Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/323830333a346230303a3a2f33322d3438203d3e20323633313936.roa
File:                     323830333a346230303a3a2f33322d3438203d3e20323633313936.roa (raw, json)
Hash identifier:          N9axSzAK1Nwphm23DuF/FGVERhVHnba8u5Vs7aQFgZU=
Subject key identifier:   50:D4:84:EA:CF:91:CD:28:7F:A1:A4:CF:68:C1:AA:10:EB:6E:66:03
Certificate issuer:       /CN=1BF6A4D7C0F954D7DE94EF417CD453B8A4217860
Certificate serial:       5C65DB72292DDDDAA8E155C9F58AE7B8E6D9998A
Authority key identifier: 1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/323830333a346230303a3a2f33322d3438203d3e20323633313936.roa
Signing time:             Tue 05 Mar 2024 17:58:26 +0000
ROA not before:           Tue 05 Mar 2024 17:53:26 +0000
ROA not after:            Tue 04 Mar 2025 17:58:26 +0000
asID:                     263196
IP address blocks:        2803:4b00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:65:db:72:29:2d:dd:da:a8:e1:55:c9:f5:8a:e7:b8:e6:d9:99:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF6A4D7C0F954D7DE94EF417CD453B8A4217860
        Validity
            Not Before: Mar  5 17:53:26 2024 GMT
            Not After : Mar  4 17:58:26 2025 GMT
        Subject: CN=50D484EACF91CD287FA1A4CF68C1AA10EB6E6603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:02:f7:42:82:b3:b7:12:23:4a:ba:b2:48:60:
                    b6:01:d6:74:87:ee:fa:3a:7a:bc:b0:26:23:b5:eb:
                    1d:ac:83:83:2a:0d:3a:52:96:fd:91:09:1b:a7:64:
                    bb:6d:7d:e7:ce:27:b7:cf:f6:fc:65:44:9e:9a:6e:
                    75:42:3b:09:f4:68:2c:aa:02:5f:d0:8b:b5:21:7e:
                    b4:39:39:9e:db:08:4a:6e:a0:52:9e:b9:86:8d:16:
                    12:a6:82:cb:5b:96:8c:ca:a8:55:b7:4e:51:54:0c:
                    97:9a:49:04:0a:a1:27:be:45:57:2e:ca:be:e8:4a:
                    1f:b6:c0:dc:8b:12:64:53:4e:75:71:f8:0a:56:07:
                    b0:3e:bb:9f:14:a8:e1:88:ff:17:9c:6e:06:6e:e9:
                    70:fa:0b:1a:a5:92:5f:8e:e2:ea:dd:da:b3:74:49:
                    2e:5c:9d:0a:51:fa:a3:b0:1d:09:0c:8f:2f:1c:ec:
                    47:a2:50:8d:6c:a5:31:67:b6:ed:39:d0:00:64:24:
                    5e:1a:97:5f:36:49:f9:9c:03:83:63:2b:e5:67:6f:
                    69:44:4c:10:b8:cd:28:9e:28:72:15:e3:99:4b:aa:
                    e7:61:a3:1f:d2:18:52:71:33:c7:d6:91:34:44:b3:
                    21:9c:12:8c:6b:4a:9f:4c:0e:16:74:1b:59:cb:84:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D4:84:EA:CF:91:CD:28:7F:A1:A4:CF:68:C1:AA:10:EB:6E:66:03
            X509v3 Authority Key Identifier:
                keyid:1B:F6:A4:D7:C0:F9:54:D7:DE:94:EF:41:7C:D4:53:B8:A4:21:78:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF6A4D7C0F954D7DE94EF417CD453B8A4217860.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B4C45A2CD2E40E188C0E6672D011461E60A798F3F633B4BF8E6E9AF998F200F4/0/323830333a346230303a3a2f33322d3438203d3e20323633313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:4c:4c:a5:e0:16:c2:d1:4b:d1:e9:06:33:fa:8d:7a:08:
         61:1e:92:85:3b:e0:42:7d:49:19:8a:7b:2b:09:42:fc:83:c7:
         79:14:84:d4:00:3f:60:89:9e:3e:4b:7b:bc:de:2c:90:2b:13:
         a4:92:a5:96:a7:ee:5c:f2:74:f4:0e:d8:38:12:10:90:4e:94:
         dc:e9:3b:12:c2:81:44:4f:6b:2a:2b:3b:94:06:a0:23:8c:ef:
         db:1d:4b:1a:41:08:41:20:77:62:81:16:ba:41:dd:6f:53:38:
         77:55:76:2c:36:59:3e:71:0d:bd:af:76:c9:6d:ca:55:06:ea:
         71:e2:24:94:09:9a:d2:13:8d:34:2d:42:69:a3:e8:c9:e7:02:
         d4:bd:2e:3a:01:ef:b3:49:89:1e:92:87:4e:e1:0f:99:3c:06:
         e5:bd:03:65:47:99:22:17:b2:23:99:ff:5b:3e:60:47:c0:f3:
         84:7e:9c:cd:f0:3d:f5:7f:bc:2c:e4:b4:27:44:18:1b:c4:25:
         ec:32:97:3e:03:79:76:15:af:eb:d3:8a:60:61:4d:8e:a2:8d:
         e8:e3:f0:02:56:a1:65:34:7f:fd:02:70:35:d6:4a:d7:6c:20:
         ed:a1:48:95:e5:42:75:77:87:bb:d2:a3:42:b3:d2:65:0f:1f:
         93:93:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----