Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3a2f33322d3438203d3e203238303332.roa
File:                     323830303a3635303a3a2f33322d3438203d3e203238303332.roa (raw, json)
Hash identifier:          qYtTHUZnxhRkar8SrozzY/XrlHw1EgfyyoRFRFQmGjk=
Subject key identifier:   E8:5A:79:3E:66:2A:86:6C:96:24:27:A1:A3:FF:EC:FC:09:49:8C:B7
Certificate issuer:       /CN=8E9E896ADF8041E07AB6735225935260B837E74D
Certificate serial:       096C26E003988A101BF917F6D0E3333FAF7974EA
Authority key identifier: 8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3a2f33322d3438203d3e203238303332.roa
Signing time:             Tue 05 Mar 2024 18:14:01 +0000
ROA not before:           Tue 05 Mar 2024 18:09:01 +0000
ROA not after:            Tue 04 Mar 2025 18:14:01 +0000
asID:                     28032
IP address blocks:        2800:650::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6c:26:e0:03:98:8a:10:1b:f9:17:f6:d0:e3:33:3f:af:79:74:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9E896ADF8041E07AB6735225935260B837E74D
        Validity
            Not Before: Mar  5 18:09:01 2024 GMT
            Not After : Mar  4 18:14:01 2025 GMT
        Subject: CN=E85A793E662A866C962427A1A3FFECFC09498CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:dd:ec:98:26:07:ee:5f:70:f0:03:d0:c0:
                    45:a2:82:36:6c:5e:2f:0d:31:ee:8a:b4:53:e4:3a:
                    6d:ea:7c:bc:b8:43:a2:07:d7:1d:7c:d3:70:b5:b1:
                    65:aa:51:28:da:28:ce:ac:cb:a4:43:f0:13:45:7e:
                    aa:42:19:51:4c:d3:62:54:61:f4:0c:1c:ae:94:71:
                    ab:ac:36:e0:f9:63:0c:d1:82:97:f6:fe:5b:ee:d0:
                    50:69:ab:0a:52:46:44:b6:fb:a7:a9:de:d2:ba:27:
                    bb:a6:fa:f2:e8:9d:d9:28:a7:0b:b4:bc:6a:5a:ca:
                    38:50:b6:9b:81:40:9c:e4:cb:29:1c:5d:c3:91:dd:
                    dd:1f:be:9b:32:ea:0b:73:c9:01:e0:ed:a3:a5:24:
                    a9:c1:de:22:ac:da:7b:8d:b9:1d:95:be:f8:66:74:
                    6f:14:43:a9:9b:c5:46:b3:e5:51:d7:be:4c:54:19:
                    ff:80:18:34:c4:ba:35:e5:45:41:82:9e:ba:89:c7:
                    20:a1:50:e9:59:bf:b0:0f:06:95:96:5c:6d:35:39:
                    de:9e:c3:91:19:00:ff:bf:60:c4:64:63:f2:9f:9a:
                    dc:33:43:65:5e:83:2f:19:b4:54:ba:65:07:20:ce:
                    69:8c:3b:ba:29:64:78:4a:83:6f:d7:f3:83:dd:e3:
                    9e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5A:79:3E:66:2A:86:6C:96:24:27:A1:A3:FF:EC:FC:09:49:8C:B7
            X509v3 Authority Key Identifier:
                keyid:8E:9E:89:6A:DF:80:41:E0:7A:B6:73:52:25:93:52:60:B8:37:E7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/8E9E896ADF8041E07AB6735225935260B837E74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E9E896ADF8041E07AB6735225935260B837E74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAA3EE0AE062593ADBA5CEAB6EA414E942EE2D9BA2346BD02B1DD1AFE9415340/0/323830303a3635303a3a2f33322d3438203d3e203238303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:650::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:68:d0:9b:31:b8:62:7f:30:d5:87:ce:8f:df:ee:a8:1c:e8:
         89:4c:d3:9f:45:34:ce:42:49:e7:61:93:3f:bb:d1:a4:92:29:
         88:3b:a3:bb:9d:0a:1e:99:8d:fc:6a:30:f5:3b:0c:5a:ac:b4:
         d2:41:09:86:47:92:3f:aa:2a:98:b1:87:4d:74:10:85:d1:8f:
         e2:d1:68:4d:a7:03:64:a9:dc:06:75:1e:2c:11:e2:ff:f3:80:
         ee:3f:31:9a:d6:a1:78:42:3b:d6:4a:12:ab:00:2f:69:93:e1:
         16:7b:ac:24:1d:6a:1d:f7:23:3d:89:9b:99:7b:92:ec:67:1f:
         73:78:a6:b6:0b:7f:5d:6c:3a:26:5d:69:5a:eb:20:d9:fd:c4:
         51:af:d3:21:9d:c0:b4:27:94:87:40:33:f7:35:36:73:83:d6:
         31:30:a4:ae:14:fd:0e:d1:15:33:26:c1:2e:fa:d9:98:22:6e:
         13:ff:04:ba:1f:03:ae:ac:86:03:ff:29:9a:9c:c1:ea:c2:bc:
         d0:30:af:67:f3:fb:92:dc:c8:42:35:2d:a7:a5:d2:99:c9:0b:
         d2:b2:c1:86:eb:a0:bd:87:8a:e1:f7:85:ff:39:61:1a:8f:bd:
         05:2e:d1:a0:1c:75:ec:90:b9:71:24:a4:bc:9f:f1:9c:f8:73:
         ba:99:25:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----