Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/323830333a633039303a3a2f33322d3438203d3e20323732313334.roa
File:                     323830333a633039303a3a2f33322d3438203d3e20323732313334.roa (raw, json)
Hash identifier:          XjEmjYwnmvCgC6pEpN4PC7IRABytSe22CD2k2JViACE=
Subject key identifier:   DE:BE:08:8C:EA:42:DD:6E:EA:E3:87:2C:4C:CC:75:8E:09:42:1A:73
Certificate issuer:       /CN=B29C9E9E159927EF57070D5FA385A6925A500FA5
Certificate serial:       0EAA41A6780E9AED52F51E2F40019F83C3CFB675
Authority key identifier: B2:9C:9E:9E:15:99:27:EF:57:07:0D:5F:A3:85:A6:92:5A:50:0F:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/323830333a633039303a3a2f33322d3438203d3e20323732313334.roa
Signing time:             Tue 17 Dec 2024 13:55:00 +0000
ROA not before:           Tue 17 Dec 2024 13:50:00 +0000
ROA not after:            Tue 16 Dec 2025 13:55:00 +0000
asID:                     272134
IP address blocks:        2803:c090::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:aa:41:a6:78:0e:9a:ed:52:f5:1e:2f:40:01:9f:83:c3:cf:b6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29C9E9E159927EF57070D5FA385A6925A500FA5
        Validity
            Not Before: Dec 17 13:50:00 2024 GMT
            Not After : Dec 16 13:55:00 2025 GMT
        Subject: CN=DEBE088CEA42DD6EEAE3872C4CCC758E09421A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:e7:b0:87:b5:ad:7f:93:82:2e:22:89:a7:
                    be:e6:e9:a2:07:25:5d:88:ed:5a:14:2f:e7:5b:d1:
                    e0:5f:13:18:3c:12:2d:4b:54:1e:ed:32:b2:35:22:
                    7a:95:ce:5a:f0:0b:76:bb:00:c9:db:c6:ae:8a:be:
                    f3:ce:a5:83:29:70:5f:8f:df:89:30:5f:69:1d:65:
                    78:26:b5:24:26:1c:36:52:35:73:b6:34:82:c8:6f:
                    b9:5a:e5:1d:49:1b:ad:69:44:0e:5b:45:29:d1:fd:
                    7a:80:28:63:a0:84:d0:72:59:a1:fb:b2:5d:59:40:
                    b4:74:41:45:0b:13:48:57:de:66:53:49:5f:61:78:
                    49:90:10:0f:94:c1:99:49:b6:82:72:f3:c6:4e:e6:
                    8f:82:96:54:c3:10:cc:b6:55:ba:e6:0a:94:35:a3:
                    04:5b:01:c3:38:3b:d9:29:8f:2d:23:f9:b4:92:7c:
                    f3:e8:70:86:8f:0b:11:7f:43:f3:16:57:e6:7c:13:
                    dc:8e:61:62:28:2c:9e:b3:3e:76:7e:5e:81:f4:42:
                    e8:3a:fc:c0:aa:c7:98:34:cd:6a:01:73:f5:d5:d0:
                    57:e2:fc:eb:d4:7a:42:ef:c0:89:da:68:7e:e7:af:
                    c5:c0:16:d5:35:43:b5:49:c6:9c:36:7d:96:99:37:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:08:8C:EA:42:DD:6E:EA:E3:87:2C:4C:CC:75:8E:09:42:1A:73
            X509v3 Authority Key Identifier:
                keyid:B2:9C:9E:9E:15:99:27:EF:57:07:0D:5F:A3:85:A6:92:5A:50:0F:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29C9E9E159927EF57070D5FA385A6925A500FA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A388CF1CB759565CA16512368019D24A226388D0543722EE1B97EFD99C098AF6/0/323830333a633039303a3a2f33322d3438203d3e20323732313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c090::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:44:62:a4:bf:3b:d8:3d:83:e6:eb:16:5c:b3:2b:69:b3:a4:
         a5:5e:68:64:11:98:ef:5a:3c:46:46:c1:01:d5:79:39:7c:5c:
         95:9f:8d:12:40:7d:99:8a:46:dd:32:5f:96:89:07:55:59:14:
         2b:db:f4:31:cb:70:ed:a8:df:4f:a4:59:d1:84:8e:41:2c:0a:
         27:2c:6b:6c:f5:79:c5:f2:9a:bd:71:40:aa:58:c1:19:34:01:
         57:09:0d:88:13:58:b5:a3:6f:06:6a:5f:64:dc:9e:a9:6b:48:
         d9:26:f5:fa:c0:65:ca:7c:cc:19:79:6c:cf:9c:c6:c2:1e:76:
         07:33:12:0d:c7:ac:3c:78:b6:fb:35:46:35:0e:ef:ae:99:c4:
         bd:1c:dc:1a:b8:12:19:83:62:b6:83:58:86:90:99:67:cb:9d:
         7c:3e:e2:39:94:a9:7b:5b:53:c5:b7:29:68:c2:d0:d7:45:86:
         21:f6:77:6e:d2:90:f5:12:eb:a1:bb:b4:f8:e7:34:13:6d:4c:
         13:27:42:3a:d9:f9:31:f6:9b:ea:76:05:11:53:a5:65:2c:35:
         e9:72:a9:fd:e6:27:7a:6e:bc:93:7c:00:d0:ff:2c:e3:fc:9d:
         be:a3:25:9d:54:6b:52:3b:b1:cc:9a:ef:fc:a0:59:d5:48:29:
         b0:37:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----