Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3438203d3e20323632353839.roa
File:                     323830333a663836303a3a2f33322d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          IyYecMqfnWSpQm7SShmIht0WVTmcmv1Q2DCQYgcm2dU=
Subject key identifier:   2A:36:5C:04:DC:BC:2E:BE:12:02:D2:09:87:03:F4:24:ED:29:36:92
Certificate issuer:       /CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
Certificate serial:       2C73FA0870DDE682B593A221B816DE9857E4ABBA
Authority key identifier: 42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3438203d3e20323632353839.roa
Signing time:             Tue 30 Apr 2024 17:25:00 +0000
ROA not before:           Tue 30 Apr 2024 17:20:00 +0000
ROA not after:            Tue 29 Apr 2025 17:25:00 +0000
asID:                     262589
IP address blocks:        2803:f860::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:73:fa:08:70:dd:e6:82:b5:93:a2:21:b8:16:de:98:57:e4:ab:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
        Validity
            Not Before: Apr 30 17:20:00 2024 GMT
            Not After : Apr 29 17:25:00 2025 GMT
        Subject: CN=2A365C04DCBC2EBE1202D2098703F424ED293692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cf:23:d7:51:72:34:9e:db:09:ca:c4:00:88:
                    6d:69:b5:b2:fa:fa:10:cc:02:5b:5d:3d:1d:ae:33:
                    de:65:30:d6:e9:68:7d:a5:32:c2:f5:de:fb:35:5a:
                    1c:57:0e:7a:8d:a8:8e:e7:d3:b4:05:eb:82:92:22:
                    f3:52:53:f5:a3:4d:bc:a0:d0:e3:e2:b6:24:5e:7c:
                    e8:21:f2:94:ca:1d:d4:01:7b:ce:88:02:65:36:bb:
                    28:37:8e:2b:72:7b:dd:cd:a8:2c:79:d7:80:56:f0:
                    09:22:f1:de:d4:f3:52:eb:2a:c1:bc:61:03:b4:c0:
                    7d:4c:1e:08:4b:88:0d:d3:2b:60:b5:92:46:b6:f4:
                    e7:61:28:f8:28:b9:30:8b:3e:cb:05:94:b7:2e:b8:
                    63:32:0b:58:bc:2b:c8:1a:63:35:e2:fa:db:94:74:
                    4e:3a:81:7c:22:49:c2:0f:87:21:13:e9:10:4f:5c:
                    dd:08:ee:a4:e9:87:63:60:2f:4b:87:af:0c:8d:6d:
                    e0:4b:be:3d:43:79:b2:7e:64:5f:d1:5b:94:ec:83:
                    b8:2d:a9:a1:3a:b5:7f:82:36:61:49:5a:62:0b:3b:
                    97:f8:10:51:29:5f:2f:bf:b5:23:37:47:43:65:ff:
                    69:09:ac:7c:ee:b7:85:4e:e4:d0:7c:14:a9:15:fa:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:36:5C:04:DC:BC:2E:BE:12:02:D2:09:87:03:F4:24:ED:29:36:92
            X509v3 Authority Key Identifier:
                keyid:42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/323830333a663836303a3a2f33322d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f860::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:79:b7:fc:07:c6:66:fa:c8:ae:12:72:8e:8e:bd:56:66:10:
         d1:75:58:e5:96:fc:3b:59:e8:51:b6:42:34:ad:f3:60:f2:a6:
         a0:48:53:f0:ce:63:f5:bd:bc:90:bf:cf:34:47:ea:00:b9:99:
         3e:07:56:9b:42:9a:d5:f5:8c:f7:ba:a4:8b:21:39:f3:77:9b:
         07:d2:21:26:64:a6:13:21:46:84:13:af:35:52:d4:d4:bf:11:
         be:1e:d6:dc:88:ea:2c:eb:85:01:9e:52:81:2f:a7:1c:0c:4d:
         e2:f7:10:b2:95:6a:c0:14:b6:b0:92:aa:c6:6f:5a:60:03:cc:
         a3:0a:01:c9:0b:bb:70:a7:7e:bd:7b:33:f6:4a:62:7e:09:b4:
         28:ed:0e:7c:f7:49:2c:68:43:b6:df:66:be:fd:33:74:02:e3:
         e1:e3:10:67:00:85:5f:3e:6b:b2:b7:42:1e:1b:0e:0d:07:e5:
         11:13:65:cf:ca:1e:4c:da:6e:9d:87:d6:64:fe:37:36:46:47:
         47:e6:81:57:6f:ce:7a:71:d6:bd:4c:ac:89:4a:39:d5:17:b7:
         12:ed:00:a2:05:b1:ef:6a:ce:8f:c0:58:a2:e9:a3:67:54:f5:
         aa:59:67:7f:ed:d7:5f:39:99:5f:bd:65:43:0a:f8:2d:3e:ae:
         61:f6:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----