff:1a:f6:e4:33:8e:82:96:98:97:8e:bf:1a:d7:cc:4a:
         4a:90:2b:25:8f:13:67:af:fd:f6:48:fa:37:3d:f2:b2:9c:02:
         be:f2:3e:f1:02:52:2e:1b:8f:70:b0:6c:b7:a9:e3:6c:a8:27:
         17:9a:57:b1:07:50:3f:be:80:2c:a5:45:85:44:47:30:de:07:
         2b:c2:73:5b:4e:a9:b4:9e:12:9e:85:b5:f4:3f:44:f5:3f:67:
         20:5b:75:c3:a1:10:d5:14:4a:f4:67:bc:27:4a:dd:c9:20:a5:
         4b:ea:19:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----