Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/323830303a3535303a3a2f33322d3438203d3e2037303034.roa
File:                     323830303a3535303a3a2f33322d3438203d3e2037303034.roa (raw, json)
Hash identifier:          9q+p1FzmcEvjt5GuVbZUSWBNnAkrJTGNa9k4gbJ/N4Y=
Subject key identifier:   2B:17:19:A6:C2:E8:FE:53:33:2D:5D:41:73:AF:DA:DE:4A:D9:2D:21
Certificate issuer:       /CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
Certificate serial:       26BCBEC3117FC9088514947D67C6DF7A105E0BFD
Authority key identifier: 08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/323830303a3535303a3a2f33322d3438203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 17:44:28 +0000
ROA not before:           Tue 05 Mar 2024 17:39:28 +0000
ROA not after:            Tue 04 Mar 2025 17:44:28 +0000
asID:                     7004
IP address blocks:        2800:550::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bc:be:c3:11:7f:c9:08:85:14:94:7d:67:c6:df:7a:10:5e:0b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AECF1AD3B0E3076A995B8999E623DAE2819C1A
        Validity
            Not Before: Mar  5 17:39:28 2024 GMT
            Not After : Mar  4 17:44:28 2025 GMT
        Subject: CN=2B1719A6C2E8FE53332D5D4173AFDADE4AD92D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:6f:32:91:a3:be:03:f7:72:d5:93:06:1e:
                    7d:1e:b7:fc:0c:25:52:b9:bf:3c:81:6e:ae:f8:a8:
                    d0:c3:79:ee:76:6b:21:70:51:86:4e:ed:ae:63:51:
                    48:7f:c5:76:c3:f9:dc:ee:6a:df:b6:86:51:2e:ba:
                    79:6d:a4:e1:e4:09:18:d6:a7:c5:0f:8a:5c:b4:99:
                    c5:0f:02:00:5e:f7:b4:ac:55:9b:32:21:e9:b2:53:
                    99:71:9b:12:f6:82:5f:af:46:0a:ac:e8:86:72:2d:
                    0c:c1:30:31:83:3f:02:44:b4:89:71:fc:75:05:3f:
                    da:e0:af:01:8f:1c:8d:ad:a3:02:f2:13:a3:e0:28:
                    9a:99:88:d1:86:fa:a1:5d:98:7a:b2:d5:20:7c:0f:
                    0e:82:d4:4f:4f:8e:eb:ef:ed:5a:38:72:ce:ec:5e:
                    b5:b4:ba:97:57:4a:91:37:83:43:17:a0:3b:fa:3f:
                    89:c0:fc:c3:aa:79:1b:cc:39:e8:95:a0:33:c1:63:
                    dd:78:b8:43:d5:97:94:a8:2a:e1:98:96:b5:84:a9:
                    50:78:2b:f5:f7:47:c0:29:40:77:d9:30:9a:1d:cd:
                    5f:f2:c2:8a:d5:cf:4b:bb:c2:52:74:31:f3:ce:e9:
                    f4:56:24:75:34:be:d8:6f:02:e9:53:12:11:d0:50:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:17:19:A6:C2:E8:FE:53:33:2D:5D:41:73:AF:DA:DE:4A:D9:2D:21
            X509v3 Authority Key Identifier:
                keyid:08:AE:CF:1A:D3:B0:E3:07:6A:99:5B:89:99:E6:23:DA:E2:81:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AECF1AD3B0E3076A995B8999E623DAE2819C1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF82658CA230B353BC30F605C840DC17E411E9A57EB01DD637E15AF210D06F9/0/323830303a3535303a3a2f33322d3438203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:550::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:94:0c:d7:e7:5b:dc:64:d1:d4:68:0b:2d:a9:50:2a:29:ec:
         63:21:34:f5:42:4a:29:7f:f4:d5:94:e0:14:59:5d:e8:c1:43:
         bf:15:bf:b9:ef:0d:d3:37:d8:9f:5a:74:3c:2d:e3:f0:77:21:
         f9:72:e8:a4:e5:31:14:0c:19:e9:e9:52:bf:d2:da:09:bc:34:
         7a:e5:24:14:e8:f6:66:d5:89:ac:ec:92:ee:45:48:8a:42:93:
         a1:e0:7f:75:63:46:c1:f1:05:c9:b9:2c:1d:63:08:b2:cb:d2:
         a5:b2:ba:9c:1c:0f:47:33:04:28:0d:32:b3:87:7b:a2:24:fe:
         30:b4:0b:ad:24:04:03:20:b7:a1:e3:b2:ef:c0:72:b4:51:4f:
         64:85:e1:9d:0d:97:cf:e1:0f:e9:6e:3f:16:58:3d:5f:f8:a3:
         ce:c1:b0:b7:d8:f7:d3:3c:45:98:04:84:76:e5:27:e8:9f:ab:
         e2:71:57:5a:7f:d9:5f:ea:b9:fc:a2:2a:33:94:10:52:54:7b:
         3b:76:59:20:d8:1e:41:a5:b1:68:9a:14:76:61:92:91:e3:d5:
         8b:69:8e:a5:b6:29:c1:c4:90:51:5d:46:00:b3:48:7d:3e:54:
         51:7f:28:95:69:bc:d2:af:86:75:21:34:93:73:8e:41:b7:d2:
         69:9c:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----