Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/323830333a323461303a3a2f33322d3438203d3e20323636383233.roa
File:                     323830333a323461303a3a2f33322d3438203d3e20323636383233.roa (raw, json)
Hash identifier:          0UF7lN3yk5hABu8yrop4hVb6wwkKlgl5x53aQUyw6vI=
Subject key identifier:   22:E5:52:14:D2:09:E7:64:E0:92:D5:74:6E:0D:16:2B:E4:DF:27:FC
Certificate issuer:       /CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2
Certificate serial:       70C880E8834A371C1CF9F51E6072AA61AF681ADD
Authority key identifier: BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/323830333a323461303a3a2f33322d3438203d3e20323636383233.roa
Signing time:             Tue 04 Feb 2025 18:10:21 +0000
ROA not before:           Tue 04 Feb 2025 18:05:21 +0000
ROA not after:            Tue 03 Feb 2026 18:10:21 +0000
asID:                     266823
IP address blocks:        2803:24a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c8:80:e8:83:4a:37:1c:1c:f9:f5:1e:60:72:aa:61:af:68:1a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2
        Validity
            Not Before: Feb  4 18:05:21 2025 GMT
            Not After : Feb  3 18:10:21 2026 GMT
        Subject: CN=22E55214D209E764E092D5746E0D162BE4DF27FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:f7:32:07:1a:91:0c:95:64:98:28:23:33:
                    48:ed:63:09:c1:19:be:17:20:79:a9:b2:fd:69:81:
                    1b:88:5c:d6:3e:42:af:66:e4:c1:3a:d9:1f:e0:32:
                    07:dc:25:63:44:25:3a:50:f9:41:ee:6f:1a:61:1d:
                    48:6b:4d:18:4c:16:15:bd:a1:3e:17:9f:0a:54:49:
                    ed:27:8d:14:89:0c:97:00:c6:4e:d0:56:ee:d5:5d:
                    e0:41:95:0a:89:d4:08:7b:a1:30:0a:ca:91:af:12:
                    19:a1:9c:bf:55:47:23:7d:68:78:85:d2:06:90:92:
                    18:d6:96:05:c2:3f:a3:eb:eb:a7:20:37:0f:8d:55:
                    c4:95:6b:da:67:fb:4f:9b:8d:d8:2d:5f:f7:3c:55:
                    56:f3:22:dc:69:af:98:20:1b:3b:3b:9e:67:eb:c2:
                    a5:fe:90:7a:f7:cc:c0:1e:fb:55:e9:9a:23:9b:3a:
                    21:6b:9f:86:b2:1f:e8:0d:d2:c3:23:81:af:0a:74:
                    9d:11:49:c3:7c:1b:9f:4f:5e:ba:a0:16:5f:b4:80:
                    31:a3:94:75:c4:8e:80:0e:db:85:f8:fb:e1:6f:53:
                    3f:aa:c1:84:af:ad:d5:36:ce:c2:64:aa:aa:1d:a3:
                    1d:6c:df:02:9b:c9:2c:b6:51:e3:c7:b2:ba:e2:ff:
                    ca:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E5:52:14:D2:09:E7:64:E0:92:D5:74:6E:0D:16:2B:E4:DF:27:FC
            X509v3 Authority Key Identifier:
                keyid:BD:56:4C:3B:5D:A2:F7:EC:EB:85:CB:C5:70:D1:65:1B:F1:BD:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD564C3B5DA2F7ECEB85CBC570D1651BF1BD62A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9873155B052ABDF79E5FFBDB97358597081C9122C1A2F51A054E4FE2CF0CD582/0/323830333a323461303a3a2f33322d3438203d3e20323636383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:24a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:74:f2:c9:e2:00:97:5b:36:38:80:b9:45:1f:d4:b3:91:57:
         5a:98:c3:25:70:f5:64:41:51:33:ec:23:b1:e4:ef:67:f2:e5:
         fc:07:c1:f3:d0:f1:22:0b:56:5b:8d:85:fb:e5:40:b3:1d:5a:
         e6:12:8c:6e:d1:f5:71:a1:43:5c:ba:d2:10:f8:f5:2c:78:5c:
         98:0c:b0:01:0a:d7:ae:98:bd:cb:c7:d7:cc:b7:2a:09:78:95:
         74:d6:a3:06:fc:f8:41:25:37:f3:14:69:80:25:80:75:98:d0:
         14:e0:44:ab:7e:22:17:72:8b:7a:14:c6:2e:18:13:54:5f:e8:
         e2:f5:a0:36:df:3e:0a:c3:87:de:75:93:5b:50:a5:56:47:c7:
         93:a9:11:19:8a:10:0b:3c:0b:16:6b:95:b9:cf:38:e9:29:ca:
         2d:c2:40:65:86:ac:25:58:3a:8e:e3:03:33:9a:3b:b4:98:4d:
         a2:78:04:f5:6c:1a:98:82:95:c3:8e:a4:cc:1f:c1:93:b7:d8:
         82:f2:fb:e6:75:19:4c:83:05:2e:c5:1d:d1:fc:e5:79:4a:2a:
         ad:35:7f:af:9e:bb:90:74:27:27:97:1d:5f:70:06:6d:c3:a6:
         1b:f0:36:70:60:b5:84:10:d2:57:76:af:fe:0f:9e:41:cb:8f:
         f9:c0:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----