Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323634363039.roa
File:                     323830333a393134303a3a2f33322d3332203d3e20323634363039.roa (raw, json)
Hash identifier:          9ZdGyZmG/AA5GOVyBVnmPMYLenEA+vN5thKw+6fzoek=
Subject key identifier:   68:A5:04:D0:49:0C:66:0F:F2:8E:E1:61:6A:67:FC:4A:7C:29:E7:5E
Certificate issuer:       /CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
Certificate serial:       56829B664EADB333DE05FBEEF75B64F350F28A16
Authority key identifier: 92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323634363039.roa
Signing time:             Tue 04 Feb 2025 18:55:05 +0000
ROA not before:           Tue 04 Feb 2025 18:50:05 +0000
ROA not after:            Tue 03 Feb 2026 18:55:05 +0000
asID:                     264609
IP address blocks:        2803:9140::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:82:9b:66:4e:ad:b3:33:de:05:fb:ee:f7:5b:64:f3:50:f2:8a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928F2A88614C6122C25510F7A3362CB8F48CEFB3
        Validity
            Not Before: Feb  4 18:50:05 2025 GMT
            Not After : Feb  3 18:55:05 2026 GMT
        Subject: CN=68A504D0490C660FF28EE1616A67FC4A7C29E75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a2:77:3f:af:95:05:e1:83:ec:f2:8e:0b:c3:
                    b5:ba:08:d6:6f:60:fe:b3:ac:9f:c3:89:1c:e3:16:
                    b8:cd:da:50:d1:93:b7:b6:35:f8:f0:82:d9:d3:ad:
                    50:f7:1a:f9:4a:1e:b4:1e:3c:c4:5e:5f:3a:99:60:
                    aa:44:a1:05:85:c9:30:1e:f8:dd:a9:d4:11:34:0c:
                    d7:dc:9c:aa:8e:73:c1:e6:62:2a:9f:ee:d7:19:38:
                    8a:8a:19:53:e4:a6:af:5e:cb:d1:39:50:4b:3d:25:
                    40:41:3e:8f:45:d5:a2:c1:6a:fd:d3:c6:66:e7:ef:
                    a1:95:f0:a4:6d:7f:44:5e:dd:63:04:ba:8a:d4:4f:
                    b7:d7:75:4c:b0:fa:47:0e:76:77:44:20:88:3c:bd:
                    f7:be:a7:57:76:e4:13:1f:90:c1:22:a3:14:7a:c1:
                    5f:9b:8e:1d:8a:1f:1b:42:78:62:c4:5e:37:44:5b:
                    18:1a:f2:89:85:61:2a:d5:bb:75:98:47:8d:3d:9f:
                    5b:83:24:4d:95:5d:68:89:8d:5f:21:2f:e1:54:2f:
                    cb:57:00:55:2b:46:06:3d:f9:14:bf:83:7f:48:47:
                    3e:c2:12:79:a1:82:5f:75:4e:df:78:a4:91:a7:dd:
                    12:99:39:f2:35:1a:4a:70:4b:d5:d9:e9:21:67:49:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A5:04:D0:49:0C:66:0F:F2:8E:E1:61:6A:67:FC:4A:7C:29:E7:5E
            X509v3 Authority Key Identifier:
                keyid:92:8F:2A:88:61:4C:61:22:C2:55:10:F7:A3:36:2C:B8:F4:8C:EF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928F2A88614C6122C25510F7A3362CB8F48CEFB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F601B5A3ECAE9686A4E8C35BD9B838989DF81F7466CD880863EB98969D1BC1E/0/323830333a393134303a3a2f33322d3332203d3e20323634363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9140::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:c6:f7:64:d7:9f:99:bf:7d:67:8c:74:5c:e8:a2:1b:37:68:
         d3:4f:04:30:76:a6:2b:3e:13:a0:6e:69:f6:dd:ea:7e:36:77:
         c3:dc:9b:5e:d6:e1:f5:a8:f5:43:47:5a:b4:ce:ab:52:1e:ab:
         97:a1:da:38:e2:65:51:6b:28:94:32:d2:62:db:aa:f0:80:74:
         59:74:21:52:7f:50:03:54:d1:a9:9c:e5:73:bc:df:6d:3b:f4:
         36:20:52:d6:d9:bb:0a:b3:c9:1e:e1:1b:2a:f8:bc:bd:ab:c4:
         f0:45:58:48:3e:7b:11:81:4b:58:0d:51:2e:8b:76:10:ef:f0:
         01:93:ba:ca:37:ff:f5:01:35:74:93:d1:4a:4a:47:d9:39:f5:
         56:0c:b7:a3:c7:09:d3:32:2b:8f:f5:3b:9e:88:80:bd:07:f6:
         8c:90:d8:cd:e9:09:6d:05:10:96:c1:f2:bd:3b:bb:83:4b:01:
         61:49:ab:76:f2:c5:bb:2a:bd:cb:7b:7d:40:7b:81:5a:c4:77:
         f7:e5:2f:64:bf:58:61:0e:77:3d:b2:0e:1e:7c:71:04:eb:fc:
         80:78:88:52:92:4d:9a:0d:00:de:de:3d:d4:d6:7b:2a:2e:42:
         d9:3c:a1:fc:7e:2a:5f:2c:11:b8:7a:60:98:57:f0:48:cb:b6:
         61:61:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----