Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/323830333a643635303a3a2f33322d3438203d3e20323733323037.roa
File:                     323830333a643635303a3a2f33322d3438203d3e20323733323037.roa (raw, json)
Hash identifier:          S0cHn/cKjB9WGZ0BGsqPJUDq1VmFJzomjMzk03vggKw=
Subject key identifier:   2A:EF:E8:91:12:E3:AF:6A:A9:20:3E:16:11:3A:CA:CF:6A:3F:4E:D4
Certificate issuer:       /CN=44D774522D212FB550FA2899457F9707578175DD
Certificate serial:       30777CD636CD73E649A03A46A2EC9539947D425F
Authority key identifier: 44:D7:74:52:2D:21:2F:B5:50:FA:28:99:45:7F:97:07:57:81:75:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44D774522D212FB550FA2899457F9707578175DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/323830333a643635303a3a2f33322d3438203d3e20323733323037.roa
Signing time:             Fri 19 Jul 2024 23:55:00 +0000
ROA not before:           Fri 19 Jul 2024 23:50:00 +0000
ROA not after:            Fri 18 Jul 2025 23:55:00 +0000
asID:                     273207
IP address blocks:        2803:d650::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:77:7c:d6:36:cd:73:e6:49:a0:3a:46:a2:ec:95:39:94:7d:42:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D774522D212FB550FA2899457F9707578175DD
        Validity
            Not Before: Jul 19 23:50:00 2024 GMT
            Not After : Jul 18 23:55:00 2025 GMT
        Subject: CN=2AEFE89112E3AF6AA9203E16113ACACF6A3F4ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:25:39:9f:ce:e3:f0:0b:f6:a2:2c:43:24:
                    1d:9f:8c:fa:5f:40:d6:ba:0a:01:22:b9:0d:56:a4:
                    72:f5:0e:05:cb:48:35:7a:85:96:47:01:d9:9f:14:
                    f3:d8:d9:1d:6a:75:fd:39:4f:bd:db:02:c0:4a:62:
                    2e:22:68:9e:d0:40:e9:b1:67:96:07:2f:44:b6:f0:
                    28:ed:b4:fc:2c:d9:c1:a6:a1:c9:21:6c:a5:a0:80:
                    41:23:f4:ec:87:5d:53:17:2c:f7:ff:75:28:ea:6f:
                    67:b4:7c:81:68:0e:45:15:d7:10:25:69:0d:55:73:
                    76:ac:a1:6a:d4:cd:7b:14:58:a9:94:18:10:db:61:
                    f7:9a:66:2f:ca:a4:f9:b1:e6:11:37:f8:6e:5a:b4:
                    a5:a1:2f:55:95:68:86:4a:70:e1:52:cb:88:a0:07:
                    00:34:80:69:8e:7b:31:6f:72:4d:47:dd:55:d7:ea:
                    e4:d2:26:da:80:ad:43:7b:c9:c1:9b:ab:11:22:f8:
                    0e:84:09:fb:5d:d0:f5:b8:4c:6a:d3:8a:96:33:0f:
                    35:e6:f0:1e:54:3d:7c:01:e7:97:2a:04:7e:73:0f:
                    8c:0c:6e:2d:e7:7f:19:47:44:50:73:5b:f0:2b:cd:
                    98:32:d4:3a:df:37:6d:48:b7:a0:f4:17:5e:ac:d2:
                    d9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EF:E8:91:12:E3:AF:6A:A9:20:3E:16:11:3A:CA:CF:6A:3F:4E:D4
            X509v3 Authority Key Identifier:
                keyid:44:D7:74:52:2D:21:2F:B5:50:FA:28:99:45:7F:97:07:57:81:75:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/44D774522D212FB550FA2899457F9707578175DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44D774522D212FB550FA2899457F9707578175DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65190BA08F6DD1022A5870FB9533F82E954F03F3C80D23B628FA3B48A2C31218/0/323830333a643635303a3a2f33322d3438203d3e20323733323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d650::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:4f:2d:e2:05:c6:a1:d0:7f:e3:27:fa:d2:3c:8f:df:a2:
         21:19:25:e7:5d:63:71:c4:71:f6:9c:5b:03:2d:0b:33:d9:dd:
         18:31:30:e3:95:bf:bf:5d:5b:0d:6b:33:5e:46:ba:6d:2d:f4:
         4e:49:83:0a:6e:b0:62:d0:cd:ce:16:4d:0b:09:9e:32:b3:e2:
         46:65:7b:f6:e2:89:47:09:8c:8b:8e:52:d6:8e:d7:99:5e:d6:
         01:d8:4e:a9:45:68:61:12:fa:d8:01:0e:9a:c4:8a:98:35:9f:
         c2:55:ec:e8:e6:13:4e:d2:02:81:ff:91:47:67:4f:bb:e5:9b:
         f7:80:b9:b4:78:ff:48:a0:cb:65:81:6f:44:9a:d1:f4:d4:50:
         e7:5c:36:0e:68:0c:48:68:b1:79:b6:42:b1:34:34:66:af:a5:
         6a:fa:b0:ef:fa:35:43:c5:7b:24:d7:83:b3:3c:8c:0c:91:52:
         f7:a9:eb:ea:ba:32:9c:f8:24:cf:0b:4d:bf:20:80:a9:fc:b8:
         f4:86:40:e4:48:0d:ef:a1:a7:12:91:cf:a4:5b:f5:e8:20:7f:
         3a:50:d8:9d:87:cf:9f:52:69:86:5b:e9:c3:49:02:38:37:a3:
         75:19:76:de:fa:7a:76:25:44:24:f8:fa:91:ec:f0:e8:29:24:
         c2:19:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----