Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa
File:                     323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa (raw, json)
Hash identifier:          FTglEYCLv32fSL7mnaqunPJoV1dv3Qb413dsKvM95Bc=
Subject key identifier:   85:C3:A2:B7:01:CE:DB:E0:9E:96:A7:F8:C5:1B:58:84:97:4E:1C:11
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       650AE2F42C4A4884360EF74096F990AA3E815605
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa
Signing time:             Tue 04 Feb 2025 18:40:34 +0000
ROA not before:           Tue 04 Feb 2025 18:35:34 +0000
ROA not after:            Tue 03 Feb 2026 18:40:34 +0000
asID:                     270081
IP address blocks:        2803:8be0:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0a:e2:f4:2c:4a:48:84:36:0e:f7:40:96:f9:90:aa:3e:81:56:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Feb  4 18:35:34 2025 GMT
            Not After : Feb  3 18:40:34 2026 GMT
        Subject: CN=85C3A2B701CEDBE09E96A7F8C51B5884974E1C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:e8:eb:b5:4f:ed:99:bd:80:e0:2c:f5:45:
                    b1:d7:51:b3:0c:e3:cb:bc:43:51:c9:ad:33:f8:0b:
                    00:e8:64:72:21:cd:91:0f:13:0b:ca:ad:73:5e:cd:
                    12:42:79:bf:42:c1:42:fb:3c:df:3b:49:17:fd:d8:
                    2a:be:d9:8c:b0:95:34:9a:5e:2a:8b:e6:cc:73:90:
                    c8:8f:75:94:dc:56:53:65:2e:ce:ab:4d:1a:38:83:
                    6a:2a:c7:85:74:5a:05:61:61:4c:d7:99:b1:37:36:
                    24:56:f2:04:92:a3:cf:fa:11:3e:f1:85:13:54:61:
                    e1:96:49:4f:b0:00:fb:86:24:ba:3a:d6:fd:bc:31:
                    0f:f0:ad:d9:97:e1:81:e5:63:23:9f:7c:e0:a7:7f:
                    b1:64:81:9f:f7:be:36:dd:a6:a8:0e:d4:ab:17:f6:
                    02:e0:16:c7:21:18:d6:73:6c:a4:56:5b:a9:2c:c1:
                    00:0c:a6:10:be:5b:cd:13:59:d5:0a:2a:37:89:d8:
                    da:45:71:25:73:6d:f7:10:8f:3b:5f:5f:15:6f:1f:
                    85:40:cb:78:00:1d:8f:dc:86:f1:46:0a:eb:d4:9e:
                    9a:71:21:06:da:f0:54:7f:57:90:33:34:fa:04:96:
                    ea:97:e5:e4:74:44:b8:94:04:cc:3e:01:f0:30:cb:
                    d3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:A2:B7:01:CE:DB:E0:9E:96:A7:F8:C5:1B:58:84:97:4E:1C:11
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/323830333a386265303a383030303a3a2f33332d3333203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8be0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         46:73:64:13:28:bd:27:ea:ef:85:e2:1a:82:59:c2:26:40:05:
         db:f3:37:bd:21:51:cb:1a:41:b1:45:7d:5c:6a:75:fb:fa:d6:
         94:36:76:4f:64:73:22:e9:df:df:04:86:f2:2e:42:88:e9:24:
         e4:3a:29:02:ed:62:09:42:20:a5:0b:d6:25:f6:20:a5:e3:09:
         16:5e:8b:7b:b9:0d:7e:d3:12:0d:36:df:32:51:80:dd:e2:1f:
         49:ae:f0:aa:d2:90:3d:e2:c2:8b:05:c1:e7:04:ab:a2:31:b6:
         31:79:fe:3e:e7:11:72:ba:b5:bb:49:a2:68:f0:c9:e1:8c:65:
         bf:4c:fd:59:d3:bd:2d:02:83:6e:f8:01:42:4b:56:fe:a1:e0:
         b9:ac:e3:30:26:10:32:9b:e2:bc:ec:29:a5:1c:8a:bb:bb:61:
         55:a8:d5:e0:ef:69:c8:b0:b1:ed:38:54:d4:e5:b7:a9:48:d7:
         18:66:ca:f8:17:2b:fe:45:b2:9e:1b:33:65:86:11:c5:57:15:
         b9:ac:6b:e3:0a:c7:90:1a:24:07:e0:09:7c:18:8e:9b:0d:44:
         fa:12:6a:e7:72:18:0e:48:5d:cd:12:2d:55:b1:7c:c6:cf:14:
         f8:1f:2b:c6:f2:45:da:69:14:6c:fd:9f:ec:54:40:19:64:5e:
         3e:11:d1:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----