Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/323830333a333763303a3a2f33322d3438203d3e20323635373732.roa
File:                     323830333a333763303a3a2f33322d3438203d3e20323635373732.roa (raw, json)
Hash identifier:          IetQRqGDeO7wvJVHkdYY64xHLz8mQh1iARPVlV6id6U=
Subject key identifier:   28:74:D0:ED:DD:87:A1:52:A0:3F:D2:2E:5E:D9:55:88:24:F9:20:4B
Certificate issuer:       /CN=D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F
Certificate serial:       4671D1B3CC96F5535D450E20502578482352B009
Authority key identifier: D8:4B:72:D9:DA:12:C7:2C:CE:6A:15:DD:F8:50:F1:CC:5D:63:12:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/323830333a333763303a3a2f33322d3438203d3e20323635373732.roa
Signing time:             Tue 05 Mar 2024 17:55:59 +0000
ROA not before:           Tue 05 Mar 2024 17:50:59 +0000
ROA not after:            Tue 04 Mar 2025 17:55:59 +0000
asID:                     265772
IP address blocks:        2803:37c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:71:d1:b3:cc:96:f5:53:5d:45:0e:20:50:25:78:48:23:52:b0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F
        Validity
            Not Before: Mar  5 17:50:59 2024 GMT
            Not After : Mar  4 17:55:59 2025 GMT
        Subject: CN=2874D0EDDD87A152A03FD22E5ED9558824F9204B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:11:d0:03:24:d9:e2:33:82:2e:6e:53:69:
                    0c:5d:4e:8f:14:cc:99:5b:29:c0:97:4f:56:5f:23:
                    11:e9:7e:f2:98:0e:1f:f5:e6:77:db:f7:53:ee:21:
                    a9:2a:03:78:1c:95:a8:6e:8f:59:9c:38:0f:ac:38:
                    1b:1c:ae:b3:80:7b:6e:ea:42:d5:be:94:d9:5f:71:
                    d0:98:f1:4c:b2:e8:6b:3e:9e:ae:64:9d:0b:9c:60:
                    c2:ae:d2:71:fd:93:78:ec:85:ff:06:b5:82:b9:db:
                    18:e8:ab:5d:22:fc:eb:ba:ae:1b:48:a3:7c:22:d6:
                    1a:56:ee:69:3e:03:9a:6a:bb:58:51:79:d5:5b:df:
                    f2:49:d1:74:ee:93:a3:d5:ac:9b:da:56:d8:f9:f7:
                    b5:5f:77:4b:c5:9d:72:2f:90:97:b1:b8:6f:57:fe:
                    99:b4:fe:84:22:c7:6b:59:85:29:9a:2b:73:3f:ba:
                    dc:33:78:c3:5a:a7:32:f0:c9:7a:20:fe:8d:57:f0:
                    87:24:de:80:50:fa:1e:f7:2d:aa:17:94:17:fe:6c:
                    b2:40:75:25:9a:c2:55:c9:1c:e8:11:55:b4:90:91:
                    7d:9f:d4:22:28:23:02:3d:10:b7:dc:7f:89:6d:74:
                    05:d7:e1:54:ab:33:c2:ea:ff:93:c6:44:f0:20:5b:
                    60:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:74:D0:ED:DD:87:A1:52:A0:3F:D2:2E:5E:D9:55:88:24:F9:20:4B
            X509v3 Authority Key Identifier:
                keyid:D8:4B:72:D9:DA:12:C7:2C:CE:6A:15:DD:F8:50:F1:CC:5D:63:12:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D84B72D9DA12C72CCE6A15DDF850F1CC5D63122F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B99DE551A85129D230349456EB5C39EFB11AA3B33BDDD2B5A823435D41265A97/0/323830333a333763303a3a2f33322d3438203d3e20323635373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:37c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:39:60:3d:66:f1:15:75:83:34:12:39:58:43:81:10:a1:79:
         0d:92:85:5c:ef:20:51:d5:78:d6:16:3f:33:03:3b:a2:7d:64:
         db:8e:d9:ac:08:53:8f:b7:20:c5:ef:2a:53:fc:90:13:05:94:
         c8:ef:24:18:03:19:ae:3f:2f:68:44:b9:be:da:22:41:4a:18:
         72:15:63:41:ea:b3:4c:70:4f:37:b7:e9:66:26:97:1c:46:f8:
         48:01:ca:45:3d:ee:59:d9:aa:f0:3b:14:c3:19:ce:fa:23:1b:
         88:1e:92:66:04:d2:57:c0:30:f0:f0:b5:4e:69:86:ba:17:56:
         b6:2e:ef:cb:29:13:43:d4:38:f7:62:57:98:68:8b:0d:1a:66:
         21:00:42:e1:5a:04:de:c7:36:df:92:e3:64:2d:50:b5:13:c1:
         be:ec:dd:db:48:61:f9:dd:b4:8f:63:f8:f5:a6:82:b0:94:35:
         97:fb:57:b1:6d:24:cd:86:e8:a5:4c:c4:f1:ed:49:f3:65:32:
         d5:f9:59:bb:03:27:cc:b3:5b:0d:76:ca:44:e3:6d:ab:b8:e2:
         ad:2a:22:df:eb:82:44:ee:1b:fa:4d:9a:c1:9d:16:35:7d:3d:
         78:3a:29:86:db:4b:4a:a9:e3:32:39:01:81:8a:82:21:e8:38:
         32:ea:1c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----