Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e203131353536.roa
File:                     323830333a333430303a3a2f33322d3438203d3e203131353536.roa (raw, json)
Hash identifier:          MhPxk7MlQ4QbHmcpSKbvECHMyU7HmRVIse8+asBBFZo=
Subject key identifier:   2F:B8:7B:1D:16:4F:06:FF:72:C7:A8:B8:76:81:ED:2E:12:D0:F5:81
Certificate issuer:       /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial:       70F509AEC8786EC30553D0D0BEC5DE077F0D57D4
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e203131353536.roa
Signing time:             Fri 14 Mar 2025 14:20:00 +0000
ROA not before:           Fri 14 Mar 2025 14:15:00 +0000
ROA not after:            Fri 13 Mar 2026 14:20:00 +0000
asID:                     11556
IP address blocks:        2803:3400::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f5:09:ae:c8:78:6e:c3:05:53:d0:d0:be:c5:de:07:7f:0d:57:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
        Validity
            Not Before: Mar 14 14:15:00 2025 GMT
            Not After : Mar 13 14:20:00 2026 GMT
        Subject: CN=2FB87B1D164F06FF72C7A8B87681ED2E12D0F581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:92:8f:34:2a:54:80:38:90:6f:5a:b8:f2:d3:
                    6c:17:68:dd:62:9b:54:ab:96:3c:e0:76:0e:de:d3:
                    96:05:af:15:ae:23:61:7c:0a:f9:ee:aa:76:82:39:
                    a7:7e:ce:76:24:9d:05:6e:9f:11:14:c5:b7:6a:72:
                    da:5b:2a:93:f7:49:a3:ec:62:94:b5:9c:7b:60:fc:
                    5c:61:ae:7b:40:3f:fd:0c:a8:62:52:cd:b4:14:f5:
                    f5:ab:0f:86:1d:b4:84:e0:1c:50:81:fe:4e:b0:e2:
                    23:f4:6e:18:48:db:af:65:7b:ed:c4:d3:9e:9a:1b:
                    74:d3:70:30:69:f7:f6:08:d0:94:fe:01:b2:d1:38:
                    38:a6:71:3a:ac:21:a8:66:89:ce:10:8e:49:9e:44:
                    98:1d:5b:d5:f5:c7:d0:ec:1a:32:88:4b:b8:23:a0:
                    9b:e3:92:ae:1a:be:60:66:2e:c6:f2:d9:58:44:f2:
                    54:01:9c:9e:af:7f:66:f8:a6:36:c7:ad:60:30:03:
                    f9:12:82:5b:14:8c:86:c8:09:63:e4:c2:60:1d:e4:
                    c7:f4:1a:fe:ef:fa:cd:25:05:5f:eb:46:e0:38:63:
                    8f:22:32:8d:8f:46:08:06:47:24:c5:fc:2d:40:b9:
                    13:26:4d:1b:c0:72:15:93:5c:a6:91:f6:fd:a8:55:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B8:7B:1D:16:4F:06:FF:72:C7:A8:B8:76:81:ED:2E:12:D0:F5:81
            X509v3 Authority Key Identifier:
                keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/323830333a333430303a3a2f33322d3438203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3400::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:61:77:43:4d:0c:88:ab:ad:a8:98:7e:52:7a:eb:f5:aa:
         38:50:8f:39:f1:ec:83:3b:fd:ba:bf:c3:5c:0c:34:7d:ab:d8:
         d0:da:b1:17:60:f9:35:10:11:a1:f2:46:8f:4a:2d:e1:c4:f3:
         07:f4:ef:64:02:79:69:35:97:dd:e7:87:21:5d:65:fd:82:e6:
         27:65:93:26:bd:22:ab:8e:e9:34:22:fd:4a:0b:5e:b5:8f:6e:
         54:b9:0d:eb:8a:05:ad:32:53:ef:00:f1:fe:ae:d0:e3:d1:a7:
         b1:73:c4:00:72:15:6d:b7:60:6c:24:06:e7:3f:c4:02:82:c4:
         71:56:41:87:ec:61:ca:c0:f6:54:36:ed:12:9c:99:34:25:70:
         35:5f:ab:32:b6:26:29:96:f2:04:91:77:50:e3:45:ff:8c:86:
         44:41:6e:52:ad:c7:a3:11:10:65:2c:61:c6:f4:87:9d:0e:79:
         40:73:85:30:b8:fb:c4:ba:69:bd:79:a7:f1:c6:35:c1:c8:13:
         85:d2:9d:90:84:87:c8:ad:2b:82:0d:2d:cd:22:69:be:72:a0:
         37:d6:af:45:db:06:d3:5a:3c:ed:99:4f:b7:d2:1f:f6:0e:b4:
         dd:83:2a:03:20:65:01:f3:59:7c:05:a0:1e:7c:a2:99:05:fd:
         d6:db:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----