Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0669EED9CDF0525F5BF96A46D8113D8AB46B644D653DFB4BC77594FB2E0FE70E/0/323830333a323765303a3a2f33322d3332203d3e20323730303939.roa
File:                     323830333a323765303a3a2f33322d3332203d3e20323730303939.roa (raw, json)
Hash identifier:          gGtEtW9/3cyz7XETTjmSqTgCLZWUiPuU6tMDeS3CEvU=
Subject key identifier:   0A:18:C8:27:58:02:EA:DC:8D:0B:09:66:92:E7:BA:AB:A1:DF:54:49
Certificate issuer:       /CN=ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9
Certificate serial:       25DEF63DE47500434BDAB8F582C817B70218CB88
Authority key identifier: AD:D2:79:A2:ED:BB:13:0D:21:D1:E8:1F:BE:BC:CC:B6:62:12:C2:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0669EED9CDF0525F5BF96A46D8113D8AB46B644D653DFB4BC77594FB2E0FE70E/0/323830333a323765303a3a2f33322d3332203d3e20323730303939.roa
Signing time:             Tue 04 Feb 2025 18:03:24 +0000
ROA not before:           Tue 04 Feb 2025 17:58:24 +0000
ROA not after:            Tue 03 Feb 2026 18:03:24 +0000
asID:                     270099
IP address blocks:        2803:27e0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:de:f6:3d:e4:75:00:43:4b:da:b8:f5:82:c8:17:b7:02:18:cb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9
        Validity
            Not Before: Feb  4 17:58:24 2025 GMT
            Not After : Feb  3 18:03:24 2026 GMT
        Subject: CN=0A18C8275802EADC8D0B096692E7BAABA1DF5449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:92:47:44:7e:82:e1:e0:92:ed:2b:3c:cf:
                    dc:ea:c7:00:c0:2d:f7:70:01:5d:a3:14:24:16:4a:
                    da:57:4c:8a:55:86:79:8b:48:a3:a2:9a:f9:a9:07:
                    09:2f:92:77:56:32:3e:d0:95:bd:85:6e:75:a6:4d:
                    ff:d1:f9:5a:af:da:36:ff:a5:0e:b1:5a:70:ac:59:
                    9c:5e:b1:86:55:83:fa:de:2d:c5:73:4e:e9:45:ea:
                    11:17:7d:c7:81:34:b2:e1:34:6a:ca:97:e4:9e:d6:
                    c6:f8:d2:6f:d8:79:d1:cb:d5:59:03:d8:bd:c3:28:
                    c3:b1:98:91:38:8c:11:f5:d1:17:36:5e:1c:a0:40:
                    22:23:3b:cc:68:b3:ac:cc:37:77:78:0e:08:4d:b7:
                    a7:c3:c6:a3:c7:f3:82:a0:8b:8b:4b:1b:a0:1b:ce:
                    04:b6:ab:d3:c4:3f:bf:fc:d5:84:d7:ca:e8:e6:e8:
                    f6:c6:f8:f9:bb:62:96:ed:cb:d9:3d:8b:ae:33:27:
                    95:6a:9d:43:96:4a:99:80:a6:18:e9:57:55:d4:15:
                    e3:6f:cf:6a:2a:91:aa:8e:c3:05:a6:25:5c:77:07:
                    b6:ba:6c:25:1f:b7:0a:85:69:73:45:05:19:1d:98:
                    8e:46:37:11:94:85:a4:ab:f0:a4:0b:f0:00:81:01:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:18:C8:27:58:02:EA:DC:8D:0B:09:66:92:E7:BA:AB:A1:DF:54:49
            X509v3 Authority Key Identifier:
                keyid:AD:D2:79:A2:ED:BB:13:0D:21:D1:E8:1F:BE:BC:CC:B6:62:12:C2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0669EED9CDF0525F5BF96A46D8113D8AB46B644D653DFB4BC77594FB2E0FE70E/0/ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADD279A2EDBB130D21D1E81FBEBCCCB66212C2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0669EED9CDF0525F5BF96A46D8113D8AB46B644D653DFB4BC77594FB2E0FE70E/0/323830333a323765303a3a2f33322d3332203d3e20323730303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:27e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:92:a5:04:3b:b7:8f:d4:0d:9f:3a:8d:99:37:28:62:c7:df:
         36:e5:53:19:5f:b4:b1:00:16:a5:55:e8:a2:b1:02:ab:07:ce:
         20:3a:4e:b2:8a:b2:0b:37:da:69:dd:44:72:a3:13:90:c6:27:
         f7:9b:ba:29:0c:79:33:26:2d:23:43:a9:3f:6d:59:3c:bc:4d:
         90:06:d1:47:89:b5:cb:af:1e:9e:94:9e:bc:90:f4:17:cc:55:
         d1:b5:63:c3:3d:c2:83:9a:e8:97:a4:aa:ee:67:8c:34:1e:ef:
         ac:b9:eb:9f:92:be:fe:80:ab:de:d1:94:86:94:8c:7d:c2:41:
         dc:cd:44:95:6a:74:be:41:2c:17:a4:46:0f:7b:1f:eb:a7:76:
         38:15:93:d6:e5:8f:ad:29:dc:ad:4f:2d:3f:7a:9d:77:3f:76:
         eb:e5:7b:d6:b0:d1:40:b5:40:2f:01:f2:17:62:2e:65:aa:cd:
         eb:1e:b2:9c:ec:ea:d5:11:be:1b:0b:c1:0c:24:f5:e3:90:43:
         80:d7:39:5a:69:b8:bb:24:06:32:4f:5e:1f:e1:91:bf:f5:b9:
         20:0a:42:5b:2a:12:cf:a0:61:5b:cb:84:c4:06:e5:ce:9b:49:
         3c:4d:2c:e1:ae:f7:9c:a8:72:c5:30:71:4d:87:ef:57:4a:4c:
         00:02:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:35 2025 by rpki-client