Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/323830333a343863303a3a2f33322d3438203d3e20323632323037.roa
File:                     323830333a343863303a3a2f33322d3438203d3e20323632323037.roa (raw, json)
Hash identifier:          Yzy5yBk5UnBADEcqfV2VnPVrbcI8oghPw4JwF8rFiuY=
Subject key identifier:   C6:24:FD:1C:F2:72:35:F4:EA:3C:0F:46:8F:39:7A:D6:F6:0C:C1:AA
Certificate issuer:       /CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
Certificate serial:       2C6677BF16C6169F16205C1ED1ED2625BDB79712
Authority key identifier: 89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/323830333a343863303a3a2f33322d3438203d3e20323632323037.roa
Signing time:             Tue 04 Feb 2025 19:57:54 +0000
ROA not before:           Tue 04 Feb 2025 19:52:54 +0000
ROA not after:            Tue 03 Feb 2026 19:57:54 +0000
asID:                     262207
IP address blocks:        2803:48c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:66:77:bf:16:c6:16:9f:16:20:5c:1e:d1:ed:26:25:bd:b7:97:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89BE1B948EADFCFCFDF457A0A903F357865A2553
        Validity
            Not Before: Feb  4 19:52:54 2025 GMT
            Not After : Feb  3 19:57:54 2026 GMT
        Subject: CN=C624FD1CF27235F4EA3C0F468F397AD6F60CC1AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:5d:af:63:a4:a5:31:7b:f1:6e:6c:5f:cb:
                    d7:db:15:f0:e5:0b:d6:bc:89:24:bd:83:b5:63:49:
                    22:0e:a6:ce:5b:93:f3:de:ca:66:17:0f:ca:0b:8a:
                    18:10:00:6f:8e:49:37:e9:87:13:05:1c:66:0b:5e:
                    f3:c8:f6:f1:2b:eb:81:c7:ea:6a:94:cd:e9:9e:3d:
                    01:a1:a8:e6:a3:93:a2:94:43:92:7f:7e:ad:cd:c2:
                    73:e1:1b:7b:ba:54:06:94:90:7b:e8:3a:87:9d:98:
                    9f:e6:cd:ef:70:8b:34:24:5c:1d:72:38:aa:58:39:
                    83:5a:00:f4:9e:57:25:dd:0c:17:24:e6:bf:0d:8a:
                    15:79:8d:49:bd:99:f4:80:d2:b9:b9:3e:4e:f7:82:
                    d8:16:5e:a8:10:e5:72:f3:10:0e:87:34:18:8e:d0:
                    6a:d6:e7:af:fe:32:44:bd:e9:75:b3:6e:5e:16:fd:
                    25:c7:2f:1e:3b:25:c7:ba:a9:95:51:a3:37:8b:ce:
                    a0:1d:01:a0:ba:3c:6f:d8:d2:1a:99:19:94:a7:54:
                    fe:0c:cd:83:24:e0:ce:a8:6f:2d:86:75:be:e3:c8:
                    90:0b:a2:4d:ef:f8:3f:ad:56:ff:ef:ad:f4:ec:cf:
                    85:e1:fe:89:4a:3e:a8:d2:7d:9f:20:0e:4a:c9:3b:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:24:FD:1C:F2:72:35:F4:EA:3C:0F:46:8F:39:7A:D6:F6:0C:C1:AA
            X509v3 Authority Key Identifier:
                keyid:89:BE:1B:94:8E:AD:FC:FC:FD:F4:57:A0:A9:03:F3:57:86:5A:25:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89BE1B948EADFCFCFDF457A0A903F357865A2553.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D165758D14E0C972F8BA5603302507FE8A677E7223D72A8211AE62DBD5565E7D/0/323830333a343863303a3a2f33322d3438203d3e20323632323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:13:5d:04:77:f6:bd:f3:3c:83:dd:e5:cf:a6:46:ac:12:63:
         a5:43:4e:90:03:fb:46:93:a4:61:5e:90:0a:85:3e:91:71:b8:
         07:37:1f:42:8a:3a:30:d2:6c:14:f5:53:3c:0e:f2:79:9a:11:
         e0:b9:2a:c3:7d:d1:c6:69:f3:b4:4f:93:8a:96:94:31:18:20:
         3f:34:a7:39:ad:29:a5:16:9c:65:56:dc:e2:15:ae:b6:ae:b4:
         5e:54:42:39:55:d6:df:19:a4:cb:c4:09:94:8e:98:c4:44:b5:
         8c:ba:a4:54:7b:11:57:b9:e4:05:50:3d:35:04:f2:92:5c:a2:
         06:01:f0:c3:37:1d:15:58:b9:dc:06:a7:b0:b9:b8:3b:92:ec:
         ca:3d:ba:64:03:1f:db:f5:c7:4a:76:6b:98:22:99:d1:0e:14:
         ea:d0:42:8a:5d:a7:ed:8d:b1:1d:d0:12:f5:f5:70:8b:d7:9e:
         4c:3c:16:b1:ee:93:46:f5:31:e9:29:03:89:5a:96:45:51:b4:
         21:be:a5:8b:3b:cd:49:f4:37:08:39:05:bd:7e:e0:10:e0:42:
         bb:5e:1f:73:0b:87:a3:27:ab:2d:8b:9b:1a:be:7b:bb:72:b5:
         c3:2c:5e:39:e1:79:4e:a0:dd:b8:d7:8a:83:f5:66:3d:2d:4b:
         4d:97:86:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----