Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/323830333a363561303a3a2f33322d3438203d3e20323637373330.roa
File:                     323830333a363561303a3a2f33322d3438203d3e20323637373330.roa (raw, json)
Hash identifier:          s28vZlX11dUi+udBwGAOQwL+SoXyFDmX6ATIBg96pXM=
Subject key identifier:   83:62:76:DB:A2:DC:23:42:40:49:B9:2A:09:21:1E:B2:7C:81:B2:0E
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       52851447F51ABB720DCC73B7453C761FEAA23370
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/323830333a363561303a3a2f33322d3438203d3e20323637373330.roa
Signing time:             Tue 04 Feb 2025 18:10:06 +0000
ROA not before:           Tue 04 Feb 2025 18:05:06 +0000
ROA not after:            Tue 03 Feb 2026 18:10:06 +0000
asID:                     267730
IP address blocks:        2803:65a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:85:14:47:f5:1a:bb:72:0d:cc:73:b7:45:3c:76:1f:ea:a2:33:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Feb  4 18:05:06 2025 GMT
            Not After : Feb  3 18:10:06 2026 GMT
        Subject: CN=836276DBA2DC23424049B92A09211EB27C81B20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:74:dd:72:e0:7f:fa:81:5d:20:8e:d7:74:
                    a5:5b:2f:45:15:ce:52:24:1d:e3:2e:fd:ea:4c:c8:
                    70:c2:6b:03:31:14:a6:f7:5d:56:ff:d5:6d:a1:d7:
                    eb:a8:30:5e:53:88:a8:14:6d:15:a6:2a:12:37:11:
                    8f:39:71:70:fd:65:5a:ab:a0:d0:37:22:95:52:d2:
                    79:e5:e6:d8:90:35:9f:8c:57:f3:58:86:7a:2f:24:
                    4e:d7:07:92:68:e7:54:d8:86:29:ba:ad:86:04:3e:
                    8d:0e:a9:67:9b:40:6e:65:e1:a6:24:15:1f:90:af:
                    c9:9b:b7:9d:be:17:c4:f7:6e:b0:2e:9b:c1:2a:55:
                    87:8a:6f:b9:73:bb:aa:83:76:dd:6d:54:db:01:e7:
                    12:ae:6e:67:be:b7:4c:21:d9:fd:4f:4c:30:b0:53:
                    38:d5:50:c1:5b:bb:1e:ca:46:23:1e:28:ed:05:4f:
                    02:87:76:78:17:8c:49:6a:df:94:a3:6c:97:71:e0:
                    ae:c2:6a:53:48:11:f9:9f:5e:8d:91:57:d5:4c:80:
                    8c:3d:7c:63:2f:c3:c3:1a:7f:76:52:ba:60:52:84:
                    52:82:d1:65:64:b0:52:c9:a8:cb:4b:b6:66:25:0e:
                    f9:39:7c:31:fe:fb:59:19:bb:44:d1:fa:5c:ec:7c:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:62:76:DB:A2:DC:23:42:40:49:B9:2A:09:21:1E:B2:7C:81:B2:0E
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/323830333a363561303a3a2f33322d3438203d3e20323637373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:65a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:fa:31:38:9c:9c:42:04:2c:10:95:17:e0:13:63:4e:eb:7f:
         fa:76:94:b5:35:89:c6:4d:ff:fb:03:e4:25:15:bd:75:19:a2:
         3f:b8:70:d4:3f:89:01:f8:f7:e5:1c:4a:8c:f5:3e:bf:0d:19:
         49:a6:56:2f:21:11:6e:31:e7:5b:c2:66:e6:70:cc:fa:5a:91:
         40:7e:fe:1b:4e:77:7e:e6:6d:b6:f4:f2:43:1c:06:7f:b3:14:
         25:0e:1f:ce:ba:34:b2:70:b6:51:1a:23:44:d5:b4:13:6d:7c:
         0b:a2:93:21:4f:f7:f9:07:c9:9e:9c:59:f8:e0:af:cc:55:ab:
         a8:00:23:56:45:80:9d:2b:24:a7:19:1e:7d:75:2b:f2:7b:c2:
         c7:a7:06:5d:1d:5a:6f:3a:73:50:09:a5:cc:bc:b1:e8:3a:43:
         50:69:17:e6:f0:84:29:83:dc:07:a1:08:8e:16:ac:0a:f1:cc:
         29:28:98:ba:65:3b:a2:86:d8:c1:25:c7:2d:6c:7a:2d:6e:d9:
         7c:5e:8e:02:a6:14:ec:95:13:cb:0b:d7:22:98:ad:fc:1f:19:
         0c:2b:cf:ef:08:49:3c:24:c2:10:83:69:6d:be:19:fa:44:3c:
         bf:06:31:1f:7c:07:52:80:b3:5d:43:0d:f7:c1:81:b0:d2:c1:
         ff:ea:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:51 2025 by rpki-client