Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/244334EA6AD643D661B8EA096BB2DE0F39F5015B5D01882C50EE8B577492A6FD/0/323830333a376530303a3a2f33322d3634203d3e203238303236.roa
File:                     323830333a376530303a3a2f33322d3634203d3e203238303236.roa (raw, json)
Hash identifier:          nEPx6rlggfumZYyuNxKwKI9LYoTSNzn4fAAYqXHlmQ4=
Subject key identifier:   AC:1C:71:DE:1D:78:5C:0E:14:41:28:81:76:BD:06:42:18:D3:6D:07
Certificate issuer:       /CN=E4A504F09CB46473429BF10B505A60DB51837BE5
Certificate serial:       1023F5237EF5BB5B9B513FD2B140D72B8ADAB784
Authority key identifier: E4:A5:04:F0:9C:B4:64:73:42:9B:F1:0B:50:5A:60:DB:51:83:7B:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4A504F09CB46473429BF10B505A60DB51837BE5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/244334EA6AD643D661B8EA096BB2DE0F39F5015B5D01882C50EE8B577492A6FD/0/323830333a376530303a3a2f33322d3634203d3e203238303236.roa
Signing time:             Tue 04 Feb 2025 18:09:40 +0000
ROA not before:           Tue 04 Feb 2025 18:04:40 +0000
ROA not after:            Tue 03 Feb 2026 18:09:40 +0000
asID:                     28026
IP address blocks:        2803:7e00::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:23:f5:23:7e:f5:bb:5b:9b:51:3f:d2:b1:40:d7:2b:8a:da:b7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A504F09CB46473429BF10B505A60DB51837BE5
        Validity
            Not Before: Feb  4 18:04:40 2025 GMT
            Not After : Feb  3 18:09:40 2026 GMT
        Subject: CN=AC1C71DE1D785C0E1441288176BD064218D36D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:b7:4c:88:77:df:89:4a:48:a5:f4:b0:74:
                    51:34:23:17:85:24:66:81:43:b2:4b:07:56:01:e3:
                    33:ae:4a:4d:c7:05:11:27:e0:66:e7:7c:80:01:a5:
                    b1:51:cb:d2:d4:47:ab:d2:a7:9e:9c:77:be:8a:80:
                    94:2b:06:e5:cb:84:74:ff:3a:a7:3f:42:44:5f:63:
                    f7:f4:58:f2:b9:aa:f3:01:f4:d2:a1:d7:07:70:9e:
                    4b:1f:cf:76:ec:a5:17:a8:6a:b5:e7:23:82:4d:e1:
                    25:25:8b:b8:8e:f8:54:39:45:1e:df:eb:19:66:bb:
                    9f:8e:34:cb:cc:c2:ff:57:83:c9:5f:5a:fb:a8:45:
                    c9:62:23:01:b5:7f:84:f9:ca:37:a6:2c:c5:81:47:
                    29:df:cd:d6:b2:4d:e2:10:f0:56:18:46:4e:09:55:
                    84:39:bc:1c:9a:71:bd:f4:6c:4b:50:71:13:6c:89:
                    1c:90:ef:a3:d0:3e:8f:eb:86:49:54:94:0e:5b:de:
                    ab:57:de:e1:fe:58:a2:15:85:ce:b2:5c:2f:6b:bf:
                    70:57:d2:83:df:e3:c2:0f:48:76:83:07:ec:f8:78:
                    7a:17:b9:1e:16:ed:f0:4b:ca:48:13:a8:39:7f:69:
                    03:0a:73:a0:b3:64:2a:86:42:96:8b:cd:73:65:eb:
                    72:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1C:71:DE:1D:78:5C:0E:14:41:28:81:76:BD:06:42:18:D3:6D:07
            X509v3 Authority Key Identifier:
                keyid:E4:A5:04:F0:9C:B4:64:73:42:9B:F1:0B:50:5A:60:DB:51:83:7B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/244334EA6AD643D661B8EA096BB2DE0F39F5015B5D01882C50EE8B577492A6FD/0/E4A504F09CB46473429BF10B505A60DB51837BE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E4A504F09CB46473429BF10B505A60DB51837BE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/244334EA6AD643D661B8EA096BB2DE0F39F5015B5D01882C50EE8B577492A6FD/0/323830333a376530303a3a2f33322d3634203d3e203238303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:9f:d1:76:cc:aa:38:29:6f:e5:5d:7a:15:43:cc:3d:d8:13:
         ad:19:1b:28:5d:aa:df:8d:94:39:d5:97:d1:76:70:16:5d:e9:
         18:b5:85:07:8a:bd:d7:2d:26:9e:28:53:5e:4a:f8:61:26:0c:
         ed:60:52:0f:15:f8:3c:ea:1c:25:42:15:7e:e8:4a:0c:9f:40:
         be:34:36:87:1e:8b:20:1e:59:74:16:cb:3c:38:95:93:c5:49:
         ce:54:71:85:f8:3c:07:77:15:75:31:0b:1e:8c:0b:17:4d:cc:
         d2:3e:a1:35:4d:83:c7:f4:bc:e7:82:40:d9:42:de:35:db:29:
         e7:fa:c1:60:03:f6:3b:2e:8f:4b:24:48:dd:d1:b9:91:a3:fc:
         f9:8f:a5:cd:a7:bc:4d:ed:b6:ba:b4:6a:72:a5:4b:36:63:9d:
         71:d5:25:98:2a:26:2a:81:f8:d1:ce:57:06:a1:98:70:70:4f:
         5b:d2:97:87:19:8c:4c:d6:64:60:21:6d:02:5c:9c:a7:8e:ec:
         48:3f:f2:41:6b:67:35:01:14:95:fe:fc:b3:3f:c6:f9:e8:bd:
         f7:ef:cd:32:18:ff:69:71:32:c2:cb:b5:94:e8:1a:61:76:a0:
         07:e3:93:eb:68:8d:3b:e3:6d:ed:a7:2f:59:17:7c:7a:bc:b1:
         ed:b7:0e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----