Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/323830333a353063303a3130363a3a2f34382d3438203d3e20323634373633.roa
File:                     323830333a353063303a3130363a3a2f34382d3438203d3e20323634373633.roa (raw, json)
Hash identifier:          qPorZxLUToxVq4U2UjbwTU4GgWvOIeoTX/FjVCWD8M0=
Subject key identifier:   2A:65:28:3F:CA:C4:AC:D8:7B:C5:F8:F0:B6:C5:29:A9:63:6C:E3:4B
Certificate issuer:       /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial:       420F4C92875DEEFA44267F22BD86D2A90DBFE902
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/323830333a353063303a3130363a3a2f34382d3438203d3e20323634373633.roa
Signing time:             Tue 04 Feb 2025 18:54:31 +0000
ROA not before:           Tue 04 Feb 2025 18:49:31 +0000
ROA not after:            Tue 03 Feb 2026 18:54:31 +0000
asID:                     264763
IP address blocks:        2803:50c0:106::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0f:4c:92:87:5d:ee:fa:44:26:7f:22:bd:86:d2:a9:0d:bf:e9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
        Validity
            Not Before: Feb  4 18:49:31 2025 GMT
            Not After : Feb  3 18:54:31 2026 GMT
        Subject: CN=2A65283FCAC4ACD87BC5F8F0B6C529A9636CE34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:9e:40:26:5f:28:80:7a:4d:2c:7a:42:42:
                    da:d6:ca:eb:78:4c:0a:92:96:0c:53:8f:82:6b:bb:
                    e0:4d:24:90:84:22:79:d1:8d:53:c5:4b:2d:a3:3b:
                    94:4b:6d:74:da:d8:35:bf:1a:05:80:45:6c:be:76:
                    3d:56:09:06:ce:e9:c4:dc:a9:25:75:38:ca:a0:d8:
                    47:a5:1f:a8:c9:d0:9e:5b:76:61:12:b2:11:25:72:
                    1a:f2:12:54:e3:e3:c5:b8:cd:23:76:e4:f3:1c:63:
                    11:59:82:da:b8:d8:bd:78:88:80:2a:75:62:75:dc:
                    c8:34:e5:55:62:6b:52:06:b7:dd:1d:3f:78:2d:6f:
                    d7:a4:91:4c:24:6b:02:92:04:78:70:46:81:0c:94:
                    3e:95:a0:ac:0c:cc:c3:3c:9d:8f:75:47:ba:5f:2a:
                    a7:66:42:9c:3a:a8:9e:6a:b4:2b:27:15:68:47:8f:
                    32:57:74:ae:71:ef:5c:12:f9:be:70:23:5b:f8:6e:
                    cb:f4:28:4e:31:5e:11:a6:23:a0:a4:16:e4:40:86:
                    a8:3a:62:e7:a6:49:16:df:d6:e2:88:21:b7:a8:2e:
                    5b:b1:5a:75:4f:b7:f0:97:8e:56:b5:93:1a:44:8f:
                    69:96:fe:d7:b0:97:3d:73:a4:de:b1:43:cc:53:48:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:65:28:3F:CA:C4:AC:D8:7B:C5:F8:F0:B6:C5:29:A9:63:6C:E3:4B
            X509v3 Authority Key Identifier:
                keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/323830333a353063303a3130363a3a2f34382d3438203d3e20323634373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:50c0:106::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:03:da:ec:dd:a9:82:5c:d5:94:de:79:13:1a:c1:4d:e6:
         3e:98:5a:28:a1:36:4e:2f:ae:f0:ee:c2:1e:2c:9c:d8:99:8f:
         7a:13:a6:6c:13:03:65:c3:e0:69:72:84:87:d1:f3:d7:99:ff:
         1e:0d:39:e2:26:0a:08:ee:7f:32:c7:88:5f:78:95:88:4a:7a:
         a6:c8:7f:ef:55:e9:9d:8c:4d:b6:95:bd:9f:49:32:47:f7:a5:
         cf:2e:34:9c:b5:68:6e:3c:5b:6f:5a:7e:29:db:55:a7:c1:ae:
         26:da:f8:69:b7:4d:58:a0:ba:bd:89:5d:86:c6:33:db:1b:19:
         21:f2:f1:3c:27:b7:6f:d3:be:c3:79:cc:c2:ed:ed:bb:8d:7e:
         94:2f:4f:44:5f:9b:91:98:a9:21:93:20:de:29:5c:70:76:87:
         8b:c2:d7:d8:0c:21:07:60:5b:fd:fd:a3:7b:0f:31:0c:dd:35:
         2c:3c:7b:03:22:e9:e7:cf:f4:53:66:b6:bd:d9:f7:f9:2f:b2:
         e8:de:52:24:b7:e0:82:a9:ee:eb:20:78:e6:19:52:f4:7d:b4:
         3d:05:16:30:6b:60:a2:39:8b:aa:94:1c:28:c4:d2:f2:09:a9:
         30:79:2c:39:34:e6:b1:2b:83:08:29:d9:70:15:04:12:65:aa:
         4e:4a:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----