Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/323830333a643434303a3a2f33322d3332203d3e20323639393734.roa
File:                     323830333a643434303a3a2f33322d3332203d3e20323639393734.roa (raw, json)
Hash identifier:          SDjPiFDSKRtDgXD3ZrALcFM/fJoBP6suNeEX42tRL28=
Subject key identifier:   32:C3:7A:CA:0F:9D:8F:03:06:14:73:B9:1A:6D:1E:8E:78:3A:80:FC
Certificate issuer:       /CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
Certificate serial:       0840A0BA39CFEF7C4EA217A7A9B7790E226FF58E
Authority key identifier: 27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/323830333a643434303a3a2f33322d3332203d3e20323639393734.roa
Signing time:             Tue 04 Feb 2025 18:31:49 +0000
ROA not before:           Tue 04 Feb 2025 18:26:49 +0000
ROA not after:            Tue 03 Feb 2026 18:31:49 +0000
asID:                     269974
IP address blocks:        2803:d440::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:40:a0:ba:39:cf:ef:7c:4e:a2:17:a7:a9:b7:79:0e:22:6f:f5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F
        Validity
            Not Before: Feb  4 18:26:49 2025 GMT
            Not After : Feb  3 18:31:49 2026 GMT
        Subject: CN=32C37ACA0F9D8F03061473B91A6D1E8E783A80FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:f6:2a:77:ff:96:28:ff:7e:8a:32:90:97:
                    ba:a2:c1:13:f3:47:88:8d:e3:1e:4e:bf:91:b7:a5:
                    e3:72:5f:cf:6a:9f:05:10:bf:fc:66:70:77:70:b3:
                    04:67:5a:ad:b1:9d:22:8e:4e:8d:8f:46:9a:da:34:
                    85:0b:a2:6b:cc:7b:52:9d:a8:b3:b1:e7:48:71:e5:
                    6e:97:b2:9b:1a:7c:62:de:6d:54:c4:07:a7:28:e2:
                    fc:af:5a:44:35:f0:7f:97:d5:8b:06:c9:e8:ec:94:
                    f1:f6:ca:6c:49:7d:20:62:1f:33:4f:b2:09:d5:9d:
                    db:af:e7:8d:be:db:21:a0:d5:92:59:35:88:8e:61:
                    f4:3d:4d:33:42:02:c3:e0:49:00:c5:fc:0f:03:58:
                    32:66:84:bd:1a:a2:1a:ee:da:d3:c2:77:d3:89:82:
                    0a:47:12:a6:bd:b6:b9:dc:d7:88:2a:92:70:64:5a:
                    4e:2f:e8:4f:62:8b:96:2a:3a:a7:2b:51:0a:60:fb:
                    b9:75:df:6e:15:19:9b:01:69:b8:39:94:42:dd:97:
                    7e:ea:93:0b:bf:38:9b:1c:1c:d1:ac:2a:ea:cd:e4:
                    e4:85:c3:47:43:ab:61:57:38:65:1f:e9:5c:99:3b:
                    8a:27:2e:58:8b:49:9f:e1:50:c3:68:95:59:73:b1:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C3:7A:CA:0F:9D:8F:03:06:14:73:B9:1A:6D:1E:8E:78:3A:80:FC
            X509v3 Authority Key Identifier:
                keyid:27:B2:C2:0B:7F:3B:89:AC:F8:EE:F9:84:3F:F5:DE:D4:D0:58:37:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27B2C20B7F3B89ACF8EEF9843FF5DED4D058370F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13C21EB109DF0FFFE7B7CF55D4063ED964CFE1D5A19F869E39B681EF3C8E247C/0/323830333a643434303a3a2f33322d3332203d3e20323639393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:df:8f:10:82:a6:f3:ed:81:b8:59:3e:16:b7:bc:50:ec:
         af:ce:ad:a8:43:99:09:4b:14:fa:ce:7e:18:f2:96:3b:20:f6:
         09:36:df:1f:1c:34:79:84:cc:02:d9:8d:7a:0e:a7:5f:dc:66:
         23:14:24:e0:f6:d2:60:1d:4b:d6:93:b8:9c:e3:4d:61:6c:53:
         7b:c3:19:54:cc:c7:43:b8:9c:d0:80:5b:9e:e6:90:ac:2a:41:
         32:32:8f:0b:33:c0:37:de:74:3a:d3:21:f2:cf:9d:ce:76:68:
         9d:5a:2e:7a:41:59:06:5c:f0:aa:d8:23:7d:1c:f4:26:e8:2e:
         c4:0f:c3:af:88:ca:f9:4c:bb:c0:d5:5e:a8:92:ee:ac:ad:f3:
         eb:96:e2:c6:5e:4a:9a:00:7f:58:ce:f6:93:6a:55:ed:56:4f:
         00:68:93:ea:8e:ee:4f:9a:0c:ef:60:74:86:14:e6:cd:3b:7f:
         a0:1a:75:66:98:8c:d9:6f:ff:6e:ed:c8:08:bc:59:a8:1a:e2:
         69:f4:61:55:72:9a:23:52:36:32:b1:7b:02:a7:73:79:a1:b9:
         8d:2c:5e:f1:d1:89:f1:51:a3:a8:38:96:40:7b:e4:eb:39:ea:
         bc:47:14:d4:6d:3d:d9:ba:9c:e9:7b:a9:2f:d7:3d:a8:78:8e:
         55:92:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----