Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/323830333a336232303a3a2f33322d3438203d3e203532333431.roa
File:                     323830333a336232303a3a2f33322d3438203d3e203532333431.roa (raw, json)
Hash identifier:          YHxgVcSz1SC5QzS11+RYt3jZGabRyB+xc6TyAhcUDjQ=
Subject key identifier:   EF:85:6A:E2:D7:F3:F5:33:6A:2C:B4:8C:1D:3B:01:85:E8:DE:D5:5C
Certificate issuer:       /CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603
Certificate serial:       3D8DDFCF35C1DCB5A95C911336915E0A909A9D96
Authority key identifier: DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/323830333a336232303a3a2f33322d3438203d3e203532333431.roa
Signing time:             Tue 05 Mar 2024 18:13:56 +0000
ROA not before:           Tue 05 Mar 2024 18:08:56 +0000
ROA not after:            Tue 04 Mar 2025 18:13:56 +0000
asID:                     52341
IP address blocks:        2803:3b20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8d:df:cf:35:c1:dc:b5:a9:5c:91:13:36:91:5e:0a:90:9a:9d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603
        Validity
            Not Before: Mar  5 18:08:56 2024 GMT
            Not After : Mar  4 18:13:56 2025 GMT
        Subject: CN=EF856AE2D7F3F5336A2CB48C1D3B0185E8DED55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:9e:12:98:5a:10:3b:c3:4e:1e:ee:e4:78:
                    a4:11:7b:5d:31:7f:c4:6f:db:fc:f1:5a:bc:4a:ad:
                    ba:7a:62:a3:9c:28:eb:c4:62:85:a1:6c:2b:b6:0b:
                    f8:12:cf:04:0c:43:be:99:3b:64:11:cf:01:a4:b3:
                    7d:0b:7c:1b:51:5b:cb:a5:43:69:d4:a7:9b:a2:96:
                    0f:f5:8b:c4:15:11:48:c2:f4:d5:1d:cd:a5:95:5c:
                    67:61:c8:9e:0c:7f:f9:b5:72:90:80:91:ee:f8:9e:
                    7d:a2:26:bb:29:3b:35:8b:e3:a7:6b:55:e5:3d:1d:
                    2e:95:8f:ec:28:27:ff:57:3c:4f:a7:e7:f2:f7:63:
                    3d:69:6f:5f:84:3d:08:81:27:df:73:7e:68:1c:90:
                    7a:6c:e3:05:c3:89:67:dd:6d:a2:73:e2:57:cf:ed:
                    2c:04:4f:79:fc:93:8f:2f:85:85:c3:58:a8:93:fc:
                    0b:53:f5:c2:27:99:c8:09:cc:be:48:60:5e:e4:30:
                    df:92:8a:aa:8e:ee:f1:77:97:4d:40:8d:33:68:15:
                    bc:df:a1:1c:37:9c:38:6f:c7:71:e2:ec:f2:90:69:
                    f6:45:e0:1c:cf:bd:c9:50:7d:aa:6b:73:0b:ca:df:
                    1a:b6:31:47:2c:73:a1:97:57:53:89:6d:15:e0:8f:
                    15:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:85:6A:E2:D7:F3:F5:33:6A:2C:B4:8C:1D:3B:01:85:E8:DE:D5:5C
            X509v3 Authority Key Identifier:
                keyid:DD:83:A3:8C:1B:92:6C:D5:F2:F9:74:1F:8A:FE:E7:C3:17:9D:66:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD83A38C1B926CD5F2F9741F8AFEE7C3179D6603.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB9511EBA9E6BCCA39A0C407DBEBE3EEF1F1026FE4366A6831E1B9043706886D/0/323830333a336232303a3a2f33322d3438203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:e0:ce:58:00:11:9a:3d:c0:9e:fe:2d:51:db:de:93:01:a2:
         23:17:b5:41:34:3c:84:f4:40:b8:bf:f2:65:f4:d5:13:75:85:
         34:b3:16:99:23:cd:c9:ed:e0:ae:16:96:51:85:86:47:90:ff:
         70:ad:ed:2a:3c:86:15:45:66:87:86:1d:38:80:69:63:0c:83:
         34:c9:0f:ad:04:49:29:6f:9a:99:20:9d:3d:e2:20:a8:1d:41:
         4e:93:ad:25:d1:a9:b1:85:0f:62:ea:1a:1b:9e:77:6a:71:dd:
         a1:70:1a:da:fa:3b:60:23:e5:30:12:83:15:e5:68:f5:a2:69:
         50:f6:d0:4d:aa:f1:3f:3b:63:ad:20:f6:83:50:e9:9f:de:47:
         c9:01:b1:e1:ac:f9:7e:2a:e2:c5:b7:5c:62:e3:30:99:b3:0d:
         10:53:65:c5:59:cf:86:5d:62:a9:d9:84:d8:68:6f:44:67:8e:
         f3:b7:b0:23:13:b2:e0:22:be:e3:d0:38:72:24:95:af:bd:63:
         8a:60:3d:2f:60:7f:f1:1f:c7:a3:52:64:a8:c8:e5:cb:27:4f:
         7d:8b:9c:a0:1a:d4:72:d0:6b:ea:de:3f:31:de:c2:13:eb:b0:
         11:df:d3:b4:8f:0a:ec:8d:c5:b5:d8:46:55:1f:4c:34:bd:96:
         3b:5f:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----