Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa
File:                     323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa (raw, json)
Hash identifier:          K4eImQBTBMDscJAISRP1I7zxAIEtOXmniygkYzSQB9U=
Subject key identifier:   E2:D7:A9:EF:88:F5:06:D6:C7:A7:07:EE:42:B8:44:D1:61:B8:A2:05
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       070AEA39D72AC087AFDBC1A91F60EDC610A6F7E8
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa
Signing time:             Fri 10 May 2024 15:35:04 +0000
ROA not before:           Fri 10 May 2024 15:30:04 +0000
ROA not after:            Fri 09 May 2025 15:35:04 +0000
asID:                     263242
IP address blocks:        2803:1180:d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0a:ea:39:d7:2a:c0:87:af:db:c1:a9:1f:60:ed:c6:10:a6:f7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: May 10 15:30:04 2024 GMT
            Not After : May  9 15:35:04 2025 GMT
        Subject: CN=E2D7A9EF88F506D6C7A707EE42B844D161B8A205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:c8:92:46:a4:ed:9d:2d:fe:a6:be:11:d1:
                    a8:8f:25:57:3b:c2:c1:bf:b2:09:88:d6:54:f0:8d:
                    34:ee:9d:10:12:a2:fd:10:e6:61:a0:74:80:37:89:
                    bb:51:2c:a0:71:f2:3e:18:3c:26:36:24:a8:f0:33:
                    ac:5f:f4:f8:32:f2:f3:27:d3:f3:f2:7d:58:4f:63:
                    9e:6e:53:eb:93:7b:f0:58:bc:9a:a7:f0:d5:93:4c:
                    88:f4:9b:8b:35:0a:83:8b:34:c0:43:78:36:9b:7e:
                    6b:a7:27:fe:0b:2f:9a:41:b9:70:20:7b:55:6d:fb:
                    0f:93:a3:6a:d0:9b:cc:7f:68:08:b9:98:a2:87:a1:
                    b4:88:99:51:a5:cf:11:ff:f1:26:17:42:2d:19:06:
                    a1:b9:04:69:70:08:0b:e2:0b:f9:22:33:16:4e:f3:
                    74:75:a3:cf:ca:db:c6:e9:87:b8:e7:90:8a:07:86:
                    f4:67:00:6d:87:22:7f:3b:08:9b:6d:6b:ed:b9:96:
                    26:3d:d7:46:fa:3a:f7:77:53:55:ef:e6:76:3c:d5:
                    c7:72:9f:70:a0:e9:ad:35:9d:83:99:21:bd:68:f7:
                    da:da:c2:de:25:ed:58:d2:bd:1c:b1:51:c9:1c:41:
                    2e:9c:78:7b:5e:05:8a:5e:1e:b4:a1:25:4a:f8:c5:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D7:A9:EF:88:F5:06:D6:C7:A7:07:EE:42:B8:44:D1:61:B8:A2:05
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/323830333a313138303a643a3a2f34382d3438203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1180:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:ba:e3:f2:d5:77:28:9b:03:2d:6f:d9:2f:16:ea:8f:e3:8c:
         0f:8a:ce:a4:6b:5a:60:fb:33:18:5a:ac:10:a1:0d:51:ba:d6:
         ec:e4:26:ce:6f:ce:c6:f9:e8:78:bc:ba:52:6f:9b:00:5c:b0:
         8c:6d:8f:62:91:e6:aa:45:c9:ce:a3:5e:d8:5e:b5:55:70:de:
         f8:77:2f:dd:a7:e8:fa:50:6a:5f:21:b5:b7:df:7b:2c:85:2e:
         4d:63:cc:03:8b:3f:aa:61:04:b2:b0:00:ab:8d:5c:f0:82:56:
         f0:bd:7d:57:25:8a:ca:ec:f7:18:68:f6:c5:40:75:95:08:36:
         33:96:da:e6:f3:b3:ce:2c:bb:e1:89:cd:70:e9:e5:7f:c5:1a:
         2b:54:db:40:4a:34:d7:1d:2c:a2:0f:fe:5b:bf:af:6b:56:7c:
         1a:03:a6:04:6a:7e:fa:c2:be:60:c8:68:33:36:33:45:e2:a7:
         8a:e7:1a:21:82:31:da:1c:81:7b:b9:1a:b3:8a:18:e3:bc:dc:
         9b:ac:f1:e1:13:3b:5f:d1:02:c6:27:e3:0e:89:d4:4d:76:35:
         2c:86:14:35:81:de:06:97:ec:22:38:a7:05:af:1f:14:b9:6b:
         42:4d:38:b0:1c:01:c3:50:a0:74:88:e6:d5:f0:c4:7e:5d:70:
         64:bd:29:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----