Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B931A30E7EBDF56BC20A4F4F5A4090CBF27966EAEB82C680E2B8A818A0AD79B9/0/323830333a343439303a3a2f33322d3438203d3e20323732383134.roa
File:                     323830333a343439303a3a2f33322d3438203d3e20323732383134.roa (raw, json)
Hash identifier:          EgXjc4VPjDOMkIS4BCFPqyXDGtrIOIdA8RzneuZ028Q=
Subject key identifier:   34:D0:A9:BB:32:7F:5E:C1:B3:41:33:EB:A0:F1:3B:22:FA:75:7E:FF
Certificate issuer:       /CN=9106E77B7B9F4207D5A5ED92F94E91A69096C4D5
Certificate serial:       2E1B5655675DCEC74AA5818D4A4B8F7DD753FAD9
Authority key identifier: 91:06:E7:7B:7B:9F:42:07:D5:A5:ED:92:F9:4E:91:A6:90:96:C4:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9106E77B7B9F4207D5A5ED92F94E91A69096C4D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B931A30E7EBDF56BC20A4F4F5A4090CBF27966EAEB82C680E2B8A818A0AD79B9/0/323830333a343439303a3a2f33322d3438203d3e20323732383134.roa
Signing time:             Tue 05 Mar 2024 17:52:31 +0000
ROA not before:           Tue 05 Mar 2024 17:47:31 +0000
ROA not after:            Tue 04 Mar 2025 17:52:31 +0000
asID:                     272814
IP address blocks:        2803:4490::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1b:56:55:67:5d:ce:c7:4a:a5:81:8d:4a:4b:8f:7d:d7:53:fa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9106E77B7B9F4207D5A5ED92F94E91A69096C4D5
        Validity
            Not Before: Mar  5 17:47:31 2024 GMT
            Not After : Mar  4 17:52:31 2025 GMT
        Subject: CN=34D0A9BB327F5EC1B34133EBA0F13B22FA757EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bf:37:96:be:ab:6c:90:2a:1d:d5:1c:5b:a4:
                    11:b7:3d:02:43:ae:12:5b:a5:e1:6a:38:a2:b9:3c:
                    13:3c:e2:8c:23:fa:50:8c:f4:7c:63:e4:42:24:02:
                    6d:f3:cd:ff:08:88:a5:d6:8f:23:c5:71:88:fe:c6:
                    41:2c:4e:d5:a2:b8:e8:46:27:9d:a1:6e:7d:1a:fb:
                    94:c0:c6:23:2d:8d:73:49:e7:00:f6:d0:21:89:22:
                    cc:c1:7d:36:cd:11:5e:06:6a:0b:d3:9a:e7:f1:e5:
                    97:d2:24:e5:d0:c4:6f:fc:77:3f:9f:92:8a:60:b4:
                    eb:aa:61:ac:1c:fa:22:88:51:e6:c6:fb:42:e4:be:
                    9a:0f:1c:82:e2:66:87:31:ac:3c:25:ff:00:9b:b8:
                    83:b2:f0:02:01:e1:e1:ca:73:0f:e3:43:5a:a9:6f:
                    8e:13:92:b9:67:86:9f:98:52:62:71:f2:6a:37:ff:
                    b3:a3:54:81:57:af:38:db:09:65:b5:6d:70:3f:98:
                    81:fa:20:35:3d:41:4c:a6:27:0b:85:c8:8e:de:bc:
                    38:4d:4d:8b:37:e6:a4:cd:cb:03:eb:19:0b:53:09:
                    8e:bd:8c:07:bb:7c:15:51:20:d7:82:65:a9:f5:ed:
                    b4:06:47:3c:c2:ea:c6:c6:fc:8b:d1:e9:eb:b6:bd:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D0:A9:BB:32:7F:5E:C1:B3:41:33:EB:A0:F1:3B:22:FA:75:7E:FF
            X509v3 Authority Key Identifier:
                keyid:91:06:E7:7B:7B:9F:42:07:D5:A5:ED:92:F9:4E:91:A6:90:96:C4:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B931A30E7EBDF56BC20A4F4F5A4090CBF27966EAEB82C680E2B8A818A0AD79B9/0/9106E77B7B9F4207D5A5ED92F94E91A69096C4D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9106E77B7B9F4207D5A5ED92F94E91A69096C4D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B931A30E7EBDF56BC20A4F4F5A4090CBF27966EAEB82C680E2B8A818A0AD79B9/0/323830333a343439303a3a2f33322d3438203d3e20323732383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4490::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:2b:8f:b3:3e:f7:a2:6f:3f:37:5c:26:c1:1f:ce:11:36:2e:
         c2:65:78:31:60:f4:0b:29:a9:80:51:40:8a:80:79:87:e7:4c:
         2a:dc:60:86:46:63:55:8a:14:ae:a2:19:67:10:a0:9e:fd:1e:
         bc:81:1c:2a:b0:06:b2:ac:dd:7f:3b:1d:a5:8f:74:03:db:c7:
         27:fe:99:3b:1a:9d:79:e6:11:21:93:69:0d:f9:09:d5:70:e3:
         d6:13:c6:dd:e7:7c:df:e2:85:e9:04:c9:81:a7:1b:9d:b9:4b:
         dd:26:8a:a2:d8:07:3b:b7:0d:f6:65:5d:1c:d0:9d:b1:cb:c8:
         b3:97:92:fb:9c:2f:38:6c:57:88:08:9b:b5:31:09:61:e2:69:
         04:2c:0e:d5:a4:50:30:f8:78:38:2d:82:11:9d:89:a3:62:f4:
         3e:54:1f:86:65:01:d0:6f:c2:58:6e:e3:17:ed:c2:1b:24:47:
         c1:27:5e:cf:43:9b:7d:c8:d7:de:89:2e:71:bf:3e:66:89:4a:
         35:b6:98:bb:bc:b0:fe:b4:dd:72:51:de:be:49:34:4b:9a:f3:
         87:3d:cf:f4:4d:26:c8:32:9f:93:94:8b:c5:53:34:b7:6e:1d:
         1c:8a:8c:c0:d2:9e:f1:51:a6:76:a2:e1:4c:c2:5a:c1:ff:03:
         ee:6a:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----