Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33382d3338203d3e203532343139.roa
File:                     323830333a333438303a3a2f33382d3338203d3e203532343139.roa (raw, json)
Hash identifier:          yTW0zInXiqC07WisXTdcKhyGhvuKkj5C1fE2mfTjDAE=
Subject key identifier:   C0:A4:23:6D:67:6B:D2:4A:1C:91:2C:DC:30:C8:30:BF:C6:CA:41:A9
Certificate issuer:       /CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
Certificate serial:       1B50A56B7D91320637C3A0AB67151D784B005FAF
Authority key identifier: D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33382d3338203d3e203532343139.roa
Signing time:             Tue 05 Mar 2024 18:01:17 +0000
ROA not before:           Tue 05 Mar 2024 17:56:17 +0000
ROA not after:            Tue 04 Mar 2025 18:01:17 +0000
asID:                     52419
IP address blocks:        2803:3480::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:50:a5:6b:7d:91:32:06:37:c3:a0:ab:67:15:1d:78:4b:00:5f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D44DD84F3FDBD732870581DB91456D40862FA2
        Validity
            Not Before: Mar  5 17:56:17 2024 GMT
            Not After : Mar  4 18:01:17 2025 GMT
        Subject: CN=C0A4236D676BD24A1C912CDC30C830BFC6CA41A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:bf:8c:d7:fa:77:05:4a:0f:02:58:79:14:
                    51:a7:b9:5a:33:11:29:49:0f:27:ae:a8:44:1d:39:
                    04:a9:a7:f2:65:6f:ad:f7:c7:c8:79:28:ea:ed:d2:
                    89:2b:80:ad:58:3e:53:fc:ce:5a:da:32:7f:fa:20:
                    f8:50:69:ad:78:e4:80:16:6a:39:03:06:4d:f0:5a:
                    df:94:df:05:42:a9:0c:73:4c:a5:27:6a:f2:56:24:
                    e8:23:68:e6:d7:3c:99:5e:f5:40:33:aa:5e:ce:20:
                    55:55:05:0c:53:c1:46:01:cf:1e:f3:5b:91:d7:3e:
                    49:37:d8:ae:45:13:55:ec:d6:25:21:09:b5:a2:5e:
                    43:4e:29:23:38:2c:79:5b:42:75:92:b0:01:6f:f8:
                    d6:04:29:c8:28:b6:50:ee:71:67:d3:41:aa:57:3c:
                    e9:1c:c9:75:50:43:90:18:51:60:6b:4d:1f:30:3f:
                    ae:8c:b9:fb:4e:ee:1c:2e:ed:2b:3e:85:51:74:e7:
                    f5:80:84:a5:1b:36:33:13:1a:e1:2b:dc:97:d5:a3:
                    10:05:fc:4c:e4:08:3c:36:a7:39:58:66:45:86:f0:
                    38:13:a4:90:37:1f:19:c8:3b:e6:41:42:dd:7d:75:
                    c5:54:33:fe:39:dd:45:65:3d:f3:9c:bb:4b:54:a1:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A4:23:6D:67:6B:D2:4A:1C:91:2C:DC:30:C8:30:BF:C6:CA:41:A9
            X509v3 Authority Key Identifier:
                keyid:D8:D4:4D:D8:4F:3F:DB:D7:32:87:05:81:DB:91:45:6D:40:86:2F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8D44DD84F3FDBD732870581DB91456D40862FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCD67801167D0EF074FF13AE5977B421687A21F08DFD1541521481D4D8E35A05/0/323830333a333438303a3a2f33382d3338203d3e203532343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3480::/38

    Signature Algorithm: sha256WithRSAEncryption
         36:da:9a:32:0e:66:c8:b7:25:d6:6c:e2:49:38:7b:96:20:c2:
         51:1b:44:f7:a6:bd:bb:90:00:da:74:35:fc:26:5b:57:ef:74:
         e1:6e:97:55:4f:78:30:37:60:4a:00:a7:71:3a:a6:2f:35:36:
         49:83:50:a7:54:40:6a:9b:22:1d:fa:32:d3:5c:ca:00:8b:5e:
         f1:eb:b0:39:37:b0:13:59:d1:9d:db:2c:c9:61:8b:8d:0f:2c:
         d5:9a:48:36:72:a6:19:c7:0b:14:fb:29:88:df:30:fc:53:80:
         3b:4c:44:30:fa:cb:9f:ff:bf:60:09:a2:75:c1:37:4e:eb:9c:
         d5:ab:36:a4:70:1e:f2:51:d3:70:82:78:e8:53:b8:bf:79:92:
         7c:7c:bf:e2:d2:90:84:04:93:1f:44:7b:9e:7b:58:e3:45:3a:
         59:b6:84:5c:fd:14:03:ce:b5:d0:b6:48:62:41:ad:9a:91:25:
         f6:d8:fa:aa:35:77:93:a8:2e:ef:5b:01:a7:81:28:ac:a6:3e:
         cc:05:4d:11:80:30:57:24:19:5a:e6:0d:00:f7:44:90:0e:b6:
         1b:1b:d5:6d:bf:7d:79:76:46:50:eb:1c:12:db:25:08:c7:76:
         4c:c6:c2:40:8e:d4:ac:a6:27:b1:85:70:d5:d2:bf:b0:0d:92:
         03:b4:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----