Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/323830303a3866303a3a2f33322d3332203d3e203232383630.roa
File:                     323830303a3866303a3a2f33322d3332203d3e203232383630.roa (raw, json)
Hash identifier:          RSPigIfweWU/I4pC736a1CLcyrRpJb4qkk2Oh2rhYTQ=
Subject key identifier:   CF:10:99:FB:B6:BA:B8:C7:A8:FA:61:F3:9F:A8:09:0C:16:7F:A5:5F
Certificate issuer:       /CN=9F6EA2D324259DF27DF8730E7E750CA4CA449421
Certificate serial:       253C119B1D74C8624103D1651AE1A3FA11FF24ED
Authority key identifier: 9F:6E:A2:D3:24:25:9D:F2:7D:F8:73:0E:7E:75:0C:A4:CA:44:94:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/323830303a3866303a3a2f33322d3332203d3e203232383630.roa
Signing time:             Tue 04 Feb 2025 20:00:00 +0000
ROA not before:           Tue 04 Feb 2025 19:55:00 +0000
ROA not after:            Tue 03 Feb 2026 20:00:00 +0000
asID:                     22860
IP address blocks:        2800:8f0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3c:11:9b:1d:74:c8:62:41:03:d1:65:1a:e1:a3:fa:11:ff:24:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6EA2D324259DF27DF8730E7E750CA4CA449421
        Validity
            Not Before: Feb  4 19:55:00 2025 GMT
            Not After : Feb  3 20:00:00 2026 GMT
        Subject: CN=CF1099FBB6BAB8C7A8FA61F39FA8090C167FA55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:ce:c8:83:10:a6:b0:7b:ae:5b:8e:51:05:
                    27:35:b7:3f:0b:a5:57:d2:c5:7a:a2:cc:e3:94:9a:
                    fb:b6:c5:92:0a:2c:4d:30:58:77:2c:44:69:6b:9c:
                    9f:06:c5:c1:a6:9b:e9:44:19:07:64:fd:1c:48:f5:
                    f0:9b:f7:68:59:de:db:61:db:2d:af:ec:18:4a:1e:
                    2f:15:f1:2a:35:21:a0:b4:cf:7e:36:6b:3f:bc:32:
                    a5:21:7f:cd:5a:25:c9:35:c7:29:f3:b7:30:7d:57:
                    e6:16:d2:f0:66:a0:63:6f:ac:d6:d8:79:82:72:62:
                    c5:2f:b1:0a:f7:54:44:db:69:10:17:2e:54:29:25:
                    41:b1:9a:7b:fb:13:7b:be:c0:47:31:d1:1b:05:6d:
                    ed:28:a7:5c:dd:63:5c:9b:9e:70:10:83:3a:b7:1e:
                    90:a9:8b:d6:65:3f:94:f7:f9:d1:fb:06:41:cc:98:
                    0b:e8:37:d3:ce:f9:2f:4e:1e:16:cd:b8:84:0a:86:
                    f0:04:b5:bf:5f:a8:db:22:7f:62:8b:e1:0d:a5:54:
                    3a:f5:60:9d:7b:c0:fb:ea:93:77:d2:8f:fb:5a:a8:
                    7a:83:54:84:e5:30:22:d2:f7:a7:bd:7b:65:15:2d:
                    73:2b:bd:fb:4b:77:e7:fb:4b:86:c1:7b:93:7a:cf:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:10:99:FB:B6:BA:B8:C7:A8:FA:61:F3:9F:A8:09:0C:16:7F:A5:5F
            X509v3 Authority Key Identifier:
                keyid:9F:6E:A2:D3:24:25:9D:F2:7D:F8:73:0E:7E:75:0C:A4:CA:44:94:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/323830303a3866303a3a2f33322d3332203d3e203232383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:8f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:4a:c6:08:d9:b5:e5:e1:43:f3:bb:83:9a:ad:2c:6c:fb:d0:
         25:08:27:ff:fb:91:2f:76:b2:96:de:68:28:48:d4:95:6a:6b:
         89:5b:0c:ea:42:c2:e6:be:1f:87:82:bd:3c:f8:b3:40:bd:75:
         21:1a:ae:71:cd:63:1d:79:87:83:27:20:22:dd:0e:15:cf:ee:
         95:af:a8:c2:5e:cd:7c:55:38:c3:be:6a:3a:bf:46:01:c3:8f:
         e6:1d:71:5e:bd:28:c3:27:43:b7:f2:3f:1a:0d:3d:20:d1:93:
         d4:9d:e4:bb:4a:24:fc:55:63:b9:e8:28:b8:5c:cb:ac:3c:b4:
         be:e9:05:b8:25:eb:c4:f2:25:fa:70:e8:f1:df:14:46:90:76:
         44:2b:2f:6e:7b:24:81:a4:bf:9c:b3:3c:d3:c8:50:34:d6:e1:
         00:e8:3d:80:ef:ec:8f:30:23:ce:c9:84:70:ee:8d:68:63:2c:
         63:4f:02:a7:15:35:3c:a2:a7:b5:e3:50:f5:8e:78:4d:b6:ae:
         4a:9c:97:e5:7b:7f:7c:cb:ae:75:42:27:3b:46:1a:8f:2c:ef:
         19:a6:16:22:08:3a:43:6b:2c:3c:cb:1f:dd:3a:63:1c:88:16:
         80:a7:db:a1:5a:65:ff:69:93:c5:9b:c1:21:c2:17:b5:f3:54:
         ae:7b:bf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----