Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/323830333a613031303a3a2f33322d3332203d3e20323731373935.roa
File:                     323830333a613031303a3a2f33322d3332203d3e20323731373935.roa (raw, json)
Hash identifier:          /YuNifZvhXti9gguLx2goUuw9LOJyxIQYzMhXs28QtY=
Subject key identifier:   92:99:A5:BB:BF:18:C3:FD:61:FC:BA:F6:67:E4:96:05:AE:C8:C0:2C
Certificate issuer:       /CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
Certificate serial:       5565044987632CF1C5CFA252DE9E39CD93E55C50
Authority key identifier: 45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/323830333a613031303a3a2f33322d3332203d3e20323731373935.roa
Signing time:             Tue 04 Feb 2025 18:47:55 +0000
ROA not before:           Tue 04 Feb 2025 18:42:55 +0000
ROA not after:            Tue 03 Feb 2026 18:47:55 +0000
asID:                     271795
IP address blocks:        2803:a010::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:65:04:49:87:63:2c:f1:c5:cf:a2:52:de:9e:39:cd:93:e5:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
        Validity
            Not Before: Feb  4 18:42:55 2025 GMT
            Not After : Feb  3 18:47:55 2026 GMT
        Subject: CN=9299A5BBBF18C3FD61FCBAF667E49605AEC8C02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bb:cb:e6:97:eb:ab:70:4a:43:41:ab:31:b7:
                    30:33:bd:b2:d9:f0:38:36:3d:9a:07:d3:d8:f3:de:
                    e9:e9:75:be:a8:03:91:9e:ec:66:09:5f:8b:b1:7d:
                    0d:7a:e3:55:38:92:7f:b6:be:82:9e:a6:4f:9d:91:
                    24:39:30:b1:51:15:3e:42:b5:e7:29:47:1a:21:8d:
                    ab:60:54:2e:48:63:c0:33:02:fa:fc:4f:74:6e:f2:
                    3f:15:02:7b:f2:da:fc:dd:df:b3:5d:35:b7:10:01:
                    6b:64:fe:7f:8a:b2:cb:da:9e:74:7c:34:e3:60:63:
                    e5:15:db:28:26:62:6b:67:63:40:3b:34:06:a8:18:
                    3e:03:38:09:d9:8c:0d:59:86:b8:eb:f3:4f:ec:1f:
                    a6:85:36:94:e4:06:21:7d:df:18:d3:3d:b6:1a:6c:
                    a9:b4:5f:0b:e0:be:86:12:c5:f1:3c:cc:85:44:a3:
                    40:61:ea:28:3a:b1:af:32:e5:cd:f7:bd:54:63:e3:
                    d6:94:e4:75:46:0f:bc:ca:18:db:88:22:a2:0c:89:
                    18:58:1e:b8:1c:e9:6e:d4:f6:12:75:b5:88:d9:5e:
                    3a:f1:f7:3a:8c:f3:3b:a3:78:e9:82:ca:69:9d:ac:
                    4a:4a:92:a6:f6:cf:af:f0:86:d8:b0:f4:88:d2:45:
                    94:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:99:A5:BB:BF:18:C3:FD:61:FC:BA:F6:67:E4:96:05:AE:C8:C0:2C
            X509v3 Authority Key Identifier:
                keyid:45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/323830333a613031303a3a2f33322d3332203d3e20323731373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a010::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:ac:a4:49:bc:50:9c:20:7f:b5:a6:28:0c:4c:b5:21:8a:
         6b:29:86:41:5f:7e:b9:e9:8f:2f:40:eb:4e:89:75:ca:34:9f:
         ec:4e:5a:0d:79:f6:a1:7f:8d:30:d0:9c:95:79:b9:e6:ed:3c:
         51:29:67:59:82:e6:0b:36:c0:08:6c:62:a7:07:17:7e:02:95:
         5e:14:5e:56:ca:22:9a:70:0f:16:8e:86:21:cd:39:df:26:34:
         6b:67:0d:c2:51:4d:e7:55:85:9f:fd:4b:1f:23:ae:03:9d:72:
         8e:71:f9:ba:1d:91:5f:a7:b1:86:4e:96:05:76:fa:e9:ee:3c:
         7f:89:fe:76:f2:bf:a5:50:09:c4:84:ef:a4:ac:b6:f0:4e:99:
         de:3c:ff:13:4a:64:db:4f:91:c5:41:e2:b4:f1:f4:da:07:b1:
         1a:98:ae:8b:fb:5c:c0:b7:b9:0c:c6:d6:6f:1a:46:71:86:48:
         74:fc:28:3f:76:25:1e:8e:d2:3d:58:c3:8c:f7:d1:6b:b4:ac:
         2c:af:30:32:65:ff:b9:69:b2:6b:90:0e:e4:1f:a2:5f:46:16:
         c2:0d:d8:49:08:aa:b8:b5:a0:eb:16:db:fb:76:aa:b2:67:96:
         22:9c:ee:5f:63:79:25:24:db:65:ad:9a:83:57:f2:77:b1:84:
         7d:f1:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:13:15 2025 by rpki-client