Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E72357D9916041599530C01675F01171BAF7FA482A4C2C64A31D566A027ED19/0/323830333a626165303a3a2f33322d3332203d3e20323639393437.roa
File:                     323830333a626165303a3a2f33322d3332203d3e20323639393437.roa (raw, json)
Hash identifier:          18aCozzhbnQFPcrFLcPnTLhZzK3ADHnj7GrnN3o4Shc=
Subject key identifier:   CF:56:DD:D7:9F:0A:25:6B:F4:E0:43:F4:AF:4F:1B:8C:02:04:6F:EB
Certificate issuer:       /CN=F6C5967562F136D595A8232FAABB144D451C5519
Certificate serial:       338A4389F2B65D7AB6092AF9E2B84AD6FA5DD3DF
Authority key identifier: F6:C5:96:75:62:F1:36:D5:95:A8:23:2F:AA:BB:14:4D:45:1C:55:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6C5967562F136D595A8232FAABB144D451C5519.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E72357D9916041599530C01675F01171BAF7FA482A4C2C64A31D566A027ED19/0/323830333a626165303a3a2f33322d3332203d3e20323639393437.roa
Signing time:             Tue 05 Mar 2024 18:10:46 +0000
ROA not before:           Tue 05 Mar 2024 18:05:46 +0000
ROA not after:            Tue 04 Mar 2025 18:10:46 +0000
asID:                     269947
IP address blocks:        2803:bae0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8a:43:89:f2:b6:5d:7a:b6:09:2a:f9:e2:b8:4a:d6:fa:5d:d3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C5967562F136D595A8232FAABB144D451C5519
        Validity
            Not Before: Mar  5 18:05:46 2024 GMT
            Not After : Mar  4 18:10:46 2025 GMT
        Subject: CN=CF56DDD79F0A256BF4E043F4AF4F1B8C02046FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:3d:48:b7:0b:77:17:aa:f3:85:3e:1c:45:
                    da:4d:be:16:ff:eb:d7:c7:07:62:ba:86:8b:43:2b:
                    44:29:e5:c8:d6:c1:63:22:f7:45:6a:b1:72:7f:ea:
                    e8:8f:e2:7c:c2:88:ad:67:35:a7:2d:7f:f6:3e:dc:
                    ab:70:78:40:bf:fc:6a:3b:bd:c4:ba:db:a6:ae:8b:
                    60:94:81:81:12:33:53:d4:54:2a:46:51:c2:5c:cc:
                    39:54:c2:0f:91:83:a0:f5:42:dc:96:df:9a:2d:6b:
                    1e:4c:3e:cf:be:08:53:2a:ef:f0:9f:a7:3e:b9:cf:
                    b2:d5:02:08:39:db:3a:44:49:61:f5:44:a2:42:fc:
                    05:04:0d:f1:41:3e:b5:ad:dc:f0:3c:56:5a:37:10:
                    1f:21:dd:e9:7e:1e:16:38:13:de:6a:74:6a:12:8e:
                    17:39:7e:7e:7b:c6:dc:32:92:f7:6c:b4:e2:cf:44:
                    56:d1:d7:20:4e:ae:56:09:1b:d0:ad:af:d8:b9:a1:
                    24:a0:26:b0:4f:5c:2c:b7:84:29:8d:bd:f9:6c:63:
                    87:22:1e:b3:8b:d5:07:71:e3:94:9a:95:3c:25:e9:
                    3f:d2:38:0e:c3:65:39:04:9b:9d:36:34:4c:43:26:
                    7f:70:93:33:1c:67:f0:42:32:ea:e0:f4:da:2f:bd:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:56:DD:D7:9F:0A:25:6B:F4:E0:43:F4:AF:4F:1B:8C:02:04:6F:EB
            X509v3 Authority Key Identifier:
                keyid:F6:C5:96:75:62:F1:36:D5:95:A8:23:2F:AA:BB:14:4D:45:1C:55:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E72357D9916041599530C01675F01171BAF7FA482A4C2C64A31D566A027ED19/0/F6C5967562F136D595A8232FAABB144D451C5519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6C5967562F136D595A8232FAABB144D451C5519.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E72357D9916041599530C01675F01171BAF7FA482A4C2C64A31D566A027ED19/0/323830333a626165303a3a2f33322d3332203d3e20323639393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:29:7d:43:4d:0d:26:b8:92:d6:c3:e6:ca:16:4f:23:52:e8:
         f8:f7:45:38:4b:6f:a6:b0:ba:13:e7:d0:5d:59:7d:7b:4a:da:
         0b:d8:e7:80:28:39:e9:73:46:70:91:a2:7a:12:94:37:fc:d3:
         0c:a6:54:13:90:fa:1b:77:70:3f:8f:5a:5f:1f:bc:14:9e:5f:
         6c:bb:52:38:24:0e:67:ab:a4:b4:6f:0b:76:72:02:be:35:0f:
         dc:23:d2:23:3d:7e:25:a9:11:f6:d7:68:11:81:e7:c8:61:9e:
         79:0a:ee:78:68:6e:83:63:56:08:ac:a3:c1:10:e4:19:62:f5:
         4b:29:6a:16:d6:a2:76:f9:e3:dd:21:98:ca:0a:ba:75:95:e1:
         17:96:81:90:ec:e1:23:98:ac:84:f9:b7:d5:66:76:eb:4c:9b:
         b5:c2:d0:9c:1d:21:d8:3e:8b:9d:14:c3:6d:97:56:e0:92:c2:
         d2:f0:61:24:e7:0e:0e:d4:a6:d3:31:6b:0f:66:7b:2b:65:e7:
         d2:d4:f7:66:57:0a:ab:3c:87:4b:55:f2:12:18:20:41:08:a4:
         a1:ca:15:7b:4f:bd:a6:78:ee:47:d0:8d:a9:d0:f4:85:c3:d1:
         61:5f:2a:8a:dc:7f:a1:26:b8:9c:52:a9:00:3d:bb:61:e7:6c:
         6a:76:ee:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----