Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/323830303a3363303a3a2f33322d3438203d3e203139383633.roa
File:                     323830303a3363303a3a2f33322d3438203d3e203139383633.roa (raw, json)
Hash identifier:          qe31peJNd5mXp3tZBPyG+HFKiUmHHEUoJoSJRnVroig=
Subject key identifier:   E4:44:2E:23:CD:38:68:6A:E3:B7:41:E5:CC:D4:9B:3B:F5:EA:A8:2C
Certificate issuer:       /CN=56BA7549B3C1698AA281B67A49603425B3B3D575
Certificate serial:       6EDEF1B39C8B98EED096CB9A3FD4EFB510B59041
Authority key identifier: 56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/323830303a3363303a3a2f33322d3438203d3e203139383633.roa
Signing time:             Tue 05 Mar 2024 18:00:30 +0000
ROA not before:           Tue 05 Mar 2024 17:55:30 +0000
ROA not after:            Tue 04 Mar 2025 18:00:30 +0000
asID:                     19863
IP address blocks:        2800:3c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:de:f1:b3:9c:8b:98:ee:d0:96:cb:9a:3f:d4:ef:b5:10:b5:90:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BA7549B3C1698AA281B67A49603425B3B3D575
        Validity
            Not Before: Mar  5 17:55:30 2024 GMT
            Not After : Mar  4 18:00:30 2025 GMT
        Subject: CN=E4442E23CD38686AE3B741E5CCD49B3BF5EAA82C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:8d:ab:06:47:d7:59:b9:80:f9:d0:8b:37:
                    2c:b3:70:54:53:bd:45:a4:54:b1:81:ba:7b:3b:5e:
                    84:0c:27:22:2d:07:76:59:c0:3a:47:d2:cb:36:02:
                    7d:3d:2e:a8:fc:99:b2:10:cc:fc:33:28:c4:2f:cd:
                    8a:04:8c:6f:e9:02:9e:ac:3e:b0:ed:6e:c3:1e:f3:
                    34:91:4f:3a:79:7a:65:06:68:22:40:af:c7:a4:c2:
                    c0:87:a4:82:69:59:7a:55:ed:f9:34:60:b7:ef:66:
                    ec:9b:ba:09:63:b8:22:d9:45:e1:47:d9:5c:00:06:
                    13:d9:fa:3c:f2:68:84:fc:4d:0c:48:a9:2f:51:49:
                    4b:b0:fa:1b:66:08:e7:78:12:bd:f0:7f:e7:84:1e:
                    da:ff:2c:9d:32:01:e4:99:80:a2:e8:ad:d4:c6:9d:
                    6b:0e:e9:d4:87:94:c0:95:b5:37:3d:5b:25:30:6a:
                    cc:ee:99:72:5c:32:be:4e:f0:13:45:f7:9c:03:02:
                    ce:e2:f2:89:f8:bb:63:cd:86:ae:ac:21:40:4d:fe:
                    26:f5:61:91:88:78:0b:46:9b:0b:97:7a:0c:f3:f4:
                    1a:91:87:08:aa:b3:25:01:92:2c:08:54:98:a6:c3:
                    8a:8b:69:ce:35:ee:a0:96:43:c4:23:2f:29:97:30:
                    11:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:44:2E:23:CD:38:68:6A:E3:B7:41:E5:CC:D4:9B:3B:F5:EA:A8:2C
            X509v3 Authority Key Identifier:
                keyid:56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/323830303a3363303a3a2f33322d3438203d3e203139383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:b1:d2:32:b3:47:a0:02:f3:5c:8e:65:7e:f0:a9:0d:4f:65:
         dc:b7:65:fa:4d:44:f2:b7:78:aa:c4:5d:87:17:96:3f:6f:09:
         56:f8:57:2e:63:0e:36:ec:76:cf:25:dc:62:9d:65:b4:41:26:
         24:9c:c2:5c:51:48:61:0f:51:88:71:ad:ec:aa:43:80:04:f9:
         5c:2a:b3:ca:21:82:2d:88:94:12:9c:1f:89:f3:ac:93:bb:2b:
         b2:a0:e9:a9:1f:1c:69:e3:27:0b:23:46:79:ce:fc:6d:7e:2a:
         c9:b7:2b:a2:41:80:b9:42:9a:3c:49:3f:b3:91:8f:b9:d0:2b:
         c8:d2:13:76:41:52:2d:9a:d0:41:c7:df:72:df:91:07:fa:01:
         66:29:59:c1:00:cb:21:f1:d2:bf:26:fe:62:ee:f2:99:ea:b2:
         e6:d0:e1:67:a2:c4:c1:6f:86:6a:8f:c0:37:2e:dd:80:f0:88:
         fa:27:fd:6d:bb:28:cf:18:07:28:58:bb:34:a7:bb:38:78:fc:
         79:0d:48:a6:d3:fe:d0:b6:38:c9:00:48:dd:bf:59:d7:03:44:
         c6:64:e5:5d:ca:b5:bb:b3:23:34:a9:65:52:4e:20:b2:10:45:
         01:c0:86:ec:77:0c:81:c5:7e:c1:4b:8e:8a:57:de:a7:90:8d:
         0a:81:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----