Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/323830333a356632303a3a2f33322d3332203d3e20323636383030.roa
File:                     323830333a356632303a3a2f33322d3332203d3e20323636383030.roa (raw, json)
Hash identifier:          GMTt5fu3IQG9Xf49I8jIlGLYIEUaf4FkTKM3fDcrBRY=
Subject key identifier:   ED:23:24:17:A7:58:EC:DD:3D:F1:50:4A:45:F6:1C:98:AE:6A:42:2E
Certificate issuer:       /CN=E5E5F55E39001EF24D658430EB3A500D80E40348
Certificate serial:       681631044E5E17E3727603495701953C949B4CEF
Authority key identifier: E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/323830333a356632303a3a2f33322d3332203d3e20323636383030.roa
Signing time:             Wed 17 Jul 2024 15:15:00 +0000
ROA not before:           Wed 17 Jul 2024 15:10:00 +0000
ROA not after:            Wed 16 Jul 2025 15:15:00 +0000
asID:                     266800
IP address blocks:        2803:5f20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:16:31:04:4e:5e:17:e3:72:76:03:49:57:01:95:3c:94:9b:4c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5F55E39001EF24D658430EB3A500D80E40348
        Validity
            Not Before: Jul 17 15:10:00 2024 GMT
            Not After : Jul 16 15:15:00 2025 GMT
        Subject: CN=ED232417A758ECDD3DF1504A45F61C98AE6A422E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:ca:24:8d:d3:c4:72:1e:c2:08:77:c3:07:
                    aa:b4:e8:ec:53:52:a2:d3:22:1c:75:fd:52:8a:13:
                    b6:9e:d3:b9:a0:37:70:73:f2:b7:fc:c6:3c:42:6d:
                    95:c0:84:04:d3:f2:68:85:6c:c6:c4:fc:c7:47:27:
                    45:e0:5d:55:45:a4:ff:04:61:57:07:6a:22:8d:87:
                    9d:21:75:69:24:e7:67:28:9b:ad:28:a1:8d:4b:7b:
                    84:bd:65:96:3d:0f:9f:f8:62:89:32:15:92:ca:ab:
                    0e:ba:f0:f6:d1:56:7d:f8:7c:e7:8f:c0:49:17:c5:
                    73:3d:0c:49:3a:fa:80:b2:16:21:64:51:68:a3:98:
                    0a:2a:d5:f7:1f:bd:f8:86:89:07:e3:d4:a7:48:d1:
                    03:20:a7:1c:ce:65:6d:b6:2a:37:7e:3b:e1:8e:21:
                    ec:46:63:b3:98:cc:d7:c4:0b:38:4d:fc:9b:7a:64:
                    20:6f:a4:e4:fa:e6:cb:63:49:c4:8d:c7:ff:e9:7e:
                    5a:36:fc:5d:50:37:1f:b6:5e:2b:60:05:f2:db:1f:
                    fd:c8:76:ae:12:91:8c:74:44:b3:51:96:98:85:3f:
                    38:ae:24:26:d5:21:35:56:5b:40:ac:c1:87:27:75:
                    9f:f0:0b:f4:63:73:f4:8a:0b:49:c3:3e:c9:44:90:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:23:24:17:A7:58:EC:DD:3D:F1:50:4A:45:F6:1C:98:AE:6A:42:2E
            X509v3 Authority Key Identifier:
                keyid:E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/323830333a356632303a3a2f33322d3332203d3e20323636383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:be:bb:17:35:33:89:a2:d6:c4:22:e2:68:0e:bc:f4:56:e6:
         96:ca:f7:9c:4f:91:6e:11:67:8d:34:0a:2c:e0:89:b4:ed:66:
         0a:75:bc:d8:bf:36:1e:cd:88:64:74:9a:61:6c:9d:86:70:30:
         ae:88:23:06:96:41:34:f3:b7:bd:0f:48:c7:1a:74:fd:ae:1d:
         52:c6:c1:de:c7:d3:7a:b1:6b:ac:22:c3:49:45:89:d8:cd:79:
         86:34:65:f5:f3:97:a1:fc:14:96:0f:50:fe:38:3f:a5:40:94:
         a5:80:a2:f4:a3:5a:9e:00:a5:ec:ff:29:1f:84:c5:91:38:c6:
         b1:d4:fb:e5:9b:b1:9a:e1:ff:f9:9d:4a:d9:0b:5b:06:63:f3:
         7c:87:53:49:a9:f5:c7:8e:e3:ee:c3:81:25:69:9f:34:11:b2:
         76:22:ad:b6:0d:5a:b4:5e:ae:c4:f0:db:7a:3f:38:7f:ce:9c:
         c7:b6:9d:e8:0d:b2:d5:92:d9:db:26:e7:8b:bf:54:39:05:f9:
         48:17:9c:4d:16:3a:51:48:3b:65:e9:5d:bf:d5:f0:7d:f5:59:
         86:c3:11:5e:96:7f:8e:e8:ae:9f:95:10:d5:6d:3f:e8:71:af:
         c3:d6:97:b6:b1:bb:f8:54:9f:9f:d3:40:33:69:1e:d8:83:60:
         25:8e:20:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----