Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3830303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3830303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          kt+qcSL0iKVv90iXxeFqJK9PEEc4wlrxvCE64+aLXUU=
Subject key identifier:   4C:4F:7A:5D:9A:2B:E5:A4:8F:22:57:3D:82:D2:4B:3C:76:BF:86:D4
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       7FA1ECC9C9C729A34E1410CD466C683216968A12
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3830303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:56 +0000
ROA not before:           Tue 05 Mar 2024 17:42:56 +0000
ROA not after:            Tue 04 Mar 2025 17:47:56 +0000
asID:                     264824
IP address blocks:        2803:e360:800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a1:ec:c9:c9:c7:29:a3:4e:14:10:cd:46:6c:68:32:16:96:8a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:56 2024 GMT
            Not After : Mar  4 17:47:56 2025 GMT
        Subject: CN=4C4F7A5D9A2BE5A48F22573D82D24B3C76BF86D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:77:37:ca:36:df:72:3e:4f:2f:84:34:eb:
                    9a:35:9d:8b:86:26:8f:c0:83:cf:76:7f:4f:1e:62:
                    53:69:63:08:0a:b2:bc:6b:99:b6:05:1a:e6:82:67:
                    65:f5:fc:c8:88:e5:cb:d8:c5:e6:d6:24:28:68:a6:
                    bc:83:b3:ef:e3:3d:31:35:9b:68:d9:7d:e3:07:b2:
                    df:7c:93:c8:7d:b7:d0:31:5f:f1:0b:8c:d6:92:7e:
                    0d:bc:79:f2:20:32:f6:25:25:0b:53:e2:ff:06:42:
                    7a:d4:16:7f:d6:45:32:67:f3:3c:d2:60:54:24:00:
                    e3:ab:e4:a6:e7:9e:68:d4:5a:8f:96:40:36:c1:0b:
                    95:af:7a:38:80:11:a7:38:ef:d4:38:77:41:a4:5b:
                    46:9b:e7:f1:f5:ed:98:b6:8f:39:88:26:09:38:90:
                    81:14:ff:a1:98:f1:ce:f1:b5:48:ab:34:fe:2d:9d:
                    09:9b:a9:2b:ca:ed:0a:c0:93:68:1e:2e:c8:f9:df:
                    a0:ce:b1:a3:84:23:71:7a:01:9e:43:da:86:22:00:
                    11:56:28:ac:2c:3a:8a:ee:8e:d9:40:6c:26:15:75:
                    63:21:0a:c4:1a:5d:dc:f2:d9:a7:8b:94:a5:6b:dc:
                    fb:b1:bb:99:89:13:05:71:b5:ff:e7:a6:31:0d:67:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4F:7A:5D:9A:2B:E5:A4:8F:22:57:3D:82:D2:4B:3C:76:BF:86:D4
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3830303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:b5:e2:6d:96:b0:5c:08:e5:69:87:0e:3e:ee:ad:da:f1:43:
         b1:29:91:bd:18:17:96:b7:93:00:e5:f3:d7:72:fc:7e:b4:e9:
         f0:a0:3b:b3:98:b9:cc:53:99:1b:52:ed:01:84:41:9f:2a:b1:
         a3:d3:bd:14:09:af:06:c2:2a:5e:b4:1e:04:59:c0:a0:8f:ae:
         7c:4f:63:1b:b7:15:30:2b:02:09:df:1c:5d:16:cb:08:96:3d:
         0e:8b:2d:cb:0a:92:0d:88:f1:92:ff:bc:fe:29:d7:2e:aa:ef:
         14:12:fa:ff:84:e3:9d:83:e0:c3:0e:4a:0c:56:c8:fa:b2:1b:
         a9:29:cc:62:42:62:40:e1:10:94:1b:6d:cf:7b:9d:8e:cc:6b:
         f5:bd:c0:87:d1:47:1c:f2:0e:2f:11:80:29:9e:bf:20:f7:01:
         ea:d6:44:48:30:2c:b7:9f:56:50:9c:82:f0:33:17:b6:69:66:
         83:94:d8:d5:e0:fd:8e:d1:f0:8e:b1:a2:03:24:7c:67:84:06:
         cf:12:73:24:b5:56:90:2c:d9:39:04:50:db:c4:ec:ba:30:02:
         af:49:b4:ee:c6:00:be:67:98:98:75:a9:64:e5:70:6a:4b:b2:
         f4:e0:41:0c:68:86:be:79:5b:e2:8a:a6:96:22:9a:43:4f:d1:
         3d:d5:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----