Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEA92CBC6B5F86B73AE004B0B8372848735A2018B9867959A967586247B1EFC2/0/323830333a363361303a3a2f33322d3332203d3e20323637373631.roa
File:                     323830333a363361303a3a2f33322d3332203d3e20323637373631.roa (raw, json)
Hash identifier:          hu889/kepzDsW2fBIxUNnYeKATmHKrQrglva9gxkIrM=
Subject key identifier:   4B:9B:25:D8:AE:C8:97:BF:55:7D:5A:62:B6:19:4A:98:24:E2:9E:A1
Certificate issuer:       /CN=030D715E64325EAC25739006CFD8737985080E66
Certificate serial:       4C665942A382A1797419AF7A20861C6960AFBCDD
Authority key identifier: 03:0D:71:5E:64:32:5E:AC:25:73:90:06:CF:D8:73:79:85:08:0E:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/030D715E64325EAC25739006CFD8737985080E66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FEA92CBC6B5F86B73AE004B0B8372848735A2018B9867959A967586247B1EFC2/0/323830333a363361303a3a2f33322d3332203d3e20323637373631.roa
Signing time:             Wed 18 Dec 2024 15:55:00 +0000
ROA not before:           Wed 18 Dec 2024 15:50:00 +0000
ROA not after:            Wed 17 Dec 2025 15:55:00 +0000
asID:                     267761
IP address blocks:        2803:63a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:66:59:42:a3:82:a1:79:74:19:af:7a:20:86:1c:69:60:af:bc:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030D715E64325EAC25739006CFD8737985080E66
        Validity
            Not Before: Dec 18 15:50:00 2024 GMT
            Not After : Dec 17 15:55:00 2025 GMT
        Subject: CN=4B9B25D8AEC897BF557D5A62B6194A9824E29EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:47:26:11:78:a4:a1:45:6c:2b:eb:4b:c5:
                    ff:3f:12:ff:45:92:7c:c8:cb:ed:5e:3d:9c:55:d8:
                    57:07:34:38:03:25:20:8f:7e:9a:ce:52:2a:39:ac:
                    36:38:88:db:66:2d:32:4f:a0:ba:5f:c2:57:19:cf:
                    0f:5c:2d:ed:6d:84:7c:15:aa:30:20:19:89:75:44:
                    25:ba:40:95:e7:ca:a0:67:8b:f1:87:47:7b:b1:f9:
                    44:26:48:b6:42:9f:81:4f:20:ba:b5:64:54:11:96:
                    57:30:bb:1c:a4:03:ad:ad:cf:d7:58:be:4f:8e:a1:
                    ff:a5:15:c6:8c:87:1b:cb:b4:6f:f1:f3:1b:af:21:
                    3b:d5:c4:ae:f9:09:1c:84:70:5d:03:31:10:dc:26:
                    d4:5e:cb:d5:b5:4b:48:ef:66:9a:3d:1c:dc:dc:87:
                    68:65:82:b4:f3:88:0e:51:55:b7:b9:9e:b5:a2:18:
                    41:e4:d7:d1:79:f8:6a:ec:11:22:f6:7f:bf:07:a4:
                    cc:c9:d1:24:d9:56:05:99:6e:ba:5a:63:af:32:92:
                    69:22:b6:71:71:c7:19:ff:8f:c4:e4:54:97:bb:2d:
                    c5:20:82:de:d4:02:d0:6e:91:33:80:c6:92:0c:4f:
                    eb:98:a3:4e:ea:d5:eb:66:50:4a:cf:dc:ae:88:1a:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9B:25:D8:AE:C8:97:BF:55:7D:5A:62:B6:19:4A:98:24:E2:9E:A1
            X509v3 Authority Key Identifier:
                keyid:03:0D:71:5E:64:32:5E:AC:25:73:90:06:CF:D8:73:79:85:08:0E:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FEA92CBC6B5F86B73AE004B0B8372848735A2018B9867959A967586247B1EFC2/0/030D715E64325EAC25739006CFD8737985080E66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/030D715E64325EAC25739006CFD8737985080E66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEA92CBC6B5F86B73AE004B0B8372848735A2018B9867959A967586247B1EFC2/0/323830333a363361303a3a2f33322d3332203d3e20323637373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:63a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:7d:eb:ad:ff:e0:98:bf:9d:67:c5:36:67:5b:37:75:34:99:
         fe:4f:0e:e9:6e:41:29:48:23:45:4f:6b:89:b6:e5:de:6f:fa:
         63:99:3e:44:4d:f1:5c:fd:e2:64:2b:22:20:73:a1:a6:a7:7a:
         1d:0b:9d:e0:61:64:7f:24:14:29:93:01:c3:f8:4a:82:b9:0f:
         7d:69:ea:37:c5:1f:67:c7:a9:0e:8b:eb:05:c0:11:9f:1f:b8:
         3f:c6:77:6c:bc:c3:fc:75:0a:b3:cc:9a:d8:a2:ce:07:87:5b:
         98:4a:3c:44:00:53:12:ac:2e:c5:6f:04:73:45:38:1e:2d:44:
         69:c3:e7:08:f3:dd:3d:34:7a:e8:56:b6:6c:72:5e:85:51:80:
         e2:eb:6b:a9:01:fc:54:86:99:7b:a4:1f:5a:a9:e6:cc:07:ab:
         fc:e5:95:99:ea:e9:f9:1a:75:ed:f4:67:a7:3d:9b:0a:f9:95:
         3e:0f:15:27:f3:3f:24:a6:9c:88:4b:44:97:fc:a4:3d:a1:d0:
         fb:f8:28:2d:44:32:40:85:3c:e7:a0:be:ae:02:38:6d:27:26:
         0a:26:e5:04:fe:c1:d9:8d:20:13:ec:01:fc:6e:bf:7e:34:9e:
         37:23:d9:a7:44:87:d4:f1:44:ca:76:d0:e6:8c:fd:97:c2:bc:
         d8:45:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----