Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/323830333a613965303a3a2f33322d3438203d3e20323730303134.roa
File:                     323830333a613965303a3a2f33322d3438203d3e20323730303134.roa (raw, json)
Hash identifier:          y5g9cLVJTWpRYYKRwPx3pk7is6J54aEUximq3GUt1Fo=
Subject key identifier:   D8:0B:06:20:5F:86:69:E0:76:C9:40:DF:36:E4:DA:5F:8F:BD:C5:0C
Certificate issuer:       /CN=E793DC9356C69CBF448E0A4FA68F2B255E58A05A
Certificate serial:       2E3B49F517EF72D1566B8E2A23854E158DBE0996
Authority key identifier: E7:93:DC:93:56:C6:9C:BF:44:8E:0A:4F:A6:8F:2B:25:5E:58:A0:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E793DC9356C69CBF448E0A4FA68F2B255E58A05A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/323830333a613965303a3a2f33322d3438203d3e20323730303134.roa
Signing time:             Tue 04 Feb 2025 18:39:04 +0000
ROA not before:           Tue 04 Feb 2025 18:34:04 +0000
ROA not after:            Tue 03 Feb 2026 18:39:04 +0000
asID:                     270014
IP address blocks:        2803:a9e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3b:49:f5:17:ef:72:d1:56:6b:8e:2a:23:85:4e:15:8d:be:09:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E793DC9356C69CBF448E0A4FA68F2B255E58A05A
        Validity
            Not Before: Feb  4 18:34:04 2025 GMT
            Not After : Feb  3 18:39:04 2026 GMT
        Subject: CN=D80B06205F8669E076C940DF36E4DA5F8FBDC50C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:8e:92:6a:3c:74:58:af:1a:b8:55:fc:1b:
                    68:ef:21:9a:a7:20:36:1c:c9:3a:ef:88:ac:a7:ff:
                    d0:b5:13:60:61:57:9b:98:27:a7:68:62:79:61:f0:
                    10:80:b0:8c:a3:24:c9:23:14:d2:93:50:9f:67:e5:
                    8f:2f:09:46:b2:93:48:b3:87:91:0c:d0:a6:32:f7:
                    36:2c:db:23:5f:50:61:78:21:35:67:e1:6c:32:3e:
                    fc:3f:48:66:66:bf:e8:c0:cf:df:6e:36:32:c6:b2:
                    d4:62:50:8b:69:76:20:5d:ca:88:49:64:1c:41:b3:
                    36:cc:89:8a:5a:d1:ec:4e:54:15:79:0f:10:cc:be:
                    0f:85:b3:c1:f9:34:8b:8c:d0:37:78:35:2c:9f:52:
                    df:fc:6c:fa:1e:dc:de:a9:1c:a4:15:7d:e8:49:89:
                    6c:a8:45:c7:56:75:99:7c:24:73:d1:ff:a5:75:e6:
                    10:5a:55:cf:73:81:d8:b4:30:d9:99:a2:bf:04:44:
                    3d:73:94:2c:9f:16:bc:09:56:fd:8d:88:4e:d3:46:
                    e8:b3:90:4f:3c:3e:cd:66:59:2e:5e:b7:0e:47:c1:
                    4b:de:ae:4e:45:05:18:1c:ec:93:38:78:3c:7b:25:
                    e6:f5:d0:1f:ae:1e:fe:49:fd:6b:cf:84:4d:47:d5:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0B:06:20:5F:86:69:E0:76:C9:40:DF:36:E4:DA:5F:8F:BD:C5:0C
            X509v3 Authority Key Identifier:
                keyid:E7:93:DC:93:56:C6:9C:BF:44:8E:0A:4F:A6:8F:2B:25:5E:58:A0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/E793DC9356C69CBF448E0A4FA68F2B255E58A05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E793DC9356C69CBF448E0A4FA68F2B255E58A05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/323830333a613965303a3a2f33322d3438203d3e20323730303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:43:e5:62:40:e3:f3:da:b7:8a:cd:8b:86:a4:d8:6f:fd:18:
         74:6b:46:03:16:f9:6d:63:be:25:13:b4:4d:10:0f:92:0f:a6:
         0b:c8:40:38:09:59:f4:81:52:40:31:3e:68:c7:cd:c5:0f:a9:
         34:c2:85:96:e2:6a:94:56:6d:30:c5:5b:80:86:e3:53:0e:4a:
         26:80:d7:e8:78:9c:dd:7a:00:9d:c0:d9:e7:84:22:5b:1a:d8:
         79:e9:5c:2b:01:ba:fa:52:b9:10:dc:c7:3c:e0:22:e1:93:63:
         42:86:91:5f:8f:bc:f9:34:ed:0b:ca:ab:02:e6:2a:fc:f8:6e:
         fa:16:fe:7c:3b:71:a6:16:1d:78:be:47:6c:c3:e0:cb:fe:00:
         e0:68:01:2c:c7:84:d5:01:c6:f7:0b:8d:23:6c:63:38:a1:36:
         d1:95:b2:fa:76:e9:fc:82:b5:74:c4:d0:f6:b5:b4:d1:2b:73:
         81:0f:01:09:62:16:93:da:6e:4d:d2:bc:db:6a:07:99:68:ee:
         9c:2c:d2:d6:b2:83:d1:bc:e3:51:c5:27:9a:da:d9:9b:82:6a:
         69:03:2a:fb:6e:a2:2a:a8:57:1c:4a:82:e4:42:fe:6e:ba:76:
         00:45:54:d7:d3:ce:a0:28:95:9f:c5:76:40:3a:37:cc:81:7a:
         4a:97:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:55 2025 by rpki-client