Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EF0327402A628EEF171713718DCDB8502C6E5A4D0422A64E8A43D33872EF02E/0/323830333a313839303a3a2f33322d3438203d3e20323732383034.roa
File:                     323830333a313839303a3a2f33322d3438203d3e20323732383034.roa (raw, json)
Hash identifier:          7WySZiCiiXJKE6HBrCKWSKgaYHlRCxsIYmBj4Ee03NY=
Subject key identifier:   7D:FB:92:A8:77:FE:74:C8:DA:DE:FC:48:A5:F3:F3:41:4F:19:BA:0E
Certificate issuer:       /CN=CD700B9229E5635B1B7011454956A74DFD74E686
Certificate serial:       48A274B16AA7A682FE0B61F2C33AAE2AC2776CF0
Authority key identifier: CD:70:0B:92:29:E5:63:5B:1B:70:11:45:49:56:A7:4D:FD:74:E6:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD700B9229E5635B1B7011454956A74DFD74E686.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EF0327402A628EEF171713718DCDB8502C6E5A4D0422A64E8A43D33872EF02E/0/323830333a313839303a3a2f33322d3438203d3e20323732383034.roa
Signing time:             Tue 05 Mar 2024 17:47:45 +0000
ROA not before:           Tue 05 Mar 2024 17:42:45 +0000
ROA not after:            Tue 04 Mar 2025 17:47:45 +0000
asID:                     272804
IP address blocks:        2803:1890::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a2:74:b1:6a:a7:a6:82:fe:0b:61:f2:c3:3a:ae:2a:c2:77:6c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD700B9229E5635B1B7011454956A74DFD74E686
        Validity
            Not Before: Mar  5 17:42:45 2024 GMT
            Not After : Mar  4 17:47:45 2025 GMT
        Subject: CN=7DFB92A877FE74C8DADEFC48A5F3F3414F19BA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:a5:ab:9b:1c:f7:00:74:52:f4:58:f4:1c:
                    f0:0d:10:dd:78:d8:e2:03:38:5b:f3:8c:eb:88:f8:
                    26:c3:25:73:7d:70:ca:1d:58:9d:19:cf:cd:18:db:
                    fb:7f:97:95:fe:58:b4:00:7c:45:9c:87:cd:f8:cc:
                    4f:fa:60:96:7e:89:3a:93:98:7c:27:90:5b:42:2b:
                    fb:ef:1a:68:95:5b:0c:b9:5a:74:d1:57:68:78:a1:
                    2a:69:cd:8a:cb:f7:74:e0:de:37:fe:d6:06:21:b6:
                    2c:1d:3b:45:a1:9b:97:77:e7:a0:c5:39:71:5c:e6:
                    40:49:9b:2d:3a:06:9c:29:45:68:73:a2:e4:ca:09:
                    96:a0:cb:55:68:f7:cf:14:f8:1f:60:54:f9:db:ee:
                    87:1f:56:36:a4:db:29:6e:f4:d1:2a:a7:af:6d:d7:
                    fe:ee:61:80:a3:9d:49:42:11:78:e7:c4:83:24:6e:
                    18:9a:3b:4c:84:84:2d:8f:5f:76:4d:00:03:c7:7a:
                    ac:24:fc:fc:c3:cd:83:ec:a2:0b:1a:9e:b5:45:bc:
                    f5:70:33:fe:0b:a9:2a:39:7d:06:aa:c8:5a:5b:a3:
                    f9:fb:c3:58:cb:a9:b4:05:d5:46:ef:79:91:97:d9:
                    d9:b7:83:3d:68:4b:cb:a7:76:aa:94:32:c8:44:f9:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FB:92:A8:77:FE:74:C8:DA:DE:FC:48:A5:F3:F3:41:4F:19:BA:0E
            X509v3 Authority Key Identifier:
                keyid:CD:70:0B:92:29:E5:63:5B:1B:70:11:45:49:56:A7:4D:FD:74:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EF0327402A628EEF171713718DCDB8502C6E5A4D0422A64E8A43D33872EF02E/0/CD700B9229E5635B1B7011454956A74DFD74E686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD700B9229E5635B1B7011454956A74DFD74E686.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EF0327402A628EEF171713718DCDB8502C6E5A4D0422A64E8A43D33872EF02E/0/323830333a313839303a3a2f33322d3438203d3e20323732383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1890::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:41:d8:07:dc:1b:4e:9d:7d:54:ee:89:b4:98:f1:74:ea:a4:
         b5:c7:ae:0f:fe:8d:89:6f:72:bd:fd:07:91:46:b2:41:bd:8c:
         80:fc:01:b5:d6:c9:f6:9e:83:4a:22:45:6b:01:ab:f6:ee:98:
         65:60:48:9c:a7:db:5b:2a:d8:78:ba:8b:e4:a7:23:c5:18:79:
         16:83:b2:87:c1:6d:17:59:11:7e:c8:1c:ec:ed:d1:01:bc:4b:
         41:73:19:1c:a1:44:44:3b:26:fc:59:23:68:c5:a4:d1:f4:8e:
         b5:4b:a6:77:7e:71:aa:7a:74:4e:ea:47:25:51:6b:8e:bb:a4:
         84:df:22:df:45:44:e1:3e:e1:ae:1d:35:0b:b2:d8:5b:5d:33:
         9d:20:66:75:54:4a:2b:2d:73:1a:c2:ec:55:80:4e:a3:14:5b:
         f9:a1:8e:9f:ba:de:5b:ac:d1:b2:b7:33:56:15:a4:29:c3:1f:
         15:2e:a5:20:1a:69:07:0f:ea:65:24:cb:f0:30:f8:b0:9a:19:
         9e:cb:ee:6a:ec:02:f0:ff:1e:bc:05:86:51:39:e1:c5:0c:07:
         c3:26:3a:2d:7d:c3:a8:fc:99:14:1e:76:83:fb:7d:2f:d4:92:
         30:7e:a0:97:b4:1b:ae:a2:38:84:b6:4e:90:e2:02:e6:d0:7f:
         1d:e0:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----