Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323633313935.roa
File:                     323830333a376535303a3a2f33322d3438203d3e20323633313935.roa (raw, json)
Hash identifier:          Imtm1vVD/Pi4zjmqt8fR8j5NVKNOcab0+z/AetyhkNg=
Subject key identifier:   FF:BC:3A:E2:90:19:5A:A9:2E:77:76:30:A1:5B:30:F7:12:4A:E7:81
Certificate issuer:       /CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
Certificate serial:       7F7324F5214F401ABAC411C9307D6B7B1C88BDC5
Authority key identifier: D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323633313935.roa
Signing time:             Tue 20 Aug 2024 17:10:00 +0000
ROA not before:           Tue 20 Aug 2024 17:05:00 +0000
ROA not after:            Tue 19 Aug 2025 17:10:00 +0000
asID:                     263195
IP address blocks:        2803:7e50::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:73:24:f5:21:4f:40:1a:ba:c4:11:c9:30:7d:6b:7b:1c:88:bd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2CAAB2CDC295C8BA276169D10D1870BBB92D74F
        Validity
            Not Before: Aug 20 17:05:00 2024 GMT
            Not After : Aug 19 17:10:00 2025 GMT
        Subject: CN=FFBC3AE290195AA92E777630A15B30F7124AE781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e0:25:2d:92:e7:40:f1:bb:e5:2d:28:d2:e1:
                    d2:05:c9:20:c2:05:19:e9:90:01:9a:ff:63:79:74:
                    b5:08:96:42:40:5b:7d:22:58:59:b0:34:1f:09:8f:
                    19:65:5b:49:10:7e:02:77:c6:f7:6f:9a:3e:4b:d2:
                    b1:b8:54:09:75:db:1b:00:6a:00:0c:81:f0:a3:8a:
                    77:9c:51:a1:88:04:33:06:96:18:23:b2:88:e9:40:
                    5c:b5:6a:fc:93:4b:26:9a:3e:26:80:5f:00:8e:41:
                    a3:bf:65:bf:49:d9:d5:85:d1:3b:f7:89:c9:85:0d:
                    26:d2:e3:3a:32:c0:70:bc:57:80:81:44:56:03:ca:
                    d3:f5:67:b2:1a:f7:29:1a:c1:28:01:d5:59:90:57:
                    25:ae:b6:07:1d:4f:0f:d0:04:32:f3:dc:8b:d3:28:
                    83:c5:8c:72:76:42:75:1d:ee:92:4f:cd:63:77:01:
                    29:95:c3:0b:61:35:28:df:5d:81:44:09:e2:c1:44:
                    3c:00:1f:28:49:63:8d:e4:1e:dc:ba:55:43:27:e4:
                    24:f9:0e:1c:56:f4:8c:a1:35:85:4c:d1:b3:7f:0e:
                    11:12:40:0c:ec:8a:37:6f:58:d7:39:68:d0:ac:93:
                    bb:dd:23:72:01:48:b7:62:5e:ed:7b:1a:ea:f1:a1:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:3A:E2:90:19:5A:A9:2E:77:76:30:A1:5B:30:F7:12:4A:E7:81
            X509v3 Authority Key Identifier:
                keyid:D2:CA:AB:2C:DC:29:5C:8B:A2:76:16:9D:10:D1:87:0B:BB:92:D7:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2CAAB2CDC295C8BA276169D10D1870BBB92D74F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/985AEFDCA9C633DF884BD5ED3FD9FCB1E7065D7C859523AF886E91805EEAB406/0/323830333a376535303a3a2f33322d3438203d3e20323633313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:33:f0:79:b4:4f:8b:33:9c:fa:ce:af:6b:16:b6:f8:ea:57:
         68:ab:a0:ab:c1:9a:e9:67:d9:6e:af:96:b3:67:0c:db:eb:2b:
         a3:7f:6c:ea:1f:cc:bf:85:3d:9e:09:30:b3:b9:fb:70:cb:c2:
         06:ab:66:44:54:53:99:a9:53:7f:ae:97:4e:ce:99:df:8b:b3:
         12:c8:6f:c1:43:09:2e:10:b4:1a:70:65:31:a1:43:40:55:79:
         0b:58:1b:1f:53:1e:97:5b:e6:89:df:3c:f1:9e:9a:25:d5:00:
         aa:37:dd:bc:db:12:9f:fd:26:a2:79:57:be:5f:ba:28:ae:04:
         4d:0c:02:01:9a:4c:a0:78:a8:f0:2c:69:d0:5c:fb:85:d7:f8:
         e1:b3:4b:3c:39:1c:b3:b1:4e:58:7c:f2:0b:13:02:15:bd:6e:
         8b:d3:45:40:30:7f:c3:60:8e:7c:6d:a8:21:78:36:c7:ea:9f:
         f9:af:16:27:d6:6f:5e:d8:91:d3:1e:0b:81:5d:dc:70:99:b6:
         57:2f:a2:c0:50:f6:96:a2:c5:5a:05:4a:45:fe:e0:43:3e:64:
         b2:f5:e4:13:4b:d3:18:41:5f:12:8a:5d:6b:29:a2:5a:7e:3d:
         5b:93:44:2b:85:c6:2a:6d:d9:ac:e2:d1:a7:0e:c4:8e:9c:43:
         ee:76:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----