Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a38303a3a2f34312d3438203d3e20323733383637.roa
File:                     323830313a3166353a38303a3a2f34312d3438203d3e20323733383637.roa (raw, json)
Hash identifier:          8KNV8qbp5hwWjvuMJcObY+PdpzJmO6dIHRAJPJGVzbE=
Subject key identifier:   47:17:FA:F1:A4:53:0C:B5:44:77:46:73:68:5C:08:D4:3B:44:5B:6F
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       13CFD0659CD230241F6D9F441069150330F56F72
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a38303a3a2f34312d3438203d3e20323733383637.roa
Signing time:             Tue 09 Jul 2024 07:00:00 +0000
ROA not before:           Tue 09 Jul 2024 06:55:00 +0000
ROA not after:            Tue 08 Jul 2025 07:00:00 +0000
asID:                     273867
IP address blocks:        2801:1f5:80::/41 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cf:d0:65:9c:d2:30:24:1f:6d:9f:44:10:69:15:03:30:f5:6f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: Jul  9 06:55:00 2024 GMT
            Not After : Jul  8 07:00:00 2025 GMT
        Subject: CN=4717FAF1A4530CB544774673685C08D43B445B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:a2:9b:6c:b5:e3:dc:ce:ba:20:6d:a7:7c:
                    b7:96:e3:66:95:ec:cf:b5:8e:9f:7c:2d:0c:6b:9b:
                    93:e2:e3:ab:7d:9c:22:14:81:79:e0:fc:63:c8:ab:
                    2c:fa:37:fb:de:c7:a5:4e:9e:6d:82:e6:a6:52:bc:
                    b4:59:9f:85:36:fd:a8:3f:59:5f:f7:5d:18:46:42:
                    a3:cb:91:89:9b:16:05:06:11:69:cb:09:78:9b:85:
                    64:78:f6:e1:57:fb:70:77:85:ec:0b:d0:e2:fa:2f:
                    bb:2b:ed:de:d7:a4:97:84:4b:0e:11:56:da:ca:07:
                    8e:ee:b3:d6:92:41:87:cd:e5:a1:3c:ee:e4:36:12:
                    aa:db:2e:0e:4a:ae:52:e9:4e:76:14:d2:39:9b:c5:
                    10:f0:6b:36:ce:13:18:27:75:dd:d8:b2:32:16:46:
                    85:6c:65:f6:f1:45:4c:7e:79:4f:e4:0f:a5:20:f1:
                    74:a7:8c:28:25:f9:bd:62:bd:d7:4c:09:e6:24:96:
                    d7:8e:72:c6:31:a3:b4:ab:1a:e1:2a:9c:27:77:45:
                    c5:f6:fc:09:c5:38:50:fc:36:d7:a6:67:0c:48:c2:
                    e8:34:d8:c8:39:08:a7:f9:36:93:a9:e8:7c:cd:91:
                    fa:e4:fe:63:a5:4b:c4:71:a7:a5:bf:bb:a8:62:22:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:17:FA:F1:A4:53:0C:B5:44:77:46:73:68:5C:08:D4:3B:44:5B:6F
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/323830313a3166353a38303a3a2f34312d3438203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f5:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         0c:99:70:5f:03:4e:be:ff:0d:de:a9:0a:75:54:54:8b:bd:95:
         03:af:16:e7:6a:4a:b5:32:e3:98:fd:22:78:ba:a2:03:4b:a5:
         c9:df:b0:7e:6e:84:af:77:5a:4b:84:68:c5:67:e0:14:3e:9a:
         e5:0b:c3:c6:2e:5d:6c:2e:25:0d:ea:eb:61:7e:b5:03:01:ca:
         8e:a3:cd:2f:d0:cd:e5:5d:fc:42:dc:37:68:33:ec:21:4b:2b:
         c7:9d:82:7e:55:4b:75:5b:f9:83:91:82:ce:6f:38:e7:cb:c0:
         de:5d:ab:77:05:02:98:eb:f5:66:55:d0:04:6b:26:d8:9d:a8:
         78:3a:18:a1:af:ef:c7:c1:2b:cf:fc:69:63:5d:db:7c:26:59:
         27:26:7a:cc:f8:88:8b:df:8e:00:c2:42:59:45:8d:de:e4:34:
         ec:77:2c:6d:9d:10:02:5a:e6:22:88:a7:a9:09:8a:c9:8c:34:
         72:85:e0:e5:06:0d:3f:cd:47:ac:d1:11:3b:bf:97:28:8e:6f:
         f2:9d:6e:44:65:70:1b:8f:e6:dc:55:4e:54:07:37:4a:63:4e:
         bf:36:46:a5:78:4b:3c:78:46:98:62:22:5e:bf:28:1f:e5:c2:
         47:57:10:1a:8e:ef:79:2a:ea:cd:f4:74:cd:a4:bd:91:7e:cb:
         de:fe:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----