Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a323030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a323030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          vw7HGREvCZzoEnrknHCgXnHFutNGxqsx0C/M4x9heZc=
Subject key identifier:   DB:3A:99:CF:6D:6C:8E:F1:CF:24:06:68:6F:01:73:8E:31:42:59:E0
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       1D518AC48CA6C6DCE684E2D9B6FBB717846B5619
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a323030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:53 +0000
ROA not before:           Tue 04 Feb 2025 18:23:53 +0000
ROA not after:            Tue 03 Feb 2026 18:28:53 +0000
asID:                     61508
IP address blocks:        2803:f240:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:51:8a:c4:8c:a6:c6:dc:e6:84:e2:d9:b6:fb:b7:17:84:6b:56:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:53 2025 GMT
            Not After : Feb  3 18:28:53 2026 GMT
        Subject: CN=DB3A99CF6D6C8EF1CF2406686F01738E314259E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:64:e8:0a:b1:33:4d:45:5d:5d:87:34:52:
                    bd:21:9a:a9:8b:77:20:18:bb:52:a9:2a:40:30:9d:
                    36:82:66:d1:77:39:5c:4a:77:d9:5e:d0:8d:fc:ee:
                    86:fd:c2:db:b8:5e:8b:3a:43:69:bb:c4:94:ed:ee:
                    b6:37:a5:ab:a6:88:15:52:a9:af:2d:a5:bd:1b:4b:
                    41:69:c2:78:75:8c:f5:4a:f4:35:9a:e7:55:ab:9d:
                    0a:a8:fe:ba:36:ce:fd:8d:0f:36:fc:c0:2f:8b:f0:
                    cf:d1:b3:84:b6:19:f4:bd:33:34:2e:6a:6c:aa:a6:
                    6d:93:f0:45:a8:c0:5a:f8:4a:a1:92:82:18:aa:f7:
                    af:bc:e4:bd:80:8a:02:79:ec:51:77:a9:c1:31:72:
                    dd:3c:43:bf:c3:e3:fe:23:0d:8b:27:37:1d:32:1d:
                    3f:8e:4e:a3:47:14:46:1e:1f:0f:f8:9c:28:0b:4c:
                    46:0c:7d:bc:a4:01:86:72:39:a2:ec:e8:97:c7:87:
                    34:72:35:af:62:b1:24:06:8d:3d:cc:47:d3:11:f4:
                    7d:d9:e3:65:66:1c:5c:bf:e5:8c:d5:27:4d:57:80:
                    ed:e7:13:7d:c5:42:5b:6a:ec:5f:82:64:1d:bc:71:
                    c9:86:2c:6d:08:d6:27:af:ce:0c:cd:52:64:98:f2:
                    7f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3A:99:CF:6D:6C:8E:F1:CF:24:06:68:6F:01:73:8E:31:42:59:E0
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a323030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         47:db:98:6c:c0:3f:5d:d9:39:fb:06:27:a5:9d:63:62:62:5e:
         e7:f0:76:c9:e1:58:c0:76:60:1e:4c:33:d3:ac:1d:51:ff:e8:
         8a:48:62:40:a1:98:d6:19:25:bf:7f:f8:3b:e1:b3:fb:db:a7:
         c4:3e:09:6e:dd:8c:8c:dd:66:49:0d:af:1a:a7:60:9d:e8:2f:
         97:92:b0:19:65:52:58:06:6d:63:10:a6:6e:12:82:2c:32:fd:
         c8:99:2a:cd:dd:1c:0b:3a:71:8b:41:72:c2:ef:72:c6:39:bc:
         eb:dd:8f:7c:73:50:0d:f0:d4:5e:b0:16:10:0e:9d:06:ee:2b:
         ee:47:85:87:1b:8a:3c:2d:c8:fb:41:96:47:e3:50:10:e3:fe:
         2d:c3:7b:1c:b7:2c:ae:b3:00:a7:6e:e8:15:e0:56:54:df:4f:
         23:a9:90:56:1b:8a:03:e8:52:53:2a:f5:7a:92:6a:4c:a1:12:
         6a:d7:b2:66:00:28:bf:9f:90:6d:4e:0a:6c:d8:c7:5e:77:bf:
         46:f4:0a:05:eb:cc:ba:51:20:49:92:d3:f8:7f:1d:72:93:53:
         98:43:30:6b:60:17:c9:a0:7a:54:df:93:0b:64:32:40:ef:1a:
         bf:37:ba:5c:48:37:d8:af:91:2a:67:d7:48:23:28:fa:a4:9f:
         4b:4e:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:46 2025 by rpki-client