Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f33322d3430203d3e20323633373332.roa
File:                     323830333a616638303a3a2f33322d3430203d3e20323633373332.roa (raw, json)
Hash identifier:          oGTGqmqwQTC2nwQsFtpD8Ax6Zplw29JxeTy8SGilbbw=
Subject key identifier:   40:C8:BF:F0:24:A4:88:BA:D9:AF:8E:26:7B:07:0F:56:46:20:26:E3
Certificate issuer:       /CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
Certificate serial:       3F19310B862992BD5368718C3BE9FD20D1C9A36E
Authority key identifier: D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f33322d3430203d3e20323633373332.roa
Signing time:             Fri 25 Oct 2024 19:10:00 +0000
ROA not before:           Fri 25 Oct 2024 19:05:00 +0000
ROA not after:            Fri 24 Oct 2025 19:10:00 +0000
asID:                     263732
IP address blocks:        2803:af80::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:19:31:0b:86:29:92:bd:53:68:71:8c:3b:e9:fd:20:d1:c9:a3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65CF4F69AC888255A41BFC6B6F0E71DA81E954B
        Validity
            Not Before: Oct 25 19:05:00 2024 GMT
            Not After : Oct 24 19:10:00 2025 GMT
        Subject: CN=40C8BFF024A488BAD9AF8E267B070F56462026E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:1a:74:cb:8b:81:85:be:53:8a:68:17:6d:
                    2e:a2:6a:57:38:d9:4d:3e:2e:96:8d:42:2a:17:23:
                    a9:3a:e5:ac:44:97:c8:49:a8:90:3e:d4:91:a4:75:
                    7a:b8:b8:15:55:bf:10:4e:19:5e:c4:73:32:5a:89:
                    25:fc:b5:35:f5:38:21:84:b3:10:0b:c2:95:4c:95:
                    ed:1b:55:a2:1a:ef:24:a4:45:48:65:10:55:7e:29:
                    4d:0d:a3:b9:fa:1f:a2:19:bc:4a:7c:7c:77:85:85:
                    64:4e:d6:04:65:53:f8:7b:c3:67:7e:8f:a3:e3:6f:
                    a3:81:34:14:81:ed:91:e1:4d:fe:d4:19:dc:c3:89:
                    18:fe:4e:e4:da:f5:f8:5f:95:b0:14:b3:0d:5c:56:
                    f6:68:d8:53:d7:aa:38:d6:3c:a4:6d:81:36:b8:80:
                    42:cd:18:24:7e:b0:16:8a:c7:15:41:a2:20:45:1b:
                    bf:66:08:1d:27:fd:78:56:50:2d:f7:ab:c9:be:ba:
                    f3:73:29:f8:92:00:3c:a1:0d:58:2b:18:03:0d:a1:
                    6b:69:41:fd:37:c2:52:1c:44:b7:17:a5:ee:f1:24:
                    1a:f3:e3:a7:e3:15:09:56:a4:1f:3b:f1:cf:af:16:
                    61:5c:63:4c:c4:ce:f3:fb:ca:73:af:dc:31:6b:57:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C8:BF:F0:24:A4:88:BA:D9:AF:8E:26:7B:07:0F:56:46:20:26:E3
            X509v3 Authority Key Identifier:
                keyid:D6:5C:F4:F6:9A:C8:88:25:5A:41:BF:C6:B6:F0:E7:1D:A8:1E:95:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D65CF4F69AC888255A41BFC6B6F0E71DA81E954B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93A405E251909F45EA913549566D13AC5D5174516056919C96013F4AF65E4FC/0/323830333a616638303a3a2f33322d3430203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af80::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:f5:69:a0:93:fa:b9:7f:ac:7c:4f:6b:af:5e:c7:ec:fc:76:
         88:1c:b1:8d:77:7d:d3:26:ef:c5:a3:76:bb:50:b2:44:8c:d1:
         1f:d1:a4:e1:c3:8b:70:1e:3f:50:17:4b:98:da:74:d5:67:dc:
         b1:3d:66:c8:5c:09:e6:7b:2b:64:3d:70:57:26:7e:7a:9f:d4:
         91:93:75:e1:ac:58:2c:c9:80:9d:c8:16:95:d5:2e:f4:b6:fb:
         16:13:b1:33:fc:20:f7:9b:61:d5:12:fd:29:96:19:13:32:80:
         7c:18:7d:da:44:f8:6f:4e:a1:8c:43:0f:d4:94:72:6d:20:52:
         f0:45:fa:e4:3e:94:27:f7:bf:59:cb:00:83:bf:5d:d8:51:01:
         62:44:6f:52:d4:1c:ea:b5:d0:c3:c8:4a:dc:9d:0c:6b:4e:b2:
         73:a8:9f:3e:a5:2f:73:c2:b4:f9:4b:86:df:39:20:c1:f1:cc:
         6b:6a:09:15:85:2c:fa:c9:5e:80:97:6d:8f:c4:5e:4b:68:52:
         0e:e3:91:cc:12:3d:58:84:89:57:4a:86:f8:f1:72:33:95:2c:
         8c:b7:e1:ae:10:43:4f:88:63:42:20:2c:d8:78:cf:7a:8d:e1:
         f9:59:7c:d9:61:de:43:66:3c:a7:b7:02:9a:6b:e3:74:b2:13:
         08:79:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----