Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430333a3a2f34382d3438203d3e203237383832.roa
File:                     323830303a3332303a383430333a3a2f34382d3438203d3e203237383832.roa (raw, json)
Hash identifier:          hZnK7vy5G63//DD2UcP+UEGEZkLF4pNHDkAod+VxSa4=
Subject key identifier:   DB:D5:FE:A5:93:AB:9A:E8:FB:D1:5C:4C:9E:94:79:B0:D6:C2:C6:F4
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       14D921FF5C74C7252B1FA0E3FD20144F521A8F84
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430333a3a2f34382d3438203d3e203237383832.roa
Signing time:             Tue 05 Mar 2024 18:09:43 +0000
ROA not before:           Tue 05 Mar 2024 18:04:43 +0000
ROA not after:            Tue 04 Mar 2025 18:09:43 +0000
asID:                     27882
IP address blocks:        2800:320:8403::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d9:21:ff:5c:74:c7:25:2b:1f:a0:e3:fd:20:14:4f:52:1a:8f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Mar  5 18:04:43 2024 GMT
            Not After : Mar  4 18:09:43 2025 GMT
        Subject: CN=DBD5FEA593AB9AE8FBD15C4C9E9479B0D6C2C6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:c1:f8:55:d8:64:67:b0:87:e2:80:91:0a:
                    99:17:d0:8d:1f:5e:07:14:a8:cc:91:d6:8f:47:01:
                    93:90:40:f7:94:6a:c9:ae:4d:97:1c:32:8a:e9:0a:
                    68:3d:dc:9b:2b:ad:9d:3b:56:e3:c3:5c:e8:e2:61:
                    75:35:3b:a5:5e:e9:95:b0:88:f8:db:d4:9d:11:9a:
                    28:f2:b6:22:c4:bc:93:75:81:3b:58:1f:84:57:2d:
                    20:7f:8b:98:85:04:5d:b2:af:7f:38:b3:0f:64:17:
                    f8:1c:a3:a2:ed:06:c2:57:c8:ba:2a:32:f8:85:01:
                    3f:75:da:13:65:7a:3a:de:0b:0b:07:1f:93:40:b6:
                    a7:46:38:f6:c8:ce:b6:5f:f5:d3:1b:58:34:45:7b:
                    27:5e:57:a0:85:26:c4:bc:2a:2e:37:5f:62:20:4e:
                    c2:79:cd:1b:69:15:3e:ef:15:4e:18:74:ee:30:b0:
                    e5:d1:1f:c5:2d:80:96:e5:8b:de:69:10:e0:72:0e:
                    cc:89:de:53:2e:5f:21:a1:13:c4:21:c8:dc:58:0e:
                    77:2a:ff:10:87:a9:36:10:10:19:bc:f5:51:13:4b:
                    e3:95:3e:d4:a7:be:f6:62:21:d6:42:9b:c5:a8:6c:
                    64:97:34:58:ea:13:36:3a:da:09:c0:57:77:e9:7f:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D5:FE:A5:93:AB:9A:E8:FB:D1:5C:4C:9E:94:79:B0:D6:C2:C6:F4
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430333a3a2f34382d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:8403::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:94:06:e6:c2:75:ed:f5:b0:86:ec:80:92:d8:d8:2d:4c:84:
         f5:8d:cb:28:ca:26:0f:72:ed:7d:96:d6:ff:f3:78:60:08:e4:
         a4:e3:93:9d:aa:f4:e0:e9:f9:17:dd:08:bb:27:90:6a:8e:ad:
         17:62:d2:84:95:4a:ba:96:d8:b9:c0:27:c3:be:b1:ec:b1:7d:
         6c:4c:c8:05:30:90:6c:65:cf:94:54:64:e0:89:e7:91:b7:58:
         9f:03:cd:29:79:a0:7f:c2:03:ae:25:c6:f5:2a:4f:87:d2:e7:
         88:50:66:cf:01:55:a8:c5:c6:48:53:2f:c5:20:d4:43:b2:46:
         cc:d7:b8:89:14:38:c5:a0:41:8e:3b:b5:31:44:e0:90:93:f0:
         4d:5f:44:76:e6:00:5f:c6:ff:f4:c0:ce:6d:52:fb:32:a8:0e:
         7e:0a:ca:c5:a0:ff:6d:5b:52:28:6d:d0:35:a2:72:45:0e:03:
         c7:56:aa:3a:65:9b:34:0f:79:92:54:a1:b3:f1:9b:90:77:5b:
         0a:91:eb:1c:7a:96:dd:4d:f6:73:58:de:ca:5c:5f:c5:b0:99:
         da:72:bd:9e:84:cb:01:10:be:be:b2:71:cf:72:4a:59:c0:e1:
         93:5c:01:f0:16:2e:e2:e8:a6:82:3a:de:06:f2:b4:89:24:66:
         43:4a:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----