Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/323830333a316638303a3a2f33322d3332203d3e20323639373838.roa
File:                     323830333a316638303a3a2f33322d3332203d3e20323639373838.roa (raw, json)
Hash identifier:          ZVkxotmdIU6tKMt+iIT3W6xGwBlXpLc5lQc6xtWLfT8=
Subject key identifier:   D4:7D:05:2D:40:41:62:54:A3:06:CB:66:40:7C:7D:D4:E4:95:60:4B
Certificate issuer:       /CN=5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24
Certificate serial:       7A265F97ABC9E9B7CE6A537D905AA86CACEA7CF2
Authority key identifier: 5D:30:85:84:81:6A:CB:0C:C9:C3:5E:D0:9C:51:D8:BB:4A:A6:CE:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/323830333a316638303a3a2f33322d3332203d3e20323639373838.roa
Signing time:             Tue 04 Feb 2025 18:27:35 +0000
ROA not before:           Tue 04 Feb 2025 18:22:35 +0000
ROA not after:            Tue 03 Feb 2026 18:27:35 +0000
asID:                     269788
IP address blocks:        2803:1f80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:26:5f:97:ab:c9:e9:b7:ce:6a:53:7d:90:5a:a8:6c:ac:ea:7c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24
        Validity
            Not Before: Feb  4 18:22:35 2025 GMT
            Not After : Feb  3 18:27:35 2026 GMT
        Subject: CN=D47D052D40416254A306CB66407C7DD4E495604B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:7b:08:15:5b:46:8b:69:f5:8b:da:05:51:
                    8f:32:94:2a:db:2a:99:9f:c6:18:7f:79:a6:43:fb:
                    23:cf:54:58:b0:09:ea:f3:c2:d8:7a:46:6f:c9:44:
                    51:da:15:ec:98:68:cf:4a:b6:d7:fe:4e:c7:3c:e5:
                    98:d5:f5:6e:d3:75:ff:5e:ea:ba:f9:84:9d:a5:fa:
                    d5:f8:d3:b4:e8:b8:b0:6e:14:6c:1b:ab:df:73:ba:
                    2f:d2:9c:90:be:67:4e:a3:75:f5:c0:ff:c9:28:43:
                    cf:81:d5:6e:9e:34:d4:43:b5:dd:68:d7:ef:31:cf:
                    de:7f:f9:85:8e:d0:c5:c4:97:ca:7c:c8:c1:4b:99:
                    85:d3:82:33:45:ff:68:1f:6e:e8:7e:1b:19:dd:10:
                    73:da:e0:f4:42:0f:13:65:3a:5c:f7:6e:56:a7:18:
                    78:93:df:8f:0c:71:d8:d9:4a:ea:81:f3:73:0e:31:
                    cf:aa:a9:ae:59:62:ff:17:c8:20:ee:47:66:27:8b:
                    4d:9a:21:b3:41:a7:5a:dc:aa:6e:63:93:cf:4a:49:
                    c3:fd:12:26:23:dd:f0:05:a7:c6:83:c5:9f:e5:c6:
                    9f:c6:23:68:29:06:19:1a:4b:01:b5:2f:2a:ce:5d:
                    ea:cf:d9:3c:a6:4e:99:4b:59:02:62:1b:a6:14:88:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7D:05:2D:40:41:62:54:A3:06:CB:66:40:7C:7D:D4:E4:95:60:4B
            X509v3 Authority Key Identifier:
                keyid:5D:30:85:84:81:6A:CB:0C:C9:C3:5E:D0:9C:51:D8:BB:4A:A6:CE:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D308584816ACB0CC9C35ED09C51D8BB4AA6CE24.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F7F0EF12DE7D634D9BBBCB75AC26A71E69415F9726946CF098AAC09A80B6DF1/0/323830333a316638303a3a2f33322d3332203d3e20323639373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:e3:41:78:78:5d:2f:0b:66:17:a3:77:d3:f3:e5:ea:c8:c2:
         ba:24:b8:ee:94:02:bd:c3:d3:88:8c:c0:33:be:02:8f:c4:a2:
         18:d3:12:83:7e:c3:20:10:93:29:7f:93:0c:3f:ef:94:68:40:
         97:73:ca:b7:f7:46:07:d8:19:36:0a:84:82:3f:ab:08:04:88:
         e8:77:2c:b4:98:52:ef:8e:e8:14:17:62:6b:8a:b0:36:84:80:
         e6:77:2b:0b:5e:b2:91:36:12:6f:bb:d5:31:bb:52:2e:b1:bc:
         0f:93:6e:10:38:8e:4e:39:fa:60:21:3f:74:d1:83:63:fa:1c:
         7f:ef:2f:8c:bc:1a:cd:02:47:99:c5:f5:fa:a1:aa:14:2e:4c:
         51:ed:a0:d8:bf:c9:25:a9:d4:d7:73:ec:ff:6e:4a:95:be:28:
         4d:a9:8a:ef:53:01:46:25:99:b1:51:bb:cb:1e:b6:17:1b:80:
         1e:6b:34:00:37:7f:45:27:5c:37:18:66:50:26:5c:da:71:e7:
         c1:52:e4:26:ca:f6:0e:de:c7:57:12:f7:ab:2d:f2:c1:4c:55:
         8f:e3:20:aa:ac:4c:da:a8:14:00:22:ee:af:6b:a0:7b:2a:c4:
         07:d5:42:61:7d:30:34:2a:c1:ff:dd:ec:19:6a:f9:42:ef:8a:
         05:9b:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:53 2025 by rpki-client