Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/323830333a636239303a3a2f33322d3438203d3e20323733303334.roa
File:                     323830333a636239303a3a2f33322d3438203d3e20323733303334.roa (raw, json)
Hash identifier:          ewsjZFwRm+wuFrAOFaaT18miUc622TdT2HTYlXvunSk=
Subject key identifier:   35:D6:AA:EA:BC:C7:73:7F:A6:04:82:93:37:EB:9A:52:B7:0A:36:79
Certificate issuer:       /CN=6E2A75D39AF39C1BE840ED6A81CC769A82A0D472
Certificate serial:       20F5929AFA93A6B26881FDBB7F338F8CE47FE3AC
Authority key identifier: 6E:2A:75:D3:9A:F3:9C:1B:E8:40:ED:6A:81:CC:76:9A:82:A0:D4:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/323830333a636239303a3a2f33322d3438203d3e20323733303334.roa
Signing time:             Tue 04 Feb 2025 18:06:28 +0000
ROA not before:           Tue 04 Feb 2025 18:01:28 +0000
ROA not after:            Tue 03 Feb 2026 18:06:28 +0000
asID:                     273034
IP address blocks:        2803:cb90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f5:92:9a:fa:93:a6:b2:68:81:fd:bb:7f:33:8f:8c:e4:7f:e3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2A75D39AF39C1BE840ED6A81CC769A82A0D472
        Validity
            Not Before: Feb  4 18:01:28 2025 GMT
            Not After : Feb  3 18:06:28 2026 GMT
        Subject: CN=35D6AAEABCC7737FA604829337EB9A52B70A3679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:fa:4c:30:be:60:fc:35:e5:be:46:24:a4:
                    fe:67:59:ac:09:60:20:32:29:19:da:6a:37:17:fc:
                    79:7c:ef:54:d0:2e:d5:f9:ed:21:b8:49:b0:26:84:
                    ce:04:81:77:0b:9e:67:99:1e:71:f4:65:d7:4a:e0:
                    17:81:4b:4b:55:be:11:ed:39:bc:25:db:c1:8b:74:
                    20:fe:04:5b:9a:79:24:47:e6:f8:66:fb:6c:df:6c:
                    f3:1e:79:2e:ba:99:9a:9e:b6:2e:72:f2:85:5b:f6:
                    4f:b3:a4:28:1d:70:74:66:1d:38:6f:66:19:0c:1b:
                    60:c6:33:ed:3e:99:56:dc:00:2e:b3:4b:e9:33:bf:
                    f0:73:3f:c5:45:d4:ad:c0:70:98:55:11:7f:a2:74:
                    fa:b8:67:f8:e6:17:5c:b4:da:1f:02:a0:e5:3a:ae:
                    67:cc:89:a9:93:b5:65:48:47:21:db:53:55:74:60:
                    62:5f:33:9d:4d:9d:df:07:5d:79:ca:0d:fb:eb:4a:
                    ed:aa:10:d2:4c:c2:25:b7:97:3e:33:e0:05:06:2a:
                    9c:3b:8d:43:41:7a:ff:c4:8e:14:3f:91:e2:a4:d1:
                    63:2e:93:71:2f:79:e2:1d:71:48:b8:a6:43:0c:f1:
                    9f:71:dd:c9:42:47:6c:b6:68:f2:94:a1:35:9a:c9:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D6:AA:EA:BC:C7:73:7F:A6:04:82:93:37:EB:9A:52:B7:0A:36:79
            X509v3 Authority Key Identifier:
                keyid:6E:2A:75:D3:9A:F3:9C:1B:E8:40:ED:6A:81:CC:76:9A:82:A0:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E2A75D39AF39C1BE840ED6A81CC769A82A0D472.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/158D38E5B007C81774C2460D5BC0D1DBA2AEBA65B1E1E677F91CA1C3BAB823F3/0/323830333a636239303a3a2f33322d3438203d3e20323733303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb90::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:a4:47:3b:90:1c:f8:1e:68:2b:70:b5:63:be:95:94:c7:80:
         26:3e:ca:45:88:57:b3:43:d4:9b:28:46:2a:8f:d5:52:60:85:
         07:fc:d4:d0:75:15:e1:1a:a6:b1:97:ec:de:c3:7c:96:56:34:
         69:14:a6:71:c9:ed:bb:8d:0c:d8:3c:94:09:d1:2e:a9:db:8a:
         ce:31:c1:f7:15:63:79:78:7f:bd:0a:c1:a7:e9:e8:59:90:ef:
         14:fd:19:a5:5a:7e:93:87:68:79:aa:54:b5:ce:85:01:14:91:
         54:0a:45:9e:1b:39:c9:83:49:5c:3d:48:33:4b:85:67:02:41:
         08:b6:5c:75:5d:de:d8:0d:36:c7:b5:14:6c:ac:6f:05:25:6d:
         0c:41:8c:76:20:4c:e9:d4:6e:46:ef:1e:e6:95:6f:87:92:dc:
         7a:b2:23:51:e8:fe:11:70:9b:a5:6c:c4:5f:1e:57:46:c3:88:
         72:82:f3:e3:e3:e7:f7:4e:14:db:33:db:82:d7:be:df:c2:40:
         e1:93:19:35:5c:2b:52:7c:77:09:c8:57:bb:c1:80:c5:98:85:
         9f:e4:04:e4:aa:3a:4c:bc:4b:f3:83:f1:e4:f0:69:8b:6d:41:
         53:97:c1:b4:97:12:02:44:c4:e0:35:f4:d1:2b:cf:6e:d2:a5:
         8d:95:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----