Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a633030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a633030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          rsO4vVn/bgMiahDnT62kFsWd/7PF9bQibQWJ822sy70=
Subject key identifier:   82:7B:7B:38:7E:4A:5F:EA:C9:F8:AC:9A:4B:A1:E1:07:66:7D:5B:6F
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       5FFF564E5BA80B735558AACE9F8A344045860FB7
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a633030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:53 +0000
ROA not before:           Tue 04 Feb 2025 18:23:53 +0000
ROA not after:            Tue 03 Feb 2026 18:28:53 +0000
asID:                     61508
IP address blocks:        2803:f240:c000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ff:56:4e:5b:a8:0b:73:55:58:aa:ce:9f:8a:34:40:45:86:0f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:53 2025 GMT
            Not After : Feb  3 18:28:53 2026 GMT
        Subject: CN=827B7B387E4A5FEAC9F8AC9A4BA1E107667D5B6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:f3:74:4e:53:67:cf:3f:da:9b:07:cb:a2:
                    f0:cb:e5:ec:4a:93:a7:a6:e6:25:d6:00:bb:90:14:
                    3b:6d:97:f8:e8:af:56:0c:23:b2:1e:9b:7b:5a:b4:
                    63:40:e6:24:d9:06:4a:69:e6:03:d4:62:3e:c6:8a:
                    89:35:64:8e:48:c6:14:2c:ac:20:0b:26:b8:a6:e8:
                    7c:69:f8:f4:f2:01:98:ad:32:e1:da:46:fe:13:1d:
                    78:51:92:6d:16:02:0e:1b:c1:b5:b9:16:68:04:f1:
                    a5:d2:e0:c2:1d:02:55:0e:5c:49:a7:12:6d:8e:b4:
                    de:4e:a2:bd:3b:60:a1:3b:71:5e:d5:0d:a3:66:ba:
                    57:8d:f0:81:b5:ff:ed:86:28:ae:9f:3b:a2:ce:75:
                    99:0a:19:f1:3c:58:b9:9c:80:d2:53:f9:36:0b:fe:
                    c3:dd:25:4e:25:8e:59:cf:20:54:c9:77:c4:c5:b3:
                    ee:87:af:25:c6:7e:15:8e:a1:7d:75:b9:9f:4c:63:
                    d3:6f:6c:84:96:c7:6e:d4:f7:1b:6c:18:70:cd:e3:
                    5a:7d:f2:9b:5f:c3:0a:b6:9d:63:82:a8:da:ca:e1:
                    8f:1a:e8:e3:9b:f6:9b:d2:ca:ae:aa:33:84:ee:65:
                    3b:02:40:54:0a:5b:13:39:f2:f0:bf:75:d2:ef:ff:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7B:7B:38:7E:4A:5F:EA:C9:F8:AC:9A:4B:A1:E1:07:66:7D:5B:6F
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a633030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:a0:a5:90:68:28:9e:19:f6:dc:a4:79:2a:ce:c0:79:1e:93:
         43:3e:52:a7:2f:fb:56:b0:8e:08:23:c1:97:cd:ec:da:d2:17:
         2a:9a:31:fe:b4:ad:d4:dd:8c:c3:6e:1e:b4:be:56:c5:ee:31:
         60:a8:d6:49:a1:b8:78:63:55:46:40:42:c2:67:37:b1:b2:84:
         31:53:1a:94:04:b5:27:17:84:24:25:ee:d8:1f:c2:c1:59:13:
         06:66:46:ae:41:f6:54:a0:72:f8:23:96:e4:6d:08:53:56:60:
         b7:4b:1e:ae:35:48:81:29:a5:28:8b:36:d5:ef:0d:dc:90:cf:
         c1:8e:74:c7:ea:39:d8:1d:9d:ec:79:97:b9:04:69:7f:a0:47:
         aa:f9:a1:2d:d5:16:70:8c:aa:bb:10:d2:f7:58:83:4d:24:ac:
         38:4b:67:07:42:ed:d1:a7:b7:8b:68:79:c7:f5:33:d1:33:ae:
         8c:48:e8:8a:c8:f1:29:ef:ea:58:ab:3f:3d:49:56:ea:52:79:
         a3:84:6a:8f:9a:b2:bc:10:17:0d:b5:9f:66:ef:56:9d:15:b7:
         75:23:55:e9:73:2f:5b:c3:17:a2:af:9e:65:3b:56:86:64:55:
         5b:66:f3:2f:ba:36:1c:27:ad:39:ef:f1:e6:b1:42:38:a3:a6:
         83:1a:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----