Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3a2f34302d3430203d3e20323634383234.roa
File:                     323830333a653336303a3a2f34302d3430203d3e20323634383234.roa (raw, json)
Hash identifier:          j97OFS9K389ou0VMs7VlCc8dAKgKcPGiTP5UR2urlac=
Subject key identifier:   43:A6:C0:85:56:93:AC:43:AD:11:26:62:75:C9:39:60:C5:CB:E2:9D
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       28CFEEF437278553819AE5387018896BB1E31D95
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3a2f34302d3430203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:56 +0000
ROA not before:           Tue 05 Mar 2024 17:42:56 +0000
ROA not after:            Tue 04 Mar 2025 17:47:56 +0000
asID:                     264824
IP address blocks:        2803:e360::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cf:ee:f4:37:27:85:53:81:9a:e5:38:70:18:89:6b:b1:e3:1d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:56 2024 GMT
            Not After : Mar  4 17:47:56 2025 GMT
        Subject: CN=43A6C0855693AC43AD11266275C93960C5CBE29D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d0:6d:f9:d8:91:d8:b9:8d:9f:f6:08:9c:6f:
                    ff:50:da:3f:7e:44:dc:0a:fd:d1:f7:19:16:d6:00:
                    bd:f7:5a:32:e6:d0:cd:61:0e:70:64:38:2d:3d:70:
                    a9:fd:63:7f:d8:ca:55:e4:0d:c2:de:f9:2f:df:0d:
                    74:85:48:f6:f0:5d:30:34:45:44:c7:1a:c8:94:90:
                    02:07:dd:b1:49:9b:83:a2:fd:f9:57:28:f9:65:85:
                    38:64:f7:30:49:6e:f4:1d:5d:a0:76:7c:bd:63:7e:
                    6e:64:4c:21:01:d2:27:d6:21:88:d3:8a:a9:7c:71:
                    61:24:14:54:15:85:0e:9c:56:1d:6a:0b:02:d6:7d:
                    1b:d7:2b:ed:76:97:72:b4:1b:76:74:7c:6b:7d:e4:
                    b1:e3:74:e1:8f:48:15:37:44:68:f2:2a:11:3f:28:
                    1a:46:d0:60:67:bf:bd:13:2a:e3:c3:d0:a6:58:26:
                    3d:33:42:3b:f0:5a:2e:fe:ad:5b:de:21:f6:da:09:
                    42:3a:7c:c2:40:ad:90:e3:61:3d:96:bb:ee:93:e1:
                    f1:87:5d:b7:41:75:bd:14:a8:78:d7:4f:5b:09:2d:
                    97:13:f5:9b:97:b8:84:36:09:0e:cb:86:a0:57:be:
                    f7:34:28:e6:ce:85:57:7b:bc:f5:c0:93:88:2b:93:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A6:C0:85:56:93:AC:43:AD:11:26:62:75:C9:39:60:C5:CB:E2:9D
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/323830333a653336303a3a2f34302d3430203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e360::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:15:b1:d6:f6:a2:2d:9d:c5:d9:14:06:39:df:12:b0:f1:0c:
         25:ed:cf:0d:79:a6:8d:af:d1:ca:1e:01:1d:84:b1:72:b1:d2:
         f4:d8:54:6f:2d:e7:3d:aa:62:ae:38:68:b1:b0:6f:be:1d:93:
         2d:39:d2:56:a5:7f:82:4f:22:66:5a:ff:62:c5:f9:fe:64:ba:
         45:a8:50:db:5b:db:a1:05:29:5c:92:f1:24:66:2e:0e:a0:37:
         60:97:83:03:15:d8:9a:7a:ae:fc:0d:20:59:1a:2f:81:b7:38:
         b3:62:4a:88:bb:f6:a5:67:a7:77:7d:16:5b:8d:4f:71:42:d1:
         8c:31:af:b2:87:d7:29:84:bd:d7:c3:08:4c:09:43:6d:45:2c:
         70:33:61:ed:be:c5:89:ee:ef:ac:17:76:2b:3a:49:c3:2b:cc:
         4e:10:03:64:4c:65:19:41:39:31:8e:fb:c5:58:ac:aa:28:42:
         43:48:be:5d:ff:13:48:16:78:2c:9c:af:d1:3e:cc:c6:83:de:
         20:2e:96:4d:6c:47:6e:08:f8:ff:8d:79:f1:67:c9:f6:4c:31:
         47:93:a4:c1:8f:ba:81:0b:62:61:9c:d4:bf:49:06:0d:70:23:
         1c:69:9d:b8:05:5d:fb:f6:02:a4:7d:f3:d9:fc:75:07:ab:4a:
         f1:13:b5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----