Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203137323837.roa
File:                     323830303a613033303a3a2f33322d3634203d3e203137323837.roa (raw, json)
Hash identifier:          sZ0aG7PSpDQwh2yeMrjMMDOdmdd6iHAmMJB5utd6lH8=
Subject key identifier:   01:EB:49:C5:D7:53:24:DE:94:3A:7C:9B:BA:D8:EF:3F:3B:80:AA:45
Certificate issuer:       /CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
Certificate serial:       416920F03DD749E2411C4035E0BEAA1A6BE95836
Authority key identifier: 9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203137323837.roa
Signing time:             Fri 23 Aug 2024 22:35:00 +0000
ROA not before:           Fri 23 Aug 2024 22:30:00 +0000
ROA not after:            Fri 22 Aug 2025 22:35:00 +0000
asID:                     17287
IP address blocks:        2800:a030::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:69:20:f0:3d:d7:49:e2:41:1c:40:35:e0:be:aa:1a:6b:e9:58:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7EE2E0253D989D85B5851EF144D109EBB610DD
        Validity
            Not Before: Aug 23 22:30:00 2024 GMT
            Not After : Aug 22 22:35:00 2025 GMT
        Subject: CN=01EB49C5D75324DE943A7C9BBAD8EF3F3B80AA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:1b:cc:6a:eb:63:da:41:f0:9c:8f:26:9a:
                    13:94:aa:75:46:5d:7b:96:c9:82:e2:88:11:4e:8b:
                    e6:ef:19:b9:a6:e4:30:b9:b9:bb:96:b8:99:23:77:
                    88:3e:15:45:ee:58:5c:23:53:82:07:d9:85:62:cd:
                    db:2a:fe:20:72:44:7d:68:72:e4:01:b7:3c:09:a5:
                    55:09:9d:75:e3:d5:00:2b:fd:b8:e0:19:5a:41:3b:
                    61:66:46:5c:4f:a6:ad:b8:97:9d:29:be:39:81:37:
                    9d:07:bb:0c:b4:c8:70:fc:98:3d:b2:8a:bc:70:6a:
                    2d:0e:b2:55:3c:c6:d1:ac:09:fa:d5:27:9b:c3:b5:
                    86:32:b3:05:3a:d5:8c:56:5a:e5:d5:73:1f:69:15:
                    7f:d1:89:20:2d:a1:b9:13:79:76:3a:33:5f:46:a5:
                    04:db:e7:0f:87:98:6d:12:53:fc:80:1e:3f:ba:1d:
                    0d:71:b6:1b:4b:ba:7b:54:47:86:e0:ad:11:1a:27:
                    38:23:a8:38:56:be:99:54:ae:a8:69:55:8d:7f:1d:
                    33:b8:04:17:d4:0c:5f:ff:bf:0a:e9:7e:be:82:71:
                    ac:76:4e:b4:1d:f2:2a:e2:b9:5c:86:99:93:a2:68:
                    c2:ba:6b:de:9c:a5:d4:20:f2:93:42:86:89:59:c3:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EB:49:C5:D7:53:24:DE:94:3A:7C:9B:BA:D8:EF:3F:3B:80:AA:45
            X509v3 Authority Key Identifier:
                keyid:9A:7E:E2:E0:25:3D:98:9D:85:B5:85:1E:F1:44:D1:09:EB:B6:10:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A7EE2E0253D989D85B5851EF144D109EBB610DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC6775539AB5E464C39B712202D11F3E1F6B139B01BCBE4452CCB15F3BFF5C2F/0/323830303a613033303a3a2f33322d3634203d3e203137323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a030::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:60:78:52:08:fd:f8:8d:30:e8:9d:59:d7:25:45:65:2e:ba:
         23:ef:6e:76:c4:09:d3:13:65:0a:97:c1:f5:04:d1:ec:18:ad:
         73:69:78:3b:4e:9a:47:db:cf:9f:63:9d:3e:19:3a:fe:39:94:
         5e:fd:ef:e9:a7:fd:47:09:a3:0b:6b:b0:68:13:15:65:c8:c9:
         c1:ef:bd:8d:a8:b8:7a:0b:62:64:49:cb:79:04:11:af:f3:9b:
         e5:f4:76:dc:2e:02:94:61:cc:dc:51:54:35:f3:36:f1:4c:27:
         71:fc:b2:69:7f:0f:59:67:11:bb:ac:93:53:44:f2:40:35:0d:
         f9:f0:ff:55:ab:bc:f2:6d:cb:7d:f3:c6:d8:c5:65:1d:3c:fd:
         5f:71:5d:72:c3:e2:54:9a:d9:b7:bb:5c:a5:94:e0:f5:e6:35:
         fe:44:2b:f4:29:a9:7e:76:a1:01:ed:9d:94:cc:7c:37:dd:02:
         1c:10:f9:90:99:cf:b2:24:3c:0d:3d:45:5c:c5:6e:f3:ab:20:
         eb:d1:3f:ac:79:a8:c4:ed:cf:c6:14:09:32:45:db:40:a2:ad:
         10:37:89:66:1a:23:ed:85:a9:00:0f:1f:94:ee:26:33:27:b5:
         ea:3e:1b:d2:31:a4:11:ef:93:7f:10:5d:a1:7c:dc:a7:d1:79:
         07:43:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----