Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/323830333a393132303a3a2f33322d3438203d3e20323637373131.roa
File:                     323830333a393132303a3a2f33322d3438203d3e20323637373131.roa (raw, json)
Hash identifier:          eZnIRKxhyPSiMLQh5AXm6EpXm75aRxJ8REQCinEJctA=
Subject key identifier:   83:1C:7B:CC:42:F1:A9:28:36:B5:72:B5:8A:E6:8A:1A:9A:97:1F:3D
Certificate issuer:       /CN=389CCF923837EEAFA4DA96AE20241419C941F58A
Certificate serial:       3E5F63B6CFE961A9F589F2D1D2144EE8945C9745
Authority key identifier: 38:9C:CF:92:38:37:EE:AF:A4:DA:96:AE:20:24:14:19:C9:41:F5:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/323830333a393132303a3a2f33322d3438203d3e20323637373131.roa
Signing time:             Tue 04 Feb 2025 18:04:06 +0000
ROA not before:           Tue 04 Feb 2025 17:59:06 +0000
ROA not after:            Tue 03 Feb 2026 18:04:06 +0000
asID:                     267711
IP address blocks:        2803:9120::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5f:63:b6:cf:e9:61:a9:f5:89:f2:d1:d2:14:4e:e8:94:5c:97:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389CCF923837EEAFA4DA96AE20241419C941F58A
        Validity
            Not Before: Feb  4 17:59:06 2025 GMT
            Not After : Feb  3 18:04:06 2026 GMT
        Subject: CN=831C7BCC42F1A92836B572B58AE68A1A9A971F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:26:f6:b9:8f:65:d6:9b:46:86:c7:60:88:
                    4a:91:69:bd:48:5c:7d:82:ea:a9:16:81:48:21:d1:
                    31:65:c8:31:c5:22:b8:dd:6d:d5:26:87:59:0b:95:
                    ea:bc:16:68:e1:f3:f4:12:89:9a:0a:85:32:63:c0:
                    e4:c5:ff:a1:48:2c:82:6c:c1:78:51:6b:a0:92:e8:
                    7f:97:75:41:cb:d8:61:ae:46:b1:bf:ff:d9:ae:70:
                    72:6b:cf:06:20:7a:eb:d9:b1:43:24:d0:f4:72:29:
                    cb:b5:b5:d5:d0:9f:8d:27:2b:fa:f0:d8:af:72:6a:
                    3b:0d:33:84:16:8a:29:1c:f7:de:0b:f3:f2:fc:da:
                    68:99:c1:ad:b2:5e:08:9e:9d:a2:4b:27:70:39:6a:
                    11:de:6e:42:a5:0f:f0:b4:1f:1a:23:1f:48:3c:42:
                    2c:49:04:3e:a0:cb:f0:b7:81:3d:38:d9:e7:d7:fe:
                    3e:dd:4c:c9:26:da:eb:68:e8:18:d8:2b:23:32:13:
                    9c:63:37:a7:9d:1d:26:32:ba:26:f6:65:64:31:28:
                    91:0d:e0:29:06:40:37:e4:29:db:9f:d3:48:cf:25:
                    c5:86:64:7f:bb:5f:36:e0:59:3d:24:13:49:2f:9e:
                    fe:b2:94:ad:59:11:a7:3e:29:fa:ec:4e:16:de:53:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1C:7B:CC:42:F1:A9:28:36:B5:72:B5:8A:E6:8A:1A:9A:97:1F:3D
            X509v3 Authority Key Identifier:
                keyid:38:9C:CF:92:38:37:EE:AF:A4:DA:96:AE:20:24:14:19:C9:41:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/389CCF923837EEAFA4DA96AE20241419C941F58A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/323830333a393132303a3a2f33322d3438203d3e20323637373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9120::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:8e:a5:36:57:42:82:cb:78:15:f4:36:7f:94:16:9d:86:ae:
         ab:c3:38:6d:1d:03:5a:a6:ce:66:54:85:29:a0:2b:93:53:98:
         a8:25:cb:a6:67:31:9f:f6:c9:cb:d9:57:80:02:ba:11:13:63:
         c7:ab:62:fc:7a:aa:ba:88:0c:c1:51:6e:e9:b4:68:0d:ff:6e:
         1e:d7:13:8f:ed:09:33:94:10:2c:7e:26:72:28:20:ca:f5:7b:
         0a:61:5a:91:01:1e:eb:a7:dc:f6:b5:58:a5:ca:a3:8b:fc:43:
         8c:7d:38:64:4b:e0:91:2e:96:2b:34:b4:60:bd:1e:2d:17:fc:
         d9:af:d2:d4:4b:34:b0:f4:c8:b8:51:2e:ae:a7:1a:9c:2f:f9:
         27:59:b5:b6:92:c8:96:dd:6d:dd:dc:18:c6:d9:e6:2e:5b:5d:
         f5:15:00:3f:4b:aa:f1:ee:c5:d8:b3:f9:eb:a6:d4:3c:d3:c4:
         72:dd:87:6e:19:dc:13:f2:0d:0b:32:d8:03:30:eb:c7:c5:f8:
         73:f2:48:9a:cb:04:8d:8c:a8:84:85:9b:4f:83:5f:03:72:ce:
         d4:fa:e5:d6:61:5a:3d:05:e0:71:b6:58:05:9b:63:81:82:05:
         fa:ab:28:c6:b9:2a:76:36:ee:34:68:7a:4a:0e:2c:75:2d:74:
         1d:b1:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:39 2025 by rpki-client