Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8F5B2064C902E437C2AECDD5907069D5E2C45B5E7F2F26CEAFD8B5DF7F59861/0/323830333a643161303a3a2f33322d3634203d3e20323637373030.roa
File:                     323830333a643161303a3a2f33322d3634203d3e20323637373030.roa (raw, json)
Hash identifier:          7ijDhItqzar/JIZM7nj8OX0xyBqgw+VRDmyhGm7/OwA=
Subject key identifier:   05:A6:6B:4A:55:66:15:C5:A8:26:66:ED:F2:95:45:12:BD:71:E5:44
Certificate issuer:       /CN=2F55674FD1E428392406A71D58348B254459B753
Certificate serial:       21075A01B41A377A63D65D6B667F8EF2F351A440
Authority key identifier: 2F:55:67:4F:D1:E4:28:39:24:06:A7:1D:58:34:8B:25:44:59:B7:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F55674FD1E428392406A71D58348B254459B753.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8F5B2064C902E437C2AECDD5907069D5E2C45B5E7F2F26CEAFD8B5DF7F59861/0/323830333a643161303a3a2f33322d3634203d3e20323637373030.roa
Signing time:             Tue 05 Mar 2024 17:51:18 +0000
ROA not before:           Tue 05 Mar 2024 17:46:18 +0000
ROA not after:            Tue 04 Mar 2025 17:51:18 +0000
asID:                     267700
IP address blocks:        2803:d1a0::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:07:5a:01:b4:1a:37:7a:63:d6:5d:6b:66:7f:8e:f2:f3:51:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F55674FD1E428392406A71D58348B254459B753
        Validity
            Not Before: Mar  5 17:46:18 2024 GMT
            Not After : Mar  4 17:51:18 2025 GMT
        Subject: CN=05A66B4A556615C5A82666EDF2954512BD71E544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:b6:a9:33:c9:c5:18:7a:e5:aa:15:c3:5c:
                    cc:64:1c:c8:08:89:21:b2:50:62:85:32:4e:90:d0:
                    2b:9f:ed:ba:61:17:ba:d6:02:4e:27:fb:61:df:7c:
                    63:19:f0:57:2e:58:85:e7:66:69:c6:b2:74:1d:7b:
                    b7:ae:af:08:bd:49:44:e7:e5:00:c4:0f:60:bf:29:
                    c6:cd:0a:9c:4c:c6:4a:67:34:3d:73:13:85:b0:17:
                    7a:74:17:6d:74:f6:c6:e6:2d:e1:f8:4f:9d:df:d2:
                    09:61:4a:99:f9:82:76:e8:02:d7:54:a6:eb:46:62:
                    a6:c5:b6:de:ff:1b:64:c4:31:68:a2:45:41:5b:ed:
                    4e:71:6b:f6:ce:a9:93:5d:5e:f5:9c:3e:2d:bd:55:
                    f1:13:8e:ed:a4:17:5e:8a:66:02:68:bb:02:1c:5a:
                    fe:ff:16:0a:c4:d1:ec:9a:ca:76:c6:00:96:f9:b4:
                    17:99:6a:b2:7b:74:79:dd:5e:1a:44:fd:1f:3e:e1:
                    33:b3:9c:04:67:94:94:0e:92:e3:9b:5a:20:3f:88:
                    42:13:4e:7c:7b:a4:52:f8:75:05:c5:57:94:70:77:
                    e6:57:32:95:78:29:af:81:9d:f4:60:aa:14:ac:84:
                    28:16:13:7b:9e:98:c7:e8:ad:c8:27:62:f8:75:0a:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A6:6B:4A:55:66:15:C5:A8:26:66:ED:F2:95:45:12:BD:71:E5:44
            X509v3 Authority Key Identifier:
                keyid:2F:55:67:4F:D1:E4:28:39:24:06:A7:1D:58:34:8B:25:44:59:B7:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8F5B2064C902E437C2AECDD5907069D5E2C45B5E7F2F26CEAFD8B5DF7F59861/0/2F55674FD1E428392406A71D58348B254459B753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F55674FD1E428392406A71D58348B254459B753.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8F5B2064C902E437C2AECDD5907069D5E2C45B5E7F2F26CEAFD8B5DF7F59861/0/323830333a643161303a3a2f33322d3634203d3e20323637373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:dc:b5:27:b7:69:23:41:4c:2f:83:be:f6:46:c6:67:1c:2e:
         81:ed:da:29:82:33:9e:18:69:e9:a6:b2:8f:4c:a2:49:ba:4d:
         d3:9f:5c:33:d6:90:65:90:2a:be:5b:63:a0:e9:8e:1a:95:1c:
         97:80:33:4b:1f:9b:69:1a:b3:d5:9e:1b:1b:ec:1a:41:33:28:
         17:67:9e:a6:d3:4c:96:b0:41:01:56:dc:d6:86:1d:c2:3d:8c:
         cc:39:f2:64:a2:56:8e:70:17:04:ac:94:d5:07:b4:ca:03:59:
         02:f3:19:12:bd:c3:33:a9:44:a8:ca:56:ff:b8:42:58:5d:ee:
         51:b9:a9:35:9a:ab:40:d7:45:ad:a0:23:9c:77:7d:3c:4c:c3:
         5b:6e:4a:e0:9d:8a:6c:d9:47:a4:aa:dd:63:f3:ef:c7:da:25:
         10:83:36:22:5a:f9:8a:39:c2:0c:a1:67:9b:93:86:50:01:fb:
         4f:b6:13:c2:fa:93:ca:0a:51:6f:97:85:cc:0e:40:97:0f:a2:
         0b:fa:ea:ca:8e:ce:bd:cd:a2:3c:07:2e:c7:42:f4:8c:e6:b9:
         2f:51:51:90:07:86:46:a0:29:98:47:71:35:4d:ea:8b:bb:bc:
         2f:a0:2a:82:e3:5a:3b:ce:4e:1c:28:e5:8c:b9:19:89:55:59:
         ec:20:76:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----