Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/323830333a323832303a3a2f33322d3332203d3e20323635383035.roa
File:                     323830333a323832303a3a2f33322d3332203d3e20323635383035.roa (raw, json)
Hash identifier:          VxaS2Hv3orOtd1l6prdyrzlyQ2XtCU6i3ovitwENnQQ=
Subject key identifier:   E6:D1:21:A6:6A:CA:7C:19:7B:6F:5D:D5:9B:0D:7D:E9:9D:53:64:58
Certificate issuer:       /CN=39DA2872E102D36A2456FA542BEBDF503603A4A9
Certificate serial:       6C2EA0E3B5EA6464ED8E21198228F8C698C5B944
Authority key identifier: 39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/323830333a323832303a3a2f33322d3332203d3e20323635383035.roa
Signing time:             Tue 04 Feb 2025 18:05:54 +0000
ROA not before:           Tue 04 Feb 2025 18:00:54 +0000
ROA not after:            Tue 03 Feb 2026 18:05:54 +0000
asID:                     265805
IP address blocks:        2803:2820::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2e:a0:e3:b5:ea:64:64:ed:8e:21:19:82:28:f8:c6:98:c5:b9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39DA2872E102D36A2456FA542BEBDF503603A4A9
        Validity
            Not Before: Feb  4 18:00:54 2025 GMT
            Not After : Feb  3 18:05:54 2026 GMT
        Subject: CN=E6D121A66ACA7C197B6F5DD59B0D7DE99D536458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:77:2b:17:87:0f:61:0c:b0:d4:a1:70:d1:
                    c4:a5:1f:11:f4:a7:94:6a:99:c2:b2:ad:ac:48:ce:
                    18:de:ba:a8:14:cf:0d:e7:a7:84:97:6f:14:43:94:
                    08:d2:95:e9:a7:64:96:46:36:47:12:57:ce:63:84:
                    34:52:12:6c:a0:7a:4f:0f:5f:4c:f7:a7:96:9e:35:
                    1e:ca:c7:57:24:c5:05:d3:ba:3b:ca:0c:13:81:51:
                    51:45:e9:65:f3:b0:cb:c8:cd:53:a4:83:75:d9:85:
                    ca:4a:9f:87:4d:1c:db:12:b0:0c:a7:b3:4f:b2:6d:
                    db:13:2f:2b:2d:34:ef:d2:75:0c:79:4d:ef:f0:28:
                    75:ad:9d:f2:e5:df:51:dc:e3:35:a9:de:21:1c:2c:
                    02:d4:58:55:27:8a:5e:48:62:0a:3c:5a:17:cc:dd:
                    24:01:67:c8:7e:52:3e:63:18:86:5d:ff:12:7f:2b:
                    e2:73:b3:9b:ab:c8:60:7b:2e:27:4c:10:5c:59:d1:
                    8e:8a:f2:63:b1:22:b5:c8:d9:25:20:fb:8a:1a:a3:
                    3d:68:14:53:43:df:e8:eb:0b:e3:7a:49:df:d6:11:
                    6a:cb:8a:f1:83:7e:f0:4b:bc:26:ff:be:58:1d:cf:
                    88:44:5d:4e:d5:58:55:08:fe:e1:99:52:d1:99:fd:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D1:21:A6:6A:CA:7C:19:7B:6F:5D:D5:9B:0D:7D:E9:9D:53:64:58
            X509v3 Authority Key Identifier:
                keyid:39:DA:28:72:E1:02:D3:6A:24:56:FA:54:2B:EB:DF:50:36:03:A4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39DA2872E102D36A2456FA542BEBDF503603A4A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20B458667C96654F31165297EE6CD80ABD8757464D5127B0AE34AFAB8A4B5F8C/0/323830333a323832303a3a2f33322d3332203d3e20323635383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2820::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:49:92:5c:01:5d:24:ab:b2:93:77:37:ae:a4:12:4d:74:09:
         b5:eb:13:24:a3:d8:84:ce:50:2e:9a:35:0b:26:de:ba:07:01:
         48:be:a3:3f:53:60:a9:66:c3:2e:6f:4e:19:87:61:3f:ac:b9:
         2e:c1:bf:e8:3c:08:a4:8c:8f:72:35:25:82:24:af:a4:80:35:
         64:e4:aa:23:3c:34:ad:ad:3f:31:1b:2d:f6:ab:ff:37:a0:17:
         3e:58:59:fc:d5:9f:25:6f:a1:45:2b:d2:34:55:99:eb:f3:fc:
         0a:67:98:71:56:b2:ba:b8:cb:ca:e6:fb:06:c8:ed:ef:01:04:
         3c:51:ae:22:8c:ab:7d:ef:58:c7:59:9d:48:7e:f0:4a:60:4d:
         01:09:3d:ec:b4:f6:3f:64:9d:14:0c:8a:25:7f:b4:d4:0c:b0:
         0b:41:95:fd:8f:78:3b:ff:b3:f7:26:f5:94:c3:07:8f:6e:e7:
         b8:fb:f2:81:16:cf:f7:98:32:73:a6:7c:1d:82:ac:b8:e7:bb:
         7c:4d:ec:72:66:ce:57:6a:fe:4c:bd:22:2f:c2:93:4b:f8:b3:
         2e:fd:e5:0d:60:f7:86:0b:5d:8a:d8:0e:ad:d3:51:8a:3b:94:
         5f:d7:2c:6d:29:89:0f:9b:51:9a:80:8d:8e:8f:6d:d3:75:d6:
         06:d2:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:24 2025 by rpki-client