Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/323830333a363932303a3a2f33322d3332203d3e20323636363730.roa
File:                     323830333a363932303a3a2f33322d3332203d3e20323636363730.roa (raw, json)
Hash identifier:          cHahyPT7nlU1zuD4liIu+NIFrVN66ntPZ+CbghIhWqk=
Subject key identifier:   D4:BE:1C:AE:79:92:BA:EA:3A:0A:5B:A9:9F:E2:07:EA:9E:4B:24:AB
Certificate issuer:       /CN=841EE6C0920D7F05C7686B132A17AE71FCC549B8
Certificate serial:       4AAADE8253FFA5663F8684901CEB9983A48F81B9
Authority key identifier: 84:1E:E6:C0:92:0D:7F:05:C7:68:6B:13:2A:17:AE:71:FC:C5:49:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/323830333a363932303a3a2f33322d3332203d3e20323636363730.roa
Signing time:             Tue 05 Mar 2024 18:05:48 +0000
ROA not before:           Tue 05 Mar 2024 18:00:48 +0000
ROA not after:            Tue 04 Mar 2025 18:05:48 +0000
asID:                     266670
IP address blocks:        2803:6920::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:aa:de:82:53:ff:a5:66:3f:86:84:90:1c:eb:99:83:a4:8f:81:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841EE6C0920D7F05C7686B132A17AE71FCC549B8
        Validity
            Not Before: Mar  5 18:00:48 2024 GMT
            Not After : Mar  4 18:05:48 2025 GMT
        Subject: CN=D4BE1CAE7992BAEA3A0A5BA99FE207EA9E4B24AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:da:25:0a:52:23:5a:20:2d:8b:a3:a1:50:0b:
                    e4:95:98:73:1c:47:48:0d:85:12:38:71:85:cc:b0:
                    53:02:0b:f9:ea:e1:a9:c0:77:e5:d0:63:c1:3e:0f:
                    f1:28:9f:59:5e:15:5a:8f:44:d0:00:95:4c:c3:bc:
                    8c:ad:21:38:d8:cb:53:ef:9d:7e:35:62:e0:c8:e6:
                    5f:e1:79:67:c4:23:c3:b6:5a:13:9f:29:25:46:6b:
                    b8:15:4a:48:d2:d5:85:75:79:cd:df:f5:ea:f3:24:
                    64:8a:ea:4c:41:2d:2e:e4:6f:b0:dc:e2:06:70:23:
                    70:5e:6a:82:9e:25:81:2d:8d:88:d7:e3:54:ba:9d:
                    a3:c1:c2:d6:ee:4a:88:cb:1c:68:a5:ba:12:38:3d:
                    c8:e9:9d:9d:60:3e:b9:a8:22:17:a3:5d:28:ad:a3:
                    61:9e:ef:e2:05:b8:49:61:96:e5:25:cf:f2:77:dc:
                    4e:3e:79:23:87:43:1c:81:b7:d3:9a:28:53:b2:3f:
                    31:c7:b2:d0:2f:86:f6:45:51:e9:1c:95:b1:17:46:
                    c5:59:57:ee:2f:bc:d5:48:08:f0:16:5c:0c:f3:55:
                    ca:f6:dc:0e:eb:ef:4f:fd:e8:8b:0c:10:29:18:0f:
                    99:d8:38:de:77:de:60:2c:b6:a3:1d:09:5f:5d:13:
                    22:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BE:1C:AE:79:92:BA:EA:3A:0A:5B:A9:9F:E2:07:EA:9E:4B:24:AB
            X509v3 Authority Key Identifier:
                keyid:84:1E:E6:C0:92:0D:7F:05:C7:68:6B:13:2A:17:AE:71:FC:C5:49:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841EE6C0920D7F05C7686B132A17AE71FCC549B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD01AE1AE0B334DC5993A1822F3322B117D689C14E8CE16BFFCF452E46929DD2/0/323830333a363932303a3a2f33322d3332203d3e20323636363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6920::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:5b:e8:50:5c:bf:4a:f7:3a:44:ca:71:99:9c:8d:9c:13:ce:
         2f:1b:fa:f4:07:da:cc:30:6e:56:b0:e9:8f:4d:a7:fa:66:c6:
         7c:07:c6:e1:b5:7d:bb:d7:5a:5b:c8:d7:36:d4:14:fa:22:1e:
         be:e0:fc:c5:1b:41:66:40:10:91:d2:46:6d:76:0d:44:fb:33:
         4e:4c:0e:a9:cd:1c:19:c5:f4:1a:f0:a6:d3:9c:a2:7d:bb:fe:
         e0:fd:fb:7c:c0:01:b0:39:e5:8d:19:ea:e8:ba:33:32:6b:e2:
         fe:19:fb:27:28:88:fb:f9:4f:96:f8:7c:ab:80:0e:43:8c:4e:
         e0:2b:88:d0:eb:85:64:bb:21:11:2b:d9:63:27:85:b6:43:71:
         aa:be:b5:cd:34:18:02:f6:ed:3d:30:c6:cc:72:d6:4d:fb:4f:
         b1:8e:20:49:af:81:73:66:10:62:2c:7c:55:b7:74:84:fa:72:
         bf:52:25:e3:ce:04:19:b6:65:55:20:6f:88:ad:4c:f7:b3:4d:
         ad:3c:77:8c:e0:9a:c6:8e:3a:a7:ac:2d:6d:3c:85:61:58:c2:
         6d:d3:31:3d:1d:05:dc:3d:79:c7:1d:68:76:8f:74:8f:b1:84:
         3a:c7:ac:59:bf:75:71:a8:10:44:28:c3:95:ca:35:f6:99:32:
         8a:8e:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----