Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/323830323a303a34373a3a2f34382d3438203d3e203138373437.roa
File:                     323830323a303a34373a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          m8TDYeV+uqr+wyPok/PIOcEHCRBpfi7KDJaWW226w94=
Subject key identifier:   44:3F:88:E7:A9:04:AF:E3:E6:C1:94:71:45:7E:4A:95:9D:49:5A:B8
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       3FF0A69D1E0E874F6593CC3F126890FAE99B2E6F
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/323830323a303a34373a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 17:59:18 +0000
ROA not before:           Tue 05 Mar 2024 17:54:18 +0000
ROA not after:            Tue 04 Mar 2025 17:59:18 +0000
asID:                     18747
IP address blocks:        2802:0:47::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f0:a6:9d:1e:0e:87:4f:65:93:cc:3f:12:68:90:fa:e9:9b:2e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:18 2024 GMT
            Not After : Mar  4 17:59:18 2025 GMT
        Subject: CN=443F88E7A904AFE3E6C19471457E4A959D495AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:f5:eb:b3:d3:d8:8a:e5:19:0d:fc:1e:ab:
                    d3:32:73:f1:78:4f:6c:68:1c:fb:dd:30:3d:55:18:
                    ca:32:e4:27:ed:8e:5a:b5:a3:f2:3d:51:6d:56:cd:
                    9c:29:c0:02:d0:c3:c8:2f:9a:0c:49:5c:bc:6f:81:
                    f2:91:10:33:ce:99:ea:94:d7:72:a1:3a:76:20:9a:
                    b0:bf:59:99:6d:fb:bd:8b:70:44:af:f9:62:b2:5f:
                    03:e0:18:b1:53:a8:6a:39:b7:b6:ab:81:f7:2b:9a:
                    ea:84:39:f5:68:47:82:ae:20:e1:66:56:83:96:df:
                    92:db:ea:c9:4c:4b:de:99:b4:4d:8b:c0:22:46:61:
                    4e:43:a6:f1:a2:73:b4:d0:ae:05:4d:6e:74:84:b0:
                    a2:fa:af:cb:c3:72:a6:ff:b3:44:c0:b9:2f:4f:35:
                    fc:98:36:b2:48:db:29:f7:63:e4:69:b9:78:3d:ef:
                    00:c2:33:54:1a:05:ba:0d:e8:74:e4:8a:21:0b:db:
                    ad:26:65:aa:fe:40:43:f8:b7:29:0b:6d:a9:34:f6:
                    eb:05:03:4a:24:e4:97:3b:ca:09:a6:b2:f9:00:6d:
                    e3:11:b4:5f:4a:27:4c:d5:20:6a:21:b4:f5:dd:bf:
                    c2:0c:59:2b:4e:f4:49:8f:bb:1e:f9:89:9a:59:19:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3F:88:E7:A9:04:AF:E3:E6:C1:94:71:45:7E:4A:95:9D:49:5A:B8
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/323830323a303a34373a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2802:0:47::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:00:ec:4d:61:30:8a:80:7d:d8:35:46:51:34:12:35:e4:97:
         69:9c:02:bf:4b:bb:0f:a2:ba:31:6b:4d:4e:bf:72:b7:1b:3e:
         0c:28:9f:fe:09:fd:0e:7d:a1:58:14:cf:7b:40:12:5d:1d:a5:
         50:4d:24:f1:bc:4d:14:53:2b:4d:7b:ab:8d:e4:6c:77:6b:76:
         f5:b0:c4:07:4d:96:90:7c:4f:78:3f:d4:ca:31:01:0d:d2:2f:
         8b:9f:95:ed:b5:eb:4a:b9:6e:58:00:71:36:0f:b1:ad:2d:43:
         8c:96:0c:8a:ba:74:65:de:fd:9e:8c:58:5f:34:54:97:1b:e3:
         25:8a:51:d0:f3:ed:ed:00:ea:43:9b:17:fb:0e:0a:1b:f7:04:
         c9:9a:23:99:4a:63:ff:ab:bb:46:98:35:a3:07:66:38:5f:c6:
         42:e5:cb:07:a6:00:c0:11:95:82:03:a1:bb:d0:0b:f9:3c:85:
         05:13:0d:1f:91:33:04:49:79:31:7c:0f:f2:7f:b1:77:14:c3:
         e5:02:8a:93:33:fb:96:54:88:de:68:63:d1:34:b8:61:87:9a:
         46:8f:c6:18:f0:bc:9f:29:8f:46:fa:e1:16:c1:73:69:96:09:
         56:43:b7:58:df:af:c6:5b:47:7f:f4:6b:3f:31:d7:f7:ab:45:
         cb:97:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----