Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7533A261078092F78D0E5F5CB5410B33927196153D6E9D879A79FE1F9407DEBC/0/323830333a353961303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a353961303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          7AxSk/imNMp/eXSBhcDODBGJkbcA1S7A+OAZ2Mm7lT8=
Subject key identifier:   40:8E:16:14:11:DD:B7:66:5A:B1:D7:97:F4:BB:C7:4B:FA:71:A4:41
Certificate issuer:       /CN=6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869
Certificate serial:       22062B694778924B36D195AA54B3BC44EBDD9857
Authority key identifier: 6C:0E:0D:34:AB:9E:B2:E2:E9:EE:13:B6:7B:B5:E6:C7:63:49:E8:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7533A261078092F78D0E5F5CB5410B33927196153D6E9D879A79FE1F9407DEBC/0/323830333a353961303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:50:07 +0000
ROA not before:           Tue 04 Feb 2025 18:45:07 +0000
ROA not after:            Tue 03 Feb 2026 18:50:07 +0000
asID:                     52468
IP address blocks:        2803:59a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:06:2b:69:47:78:92:4b:36:d1:95:aa:54:b3:bc:44:eb:dd:98:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869
        Validity
            Not Before: Feb  4 18:45:07 2025 GMT
            Not After : Feb  3 18:50:07 2026 GMT
        Subject: CN=408E161411DDB7665AB1D797F4BBC74BFA71A441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:8b:bc:1a:35:69:1a:f7:69:65:b2:a2:56:
                    8a:d8:4a:74:b1:a8:60:5b:17:99:54:e9:1b:2e:19:
                    40:84:f6:4e:46:f6:04:8c:82:b5:2f:43:f8:60:c3:
                    c5:33:aa:95:a3:4a:3e:15:1d:80:d1:a8:4b:73:ef:
                    f8:dd:d2:f5:f0:da:5a:e7:8a:14:2d:5c:12:4e:09:
                    da:4d:26:aa:36:07:ac:ce:61:c1:e7:82:34:d8:6f:
                    50:eb:2e:49:12:21:65:25:70:0d:af:7a:40:79:76:
                    b4:c9:92:38:a6:a5:d4:80:60:1f:25:00:d8:06:05:
                    bd:13:cd:5d:e3:60:8d:e5:ec:ae:f8:63:6e:f7:ac:
                    e3:d7:7f:6e:67:77:49:f4:73:46:65:17:5a:e2:f8:
                    8e:b6:52:48:62:74:bd:11:e9:58:fc:49:78:0d:76:
                    45:46:31:74:67:75:f3:1d:fb:78:f2:c0:48:ee:13:
                    fa:09:db:66:51:25:d6:8d:5e:3f:8f:e0:96:2c:68:
                    60:d3:7e:cd:a8:ca:d7:b5:3d:42:a8:3f:e6:3a:06:
                    82:d2:2e:30:8e:7b:61:36:36:18:3c:c8:21:66:45:
                    ce:c6:e9:0a:3b:24:ac:6e:e0:f5:53:c4:4a:72:bd:
                    fe:f3:a9:24:fe:88:88:a7:b5:dd:fd:2f:65:29:0b:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8E:16:14:11:DD:B7:66:5A:B1:D7:97:F4:BB:C7:4B:FA:71:A4:41
            X509v3 Authority Key Identifier:
                keyid:6C:0E:0D:34:AB:9E:B2:E2:E9:EE:13:B6:7B:B5:E6:C7:63:49:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7533A261078092F78D0E5F5CB5410B33927196153D6E9D879A79FE1F9407DEBC/0/6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C0E0D34AB9EB2E2E9EE13B67BB5E6C76349E869.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7533A261078092F78D0E5F5CB5410B33927196153D6E9D879A79FE1F9407DEBC/0/323830333a353961303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:59a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:d6:96:68:32:64:75:c1:e3:5b:c0:25:04:60:d0:11:73:03:
         85:10:3a:85:5e:21:26:e9:fb:01:2f:36:3d:05:39:6d:13:f6:
         0a:d1:09:0d:d9:a2:d9:82:67:20:aa:d7:06:b0:0b:5e:dc:5d:
         8c:e3:fc:69:f4:ed:ea:32:e1:b5:0e:f9:2b:92:3b:19:7f:f7:
         b7:29:c1:45:6d:30:9a:5e:fe:2c:70:a7:02:3a:3c:34:b8:56:
         36:c9:b3:72:e3:6a:41:48:4c:84:a4:92:71:c1:82:ab:39:06:
         cb:b9:f7:32:86:56:3c:b3:63:a8:e4:eb:fd:80:f2:f3:49:8c:
         4a:fa:8b:c2:28:0c:82:67:1e:c5:b8:5d:50:cf:a7:fd:67:3b:
         e1:fc:37:65:4f:75:d7:e6:7d:1b:1b:b4:34:d2:5d:83:37:e8:
         7a:3a:32:b7:36:74:72:0b:b3:84:4b:49:f0:01:09:48:c9:7c:
         8a:22:6b:57:e7:97:a2:7a:41:e6:e9:35:02:51:c5:70:eb:14:
         1b:bf:a8:f6:aa:1f:d4:7d:19:63:4a:85:85:51:fc:18:25:9e:
         da:e9:8e:f5:7e:18:c7:67:b9:7b:5f:e4:c1:d0:1b:1a:a1:ad:
         52:7f:d2:df:ae:bf:b3:dd:1e:a5:0c:53:f2:34:f9:48:62:8f:
         d9:44:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----