Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/323830333a383930303a3a2f33322d3438203d3e203532343133.roa
File:                     323830333a383930303a3a2f33322d3438203d3e203532343133.roa (raw, json)
Hash identifier:          23B4wJ3fYDqGjNZuZd3FnTVbJi9jnJiciKRG/XD4G9A=
Subject key identifier:   B7:ED:2A:05:8B:DB:02:FF:34:80:3F:F8:E6:1D:09:F7:FE:51:AA:BA
Certificate issuer:       /CN=0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C
Certificate serial:       2BF6F3FD6338376962EC31DBE340ECBA26337BCD
Authority key identifier: 0E:0F:8F:A3:C5:20:E6:A8:9C:4C:5B:4A:89:58:A9:81:3F:AA:51:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/323830333a383930303a3a2f33322d3438203d3e203532343133.roa
Signing time:             Tue 04 Feb 2025 18:13:30 +0000
ROA not before:           Tue 04 Feb 2025 18:08:30 +0000
ROA not after:            Tue 03 Feb 2026 18:13:30 +0000
asID:                     52413
IP address blocks:        2803:8900::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f6:f3:fd:63:38:37:69:62:ec:31:db:e3:40:ec:ba:26:33:7b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C
        Validity
            Not Before: Feb  4 18:08:30 2025 GMT
            Not After : Feb  3 18:13:30 2026 GMT
        Subject: CN=B7ED2A058BDB02FF34803FF8E61D09F7FE51AABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:03:0c:b4:76:98:2c:43:65:93:2b:a7:fc:
                    b4:37:b9:80:3f:2f:e1:d2:90:9d:2b:46:71:c4:46:
                    a0:d5:ed:f8:a8:d2:7e:51:2a:42:67:45:f4:51:f9:
                    52:25:cf:27:08:ea:31:ff:bc:ee:5d:69:1b:7a:49:
                    ba:73:d7:dd:ea:f4:e3:38:05:62:e7:7a:a7:ce:2e:
                    61:a5:42:74:53:91:a9:13:25:fb:82:16:6c:6c:cd:
                    79:27:1d:bf:4e:6f:11:f2:24:5b:73:84:ac:68:78:
                    4f:c2:54:87:36:67:46:42:e5:ce:4b:c8:88:6b:e3:
                    9c:dd:3f:28:00:56:4b:57:40:f3:8e:d2:27:6d:fb:
                    34:04:30:8b:94:21:cc:10:57:6e:fc:ae:7a:58:dd:
                    e6:ef:7d:e0:ba:54:ec:c0:c1:82:6d:2d:b0:6b:02:
                    cf:e0:2a:92:e1:89:e5:60:03:c1:c9:21:9b:fa:89:
                    fc:95:dc:16:4d:64:f0:bb:fb:35:a8:39:36:9c:f5:
                    12:e0:5f:75:39:56:d1:80:70:84:d9:03:0a:9a:a2:
                    62:26:99:c0:75:4e:cc:70:73:85:5a:74:b4:d3:33:
                    32:93:79:d2:eb:64:ae:ba:ab:46:de:39:64:f2:14:
                    6e:3a:09:08:fe:3c:d8:af:5a:16:a9:72:a1:ef:c8:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:ED:2A:05:8B:DB:02:FF:34:80:3F:F8:E6:1D:09:F7:FE:51:AA:BA
            X509v3 Authority Key Identifier:
                keyid:0E:0F:8F:A3:C5:20:E6:A8:9C:4C:5B:4A:89:58:A9:81:3F:AA:51:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/323830333a383930303a3a2f33322d3438203d3e203532343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8900::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:1a:a1:20:ec:55:a4:70:01:c8:8b:ee:89:89:9f:b5:16:8a:
         8a:50:f7:2a:0a:dc:89:2d:8f:59:74:5c:80:c7:5b:5c:a5:af:
         c3:7d:c4:34:d4:60:10:40:9c:05:83:e5:6c:1f:84:55:5e:91:
         0b:db:40:ac:05:31:53:fc:29:81:e0:ff:e7:c6:3e:76:d9:7b:
         7c:ab:ee:1e:5f:40:1a:de:36:2d:0c:9f:9e:6d:a8:b8:0d:c9:
         f9:97:6a:6a:d0:ca:bd:70:81:09:e9:40:cc:b1:9c:71:51:35:
         57:95:c9:ac:b1:b6:1f:a0:30:c8:d0:d5:aa:b8:9b:7c:38:19:
         46:9f:d5:88:7d:da:8a:37:0f:b2:fd:b6:ea:4d:70:40:0d:8f:
         3f:90:d3:11:11:2b:09:10:77:9c:83:83:00:a6:5e:da:e9:d4:
         7e:dd:d4:4f:fa:d4:70:14:c1:a9:e8:c4:24:17:c1:f9:e5:6b:
         45:c7:d2:0e:7a:6d:5d:9f:39:9e:a0:11:e4:59:8e:db:67:06:
         cb:c6:29:dc:0c:71:eb:6f:c5:4f:dd:02:29:4f:b8:a7:ed:0f:
         d8:a6:02:4f:06:5b:a6:6f:f3:33:aa:69:af:7a:5f:98:fe:af:
         0b:e1:a5:b4:62:3b:da:22:b5:e2:b0:73:ed:4d:c5:e0:35:e6:
         1b:71:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----