Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE1C9D7AB390FCFC4A0A593E1811C6D0FA551834A173120CE6D42C1E8D6D78BE/0/323830333a646636303a3a2f33322d3634203d3e20323639383339.roa
File:                     323830333a646636303a3a2f33322d3634203d3e20323639383339.roa (raw, json)
Hash identifier:          7D88Ms8uSnJ4uwUYDhZ++dgeqFszACR+EZe6L13Dp7w=
Subject key identifier:   C0:03:BE:3A:BE:C5:EF:A0:59:8F:26:3E:97:B4:54:9B:0C:3C:8B:51
Certificate issuer:       /CN=744E6BFD2BB7971EC4A9155DAE899B85AA355F13
Certificate serial:       04995D10F586D4888ABFDEC85B344B43348A4BF4
Authority key identifier: 74:4E:6B:FD:2B:B7:97:1E:C4:A9:15:5D:AE:89:9B:85:AA:35:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/744E6BFD2BB7971EC4A9155DAE899B85AA355F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE1C9D7AB390FCFC4A0A593E1811C6D0FA551834A173120CE6D42C1E8D6D78BE/0/323830333a646636303a3a2f33322d3634203d3e20323639383339.roa
Signing time:             Tue 05 Mar 2024 17:59:13 +0000
ROA not before:           Tue 05 Mar 2024 17:54:13 +0000
ROA not after:            Tue 04 Mar 2025 17:59:13 +0000
asID:                     269839
IP address blocks:        2803:df60::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:99:5d:10:f5:86:d4:88:8a:bf:de:c8:5b:34:4b:43:34:8a:4b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744E6BFD2BB7971EC4A9155DAE899B85AA355F13
        Validity
            Not Before: Mar  5 17:54:13 2024 GMT
            Not After : Mar  4 17:59:13 2025 GMT
        Subject: CN=C003BE3ABEC5EFA0598F263E97B4549B0C3C8B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:fa:8e:d9:ad:64:9c:52:22:5d:28:c0:58:
                    a4:2a:3a:65:c2:4f:35:54:39:f2:68:3a:a5:0b:e4:
                    be:02:98:4c:96:14:d5:e3:dd:ee:60:51:cb:0a:6a:
                    44:8e:c6:07:dd:7c:18:a7:a9:0a:fd:32:98:1d:32:
                    a0:7c:c3:57:0a:78:c8:e2:8c:52:48:44:cd:4d:69:
                    d6:29:e0:f2:c7:8f:d5:68:4c:53:e0:96:04:c3:a6:
                    b5:9c:ce:a3:49:d4:10:a4:62:c8:85:62:23:a6:d2:
                    c1:04:fc:77:40:9c:c6:22:71:cc:c3:cb:e3:1d:f2:
                    be:13:94:62:1e:1f:81:be:34:80:50:21:ab:35:6d:
                    1f:6e:21:ac:2e:a4:f9:0e:29:b3:44:44:00:91:9a:
                    ee:fd:23:82:08:12:a4:51:fa:54:f6:4c:ff:76:57:
                    fa:2e:99:94:cc:4d:a3:c0:a6:fb:a3:e5:84:36:d1:
                    b3:98:69:ea:7c:29:8b:3e:e5:bd:60:00:16:be:6d:
                    67:8c:f1:9a:dc:97:fa:86:9d:44:67:af:a9:aa:01:
                    83:8f:ee:23:b9:d5:c3:79:e2:20:db:e1:78:44:83:
                    9a:43:f0:5d:7f:64:98:44:e6:43:3c:9c:69:f2:a2:
                    0d:3b:d7:cc:d4:f6:f0:6e:7f:46:e0:e9:b7:66:8b:
                    68:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:03:BE:3A:BE:C5:EF:A0:59:8F:26:3E:97:B4:54:9B:0C:3C:8B:51
            X509v3 Authority Key Identifier:
                keyid:74:4E:6B:FD:2B:B7:97:1E:C4:A9:15:5D:AE:89:9B:85:AA:35:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE1C9D7AB390FCFC4A0A593E1811C6D0FA551834A173120CE6D42C1E8D6D78BE/0/744E6BFD2BB7971EC4A9155DAE899B85AA355F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/744E6BFD2BB7971EC4A9155DAE899B85AA355F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE1C9D7AB390FCFC4A0A593E1811C6D0FA551834A173120CE6D42C1E8D6D78BE/0/323830333a646636303a3a2f33322d3634203d3e20323639383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:df60::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:92:d1:2f:ca:4a:7e:31:3b:0a:63:2f:87:1c:43:aa:bc:b8:
         37:4c:36:d8:b0:da:ad:42:94:0f:b8:de:c9:b9:7a:62:36:6d:
         a9:a6:f4:a3:08:69:6c:f0:fb:85:08:e3:6f:63:ce:64:d3:29:
         78:c1:43:00:c7:ec:c1:0e:5b:3c:6b:ab:9f:54:ab:66:f9:a3:
         5a:3f:51:b1:83:63:b3:4e:21:07:e5:8b:7b:49:9c:20:d3:6d:
         ff:6c:ee:5f:c6:ab:8f:a7:4c:3d:f9:0f:ac:c6:da:a5:4b:aa:
         91:93:ef:fe:08:24:ca:a7:1d:eb:ee:ed:8e:de:2a:4c:3c:50:
         7f:bc:b1:fd:17:93:10:06:18:4d:b4:b6:fe:de:b9:46:bd:fb:
         ed:fc:c8:de:f9:1b:7f:84:d4:16:2d:57:6c:63:a0:e8:f2:ac:
         c3:be:55:9f:53:61:22:43:d8:aa:3b:eb:c8:f7:d2:2e:8d:68:
         53:52:22:56:0b:92:27:06:0e:82:75:74:75:5a:93:23:0d:64:
         b4:3d:42:e4:06:65:8d:f3:06:b6:36:59:73:c6:5c:03:ae:c7:
         dd:5a:9e:64:4b:fa:4b:a0:91:6e:6c:06:98:d0:2d:a6:f0:64:
         05:1d:8a:a0:d4:34:87:cb:26:8d:4f:e2:83:e6:d3:28:51:fc:
         f8:6e:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----