Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/323830333a616331303a3a2f33322d3332203d3e20323731383736.roa
File:                     323830333a616331303a3a2f33322d3332203d3e20323731383736.roa (raw, json)
Hash identifier:          QDGdpSjompnHuxfIn7sQ3auNFSevURCMD9/TvRt/Q38=
Subject key identifier:   6C:DF:50:39:AB:F6:21:9A:C9:C3:CD:A5:FC:7B:CC:19:26:1D:0B:FE
Certificate issuer:       /CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA
Certificate serial:       3A95F7FC556BDB7371D89119DB7F9AA361652DFA
Authority key identifier: 2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/323830333a616331303a3a2f33322d3332203d3e20323731383736.roa
Signing time:             Tue 04 Feb 2025 19:59:14 +0000
ROA not before:           Tue 04 Feb 2025 19:54:14 +0000
ROA not after:            Tue 03 Feb 2026 19:59:14 +0000
asID:                     271876
IP address blocks:        2803:ac10::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:95:f7:fc:55:6b:db:73:71:d8:91:19:db:7f:9a:a3:61:65:2d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B8620ACEA8842495685502C2DD659A44BDAAAFA
        Validity
            Not Before: Feb  4 19:54:14 2025 GMT
            Not After : Feb  3 19:59:14 2026 GMT
        Subject: CN=6CDF5039ABF6219AC9C3CDA5FC7BCC19261D0BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:06:6e:34:ec:65:09:07:ed:5d:7b:14:3d:
                    b8:11:b3:82:40:c0:3d:e4:61:66:d6:c3:49:b6:2a:
                    bd:a8:47:90:07:fa:17:c6:6d:77:89:ad:00:6c:34:
                    bb:21:d2:f2:f7:42:9b:fc:b9:78:97:1d:5a:c6:1e:
                    69:3a:65:0a:2c:e5:71:89:3a:a7:5f:fe:e9:98:26:
                    b2:3e:c8:44:49:f6:d9:1c:49:0b:92:1c:9c:de:12:
                    61:73:0e:3e:28:fd:c6:c3:9f:ae:28:de:6a:80:4e:
                    20:35:7d:36:0f:23:f2:01:6d:5f:6b:69:3c:6f:31:
                    fb:8d:36:4f:de:77:0c:f2:67:e8:74:99:ad:f0:7c:
                    2d:22:fd:be:11:36:ed:e7:bb:fc:f5:5c:02:bf:da:
                    fb:22:7d:a8:85:3d:59:aa:f5:0d:ec:3b:8b:dc:45:
                    0f:b5:da:2e:cc:d0:07:31:12:7b:bb:d3:7b:f7:84:
                    fd:af:05:98:1e:db:a1:d4:2d:46:97:79:ef:71:51:
                    f3:3f:c7:9c:3e:c6:d2:83:a5:52:b1:3c:10:ff:cc:
                    07:9d:1e:0b:1f:35:5a:3b:dc:50:bc:e6:de:61:8b:
                    0e:e5:85:60:60:d5:d3:50:93:09:b5:09:e9:fb:19:
                    ea:d9:49:b0:9c:a1:e5:5b:af:59:1b:30:e2:0e:ae:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DF:50:39:AB:F6:21:9A:C9:C3:CD:A5:FC:7B:CC:19:26:1D:0B:FE
            X509v3 Authority Key Identifier:
                keyid:2B:86:20:AC:EA:88:42:49:56:85:50:2C:2D:D6:59:A4:4B:DA:AA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B8620ACEA8842495685502C2DD659A44BDAAAFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D11276835294EAE530C78C47196CFF30CA4BB04557C68F89E443CF38F5B660C/0/323830333a616331303a3a2f33322d3332203d3e20323731383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ac10::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:5f:c9:08:ab:54:41:52:bf:85:c5:5c:60:20:8f:71:6d:49:
         a9:d6:75:f2:c2:eb:12:9d:f3:33:08:32:c4:f6:46:76:b7:a2:
         f6:45:60:bf:79:6f:8b:91:6e:c9:2e:ab:4f:0d:9b:93:60:96:
         40:7c:d0:22:14:7a:ad:67:46:c1:e0:ff:9e:a4:90:be:e5:84:
         bc:8d:14:3a:c6:43:ec:84:0b:70:c8:10:2e:e3:c7:3a:bf:22:
         2c:bb:4b:f3:63:b2:c7:f0:df:e0:64:b1:03:33:05:8c:bc:b3:
         f2:91:bb:47:75:dd:26:54:01:20:a7:22:1d:73:1d:12:cf:18:
         73:da:59:18:b2:5a:6a:b9:8a:4e:e4:11:6d:a4:be:41:20:c0:
         21:3e:7f:7e:05:5a:6f:c2:f8:f4:22:b0:15:35:3b:64:77:88:
         a2:3e:5f:87:8b:1a:ff:70:e5:03:5a:bb:5d:08:9b:1a:d4:e7:
         da:e6:8f:43:e1:f6:56:cf:9e:2c:91:77:77:e0:d8:39:f7:b9:
         b8:86:dd:ce:4f:da:09:1f:68:6c:b0:2a:2d:6d:31:a0:85:86:
         54:15:eb:c5:f1:80:31:42:cc:83:4f:7a:7e:10:91:74:3d:ab:
         90:94:d1:c9:1c:42:fa:a0:37:25:38:9d:dc:76:6f:7e:00:7d:
         e2:40:6e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:23 2025 by rpki-client