Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/323830333a643736303a3a2f33322d3438203d3e20323633373033.roa
File:                     323830333a643736303a3a2f33322d3438203d3e20323633373033.roa (raw, json)
Hash identifier:          B34eUK51ezKKKYbSXsanax3/YE9F3gvwsxBZDBSVwNs=
Subject key identifier:   8C:B2:51:2F:ED:10:2C:00:E6:94:A7:51:78:3D:43:7E:2C:ED:B1:F2
Certificate issuer:       /CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Certificate serial:       5FC59DE540927A6A084052A081A8A6BEDA9DE01C
Authority key identifier: C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/323830333a643736303a3a2f33322d3438203d3e20323633373033.roa
Signing time:             Tue 04 Feb 2025 18:26:07 +0000
ROA not before:           Tue 04 Feb 2025 18:21:07 +0000
ROA not after:            Tue 03 Feb 2026 18:26:07 +0000
asID:                     263703
IP address blocks:        2803:d760::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c5:9d:e5:40:92:7a:6a:08:40:52:a0:81:a8:a6:be:da:9d:e0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
        Validity
            Not Before: Feb  4 18:21:07 2025 GMT
            Not After : Feb  3 18:26:07 2026 GMT
        Subject: CN=8CB2512FED102C00E694A751783D437E2CEDB1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:38:09:27:42:d8:06:78:92:ed:7d:57:f7:18:
                    e5:f6:17:cc:50:77:c2:36:ff:a0:5b:fe:7c:89:21:
                    98:a2:39:8c:31:c1:dc:d8:f4:de:1c:f8:73:72:16:
                    84:e4:75:27:28:62:13:68:58:85:35:cf:71:44:ca:
                    1a:29:1d:8b:c0:9d:21:86:17:3b:8f:2d:30:62:53:
                    cf:cb:62:31:5b:b3:4f:5e:f0:0b:e3:30:fc:b7:75:
                    88:28:5c:e4:7f:a8:92:7c:01:6a:59:5c:55:5c:97:
                    a6:f7:45:c2:96:17:23:5a:9e:3e:e8:c2:5f:12:ef:
                    a1:1d:af:c3:80:d9:1f:5e:ed:13:ed:5e:f3:81:ee:
                    ec:03:da:4e:05:2b:4e:3c:42:2e:85:d0:3a:f1:31:
                    ee:60:62:fa:df:5c:c0:26:a5:96:f4:43:1a:36:70:
                    76:4c:8e:30:97:a8:44:be:c6:a9:5f:d0:c9:60:b4:
                    4c:a5:67:68:9a:e5:cb:d0:fb:0b:23:0d:0f:bc:11:
                    c7:a3:be:db:3c:c3:2f:fa:13:b1:7d:0b:ed:b1:5a:
                    c0:2a:aa:28:a8:8e:08:29:17:77:75:76:0d:a2:a1:
                    f4:ee:e8:ac:c7:58:f6:0e:c8:15:df:ba:90:96:90:
                    f3:88:7f:15:cd:03:34:99:ee:29:75:f1:e0:e0:8b:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:51:2F:ED:10:2C:00:E6:94:A7:51:78:3D:43:7E:2C:ED:B1:F2
            X509v3 Authority Key Identifier:
                keyid:C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/323830333a643736303a3a2f33322d3438203d3e20323633373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d760::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:f1:a8:e4:4c:df:a0:66:97:b7:25:27:35:c5:00:b2:52:47:
         6f:12:8e:b4:3a:b7:c7:a7:db:ee:9b:63:2e:33:a9:00:5f:45:
         b0:bb:a9:7d:f7:aa:51:dd:80:9c:ef:55:e7:cd:32:90:af:c6:
         99:5f:4b:23:c7:b1:ca:2b:fe:01:42:32:93:ed:39:4c:c8:18:
         55:20:87:f1:7c:cc:7d:ff:8b:c9:9f:15:a8:cb:97:4c:bd:35:
         f7:f7:eb:59:85:c2:54:4b:c2:cf:32:9b:b9:bb:20:c8:01:d4:
         ef:5b:fa:9d:33:01:50:57:72:4f:f7:77:11:a6:4d:a9:a7:c4:
         41:65:55:66:89:a3:94:c2:d3:36:f4:3f:9c:5b:4a:ff:64:7d:
         f2:7b:e5:48:09:b8:18:9f:f4:31:bc:41:8c:8c:34:e3:0d:03:
         c4:b9:1e:8f:03:fa:f1:7d:91:c0:5f:7c:7c:eb:30:dd:25:e3:
         18:64:f6:df:b9:98:08:26:ac:43:18:ee:29:3e:2f:7e:83:d6:
         87:d2:f1:da:f9:f3:9d:de:40:8c:ca:01:0f:f3:5e:5a:e7:c6:
         4a:66:13:b2:21:85:ae:d2:27:43:b8:25:04:98:4e:d1:07:82:
         84:7b:c3:70:b0:b3:2a:03:1e:bf:e8:59:70:b1:18:f8:44:9e:
         b7:41:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----