Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/323830333a373532303a3a2f33322d3438203d3e20323636363934.roa
File:                     323830333a373532303a3a2f33322d3438203d3e20323636363934.roa (raw, json)
Hash identifier:          gW2W8nzpUvb7nPJaF14hrJIQMp2zHQy55S8w4/UpC5E=
Subject key identifier:   2B:A7:5F:0F:8F:C6:15:B1:89:B6:AF:4B:72:F4:43:71:0D:45:EE:F4
Certificate issuer:       /CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
Certificate serial:       312735B468C1A6F8C888290C4E9F97472D606AE7
Authority key identifier: F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/323830333a373532303a3a2f33322d3438203d3e20323636363934.roa
Signing time:             Wed 29 May 2024 11:35:00 +0000
ROA not before:           Wed 29 May 2024 11:30:00 +0000
ROA not after:            Wed 28 May 2025 11:35:00 +0000
asID:                     266694
IP address blocks:        2803:7520::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:27:35:b4:68:c1:a6:f8:c8:88:29:0c:4e:9f:97:47:2d:60:6a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
        Validity
            Not Before: May 29 11:30:00 2024 GMT
            Not After : May 28 11:35:00 2025 GMT
        Subject: CN=2BA75F0F8FC615B189B6AF4B72F443710D45EEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:a2:a9:56:76:7b:17:8d:2d:8a:3a:1c:5a:
                    91:90:10:6c:0c:47:87:56:e1:f5:db:47:5a:56:e8:
                    ae:14:cc:f3:ad:82:00:53:70:7c:30:d4:1f:0c:09:
                    7e:e5:9a:ea:f6:d2:49:cd:d9:ee:5f:ca:9f:da:c0:
                    ec:a0:7f:36:26:27:87:9a:c0:a9:39:e5:f5:96:96:
                    3d:16:1f:f2:b3:77:e6:7a:ef:e9:f5:31:a8:47:f3:
                    82:02:6b:33:37:ee:72:47:d3:e0:f8:58:34:94:6e:
                    58:10:eb:13:2c:32:61:14:f6:7c:f1:9b:9b:91:42:
                    9c:09:b4:c3:e4:d3:f2:c8:21:bb:e5:68:6d:82:88:
                    45:13:37:61:3f:36:f7:ad:9c:77:d8:64:6c:5a:7b:
                    9c:41:15:0e:62:37:3a:51:56:67:c1:83:7a:4f:de:
                    41:83:32:87:48:1e:8d:0c:65:62:13:8c:aa:aa:00:
                    1d:4e:30:05:30:f4:ee:e2:d5:38:3d:0a:30:ed:28:
                    f2:2c:43:61:24:41:cf:c7:77:2d:bf:3f:19:64:bf:
                    c8:aa:83:e7:07:20:d1:13:1f:cf:40:da:fb:0c:ef:
                    b3:02:e2:87:ce:ba:a9:29:d2:75:f4:23:e0:b5:28:
                    41:d9:ff:0c:f5:d6:e9:61:13:31:9d:2d:7e:95:e5:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A7:5F:0F:8F:C6:15:B1:89:B6:AF:4B:72:F4:43:71:0D:45:EE:F4
            X509v3 Authority Key Identifier:
                keyid:F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/323830333a373532303a3a2f33322d3438203d3e20323636363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7520::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:52:04:f6:ec:f8:8b:f0:e2:f3:df:cd:8b:58:11:cc:4f:02:
         6f:39:03:64:f6:22:49:8c:ba:59:24:7b:f2:a5:88:16:79:f6:
         b6:c2:c4:eb:d8:eb:50:0f:c7:b9:a6:32:d0:f3:1a:25:3b:a4:
         03:b3:0e:c3:dc:3b:97:7a:fe:66:33:07:0e:7a:89:a4:81:2c:
         cc:4b:b4:21:cc:36:57:37:2b:6f:bf:ac:b2:1a:c8:5a:5c:19:
         bd:4e:cc:5e:65:38:ea:e5:35:8f:e3:f8:9e:ed:37:d2:bc:09:
         69:fd:5b:34:2b:87:09:0a:d6:70:21:5a:0d:f0:96:fa:e8:df:
         04:79:72:18:86:20:c0:e0:8f:14:ef:0b:54:43:96:c0:a9:59:
         88:79:97:e2:bd:81:c5:d1:2e:c2:84:7b:ba:bc:1f:f5:c8:72:
         6e:c6:79:e6:10:ac:14:52:94:2e:9d:ee:8d:ab:a3:5b:07:54:
         ab:96:77:53:04:8e:d7:7f:20:76:84:e7:ae:b6:6c:28:20:97:
         6e:b0:7d:ac:ca:3c:80:2d:50:19:7e:83:f1:3b:f8:fa:3d:f1:
         16:0d:c6:b2:31:11:6d:54:32:d5:ac:b6:ba:82:ef:aa:ff:f5:
         c2:04:b6:c8:ed:fb:8c:ef:a2:88:13:e7:b6:af:9c:9c:85:fa:
         c0:c3:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----