Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a323a3a2f34382d3438203d3e20323732393636.roa
File:                     323830333a383539303a323a3a2f34382d3438203d3e20323732393636.roa (raw, json)
Hash identifier:          Hg0s4PRKwL+TXTvxy33A6UC4Tqjmo/zurMlG6z+E7+g=
Subject key identifier:   73:E5:28:6E:85:6F:85:B5:04:38:33:26:66:DF:A5:C2:7A:19:4F:6F
Certificate issuer:       /CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
Certificate serial:       056DAAF3F1F358839555AE7FBBC7FA0BE9B4AE05
Authority key identifier: 21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a323a3a2f34382d3438203d3e20323732393636.roa
Signing time:             Fri 06 Sep 2024 17:00:01 +0000
ROA not before:           Fri 06 Sep 2024 16:55:01 +0000
ROA not after:            Fri 05 Sep 2025 17:00:01 +0000
asID:                     272966
IP address blocks:        2803:8590:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6d:aa:f3:f1:f3:58:83:95:55:ae:7f:bb:c7:fa:0b:e9:b4:ae:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2122091F9E8EF8DB7097C3E806CDF34469265C93
        Validity
            Not Before: Sep  6 16:55:01 2024 GMT
            Not After : Sep  5 17:00:01 2025 GMT
        Subject: CN=73E5286E856F85B50438332666DFA5C27A194F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:65:fc:63:68:b1:7a:13:69:ab:7c:44:3b:
                    75:18:62:46:87:8b:79:d0:0d:cf:27:a2:9d:e3:3c:
                    62:13:b6:61:6e:d2:fb:c6:a3:37:c6:0f:0b:37:e8:
                    5e:92:1d:77:50:c3:bf:9c:d7:fa:32:3e:45:da:0c:
                    ad:fd:da:b0:c0:c9:9f:37:19:4e:23:32:1d:89:3e:
                    cb:1a:5c:ba:e6:4a:35:19:fb:c5:a5:da:fa:df:1b:
                    d4:88:7a:fd:65:2f:85:02:bd:fa:87:47:8e:40:a3:
                    bd:1e:22:80:25:ce:84:06:63:a2:6d:f7:bc:8a:58:
                    24:55:e2:b0:b1:a1:35:e6:a6:17:9d:b6:34:80:14:
                    90:43:38:bb:c9:c9:f7:f7:f6:b4:0e:d7:5c:4f:50:
                    26:cb:c0:f9:96:c5:88:2e:8a:5f:e2:44:75:35:0e:
                    c8:1c:b2:2b:39:b6:f2:53:49:1a:b5:20:ab:ca:22:
                    b9:b6:2b:9c:c1:dc:db:fd:64:46:b8:41:94:bd:be:
                    42:6a:b7:b7:20:78:29:7b:c7:c3:80:64:e4:d2:9d:
                    a4:07:ed:a6:38:57:0a:ee:d1:8c:4a:8e:61:c1:f8:
                    4c:ab:c6:7a:2b:3a:2d:9e:9b:5c:07:5d:85:14:b4:
                    a7:da:06:56:dc:da:81:3d:40:64:56:5f:88:6b:1f:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E5:28:6E:85:6F:85:B5:04:38:33:26:66:DF:A5:C2:7A:19:4F:6F
            X509v3 Authority Key Identifier:
                keyid:21:22:09:1F:9E:8E:F8:DB:70:97:C3:E8:06:CD:F3:44:69:26:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2122091F9E8EF8DB7097C3E806CDF34469265C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D1B8838FECB9462CAB890A0CBF5ECF1E295AF1326B83179E433DA04827BFDC30/0/323830333a383539303a323a3a2f34382d3438203d3e20323732393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8590:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:ec:9b:05:bf:46:cf:47:f8:68:8d:07:53:dc:93:72:ea:f8:
         ca:8f:05:74:20:ce:4b:62:58:bd:3e:4b:ae:83:59:ec:0d:9d:
         36:02:76:29:20:87:f1:e7:b1:d6:38:7b:fd:d4:fc:0a:99:e7:
         7e:e2:51:6c:70:f5:50:35:18:d1:d0:93:86:62:d9:cf:13:47:
         c6:e0:07:9c:1b:01:87:09:26:68:04:13:db:55:a8:f9:48:67:
         6b:b5:8c:09:2d:90:1a:cd:6e:ef:86:e3:39:4c:86:38:4d:d5:
         27:e9:c9:d5:0e:76:78:9f:0f:c8:e5:e5:2b:1a:4c:47:6c:96:
         a1:58:3d:c2:ad:9e:a7:39:91:5b:7f:17:d2:b6:8e:fd:3c:21:
         73:04:2b:b9:dc:5b:fc:94:6c:f0:a9:fe:01:7e:04:37:d4:51:
         db:b5:0d:d6:f1:7e:bb:85:2a:c7:58:a2:73:c5:a2:b8:a5:4b:
         b3:02:28:2a:68:eb:bc:09:14:05:7c:9e:56:5f:37:89:33:75:
         25:2e:c7:d2:4c:98:0e:c3:a4:ee:c3:76:27:fc:b2:0f:f8:06:
         d2:b9:3c:c9:c0:96:91:38:1a:38:ea:7f:94:32:c9:5a:54:95:
         51:c1:32:8b:fa:94:7c:77:2d:0c:bf:f2:f8:fe:7a:bc:05:70:
         2f:f0:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----