Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6032EFF91EF9821D8B047971265ED0BD8DF1E8F573CC27351AC0E0AB320CC2F/0/323830333a313636303a3a2f33322d3332203d3e20323637383939.roa
File:                     323830333a313636303a3a2f33322d3332203d3e20323637383939.roa (raw, json)
Hash identifier:          G8D+QjYyx5r3hSx+W7vqddULmb4Qudl9iQ01RCNO31I=
Subject key identifier:   1D:25:B5:BF:5E:CE:29:F9:5E:AD:8F:35:DC:10:96:70:E6:49:B9:01
Certificate issuer:       /CN=D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6
Certificate serial:       492A9430C758CBA75533B33BE57A56BAE9444140
Authority key identifier: D6:D3:46:E7:A0:32:8B:10:9B:B9:BE:DE:D6:DF:3B:C8:A4:D6:21:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6032EFF91EF9821D8B047971265ED0BD8DF1E8F573CC27351AC0E0AB320CC2F/0/323830333a313636303a3a2f33322d3332203d3e20323637383939.roa
Signing time:             Mon 29 Jul 2024 21:10:00 +0000
ROA not before:           Mon 29 Jul 2024 21:05:00 +0000
ROA not after:            Mon 28 Jul 2025 21:10:00 +0000
asID:                     267899
IP address blocks:        2803:1660::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2a:94:30:c7:58:cb:a7:55:33:b3:3b:e5:7a:56:ba:e9:44:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6
        Validity
            Not Before: Jul 29 21:05:00 2024 GMT
            Not After : Jul 28 21:10:00 2025 GMT
        Subject: CN=1D25B5BF5ECE29F95EAD8F35DC109670E649B901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:ed:87:3e:b9:14:0d:61:52:b2:bc:3b:39:
                    5f:3b:13:14:49:17:78:38:c2:f0:c4:ab:51:25:03:
                    e0:95:3b:89:a2:9f:9a:c1:1c:b8:1d:b9:c0:b0:e7:
                    fd:02:98:fc:e6:7a:9a:78:48:c8:6b:9b:8d:82:b9:
                    3b:6e:4c:8a:75:b5:7b:ae:48:1c:7e:fb:62:2b:83:
                    b7:29:5d:99:54:9e:92:25:96:2e:c4:97:74:be:c2:
                    75:42:e9:47:29:8f:ec:41:e9:fd:c0:21:70:7a:5b:
                    48:28:e7:9d:f8:09:04:11:10:9e:9f:8d:52:0f:13:
                    9d:a5:1f:3d:1d:8f:a5:ef:b8:4e:3e:d1:e5:96:11:
                    04:9d:40:bf:35:e5:ab:fb:dc:14:4b:63:ea:20:99:
                    20:c6:6d:9f:bc:3d:b3:d1:b4:15:9b:69:f5:01:48:
                    28:fb:0d:a9:f0:87:fc:da:5e:cb:57:9c:78:fc:de:
                    8e:f1:9e:fc:34:8b:e4:7c:0d:d7:58:a6:7b:4d:42:
                    31:e8:9b:c6:01:e8:3c:65:38:dc:c3:f7:16:7d:8a:
                    0e:45:1c:8e:32:af:1a:f2:25:d4:92:d3:8d:1f:4f:
                    63:00:4d:b4:8e:cd:ef:cb:4b:84:9f:69:43:13:b5:
                    f1:40:fa:00:9d:2d:15:83:6a:b2:1d:09:54:92:11:
                    af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:25:B5:BF:5E:CE:29:F9:5E:AD:8F:35:DC:10:96:70:E6:49:B9:01
            X509v3 Authority Key Identifier:
                keyid:D6:D3:46:E7:A0:32:8B:10:9B:B9:BE:DE:D6:DF:3B:C8:A4:D6:21:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6032EFF91EF9821D8B047971265ED0BD8DF1E8F573CC27351AC0E0AB320CC2F/0/D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6032EFF91EF9821D8B047971265ED0BD8DF1E8F573CC27351AC0E0AB320CC2F/0/323830333a313636303a3a2f33322d3332203d3e20323637383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1660::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:9e:8e:54:3c:45:19:d3:ae:96:74:f1:64:5c:64:03:06:1d:
         4e:ef:b3:86:e3:7d:a2:0a:f5:56:5b:c2:f3:e2:f7:6c:59:3a:
         c7:c0:30:b3:20:ce:ae:5b:e8:48:59:5a:a9:a6:c3:32:e9:79:
         8c:ad:b0:d3:e0:70:53:02:ab:ab:06:80:9c:19:03:d8:74:6a:
         24:96:f9:9a:17:bf:7c:ef:90:c7:1b:d0:bd:1a:2f:1e:ae:3e:
         ba:0f:28:33:81:1c:8a:fe:6d:21:d8:ed:f2:3d:19:7b:e1:a4:
         8a:fe:ef:79:1f:b5:46:c5:77:f6:0f:09:19:09:1b:cb:de:3a:
         c5:59:9d:51:be:78:18:64:e8:c5:39:17:d7:62:4a:e4:53:83:
         8f:b3:ca:0a:e7:61:08:28:37:b6:32:5c:ba:b5:3a:d1:4f:f2:
         2f:37:60:3a:91:52:91:ef:9e:7f:98:7a:fb:d3:b5:f9:bf:3b:
         83:38:f8:9c:d7:df:98:4e:3d:da:37:99:4d:28:e2:5d:2d:94:
         79:52:1f:79:6f:01:64:80:42:b1:9e:7d:b8:c0:9e:64:69:9d:
         ba:d8:89:b9:87:0b:8e:c2:63:65:5e:0c:2e:67:eb:63:ae:de:
         55:28:56:a8:be:6d:d1:bb:20:c3:7b:24:a5:18:98:14:d4:34:
         cb:42:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----