Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e203237393139.roa
File:                     323830333a623463303a3a2f33322d3438203d3e203237393139.roa (raw, json)
Hash identifier:          e33fo3otGkjsmTXvL/Wjj1A/4ddwFKvhReNE5rxS328=
Subject key identifier:   DC:D3:4D:F9:0B:84:9A:38:F3:B8:C0:E8:4D:CB:50:BF:CC:34:B5:7B
Certificate issuer:       /CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
Certificate serial:       2E8F35506A8515CACC7BC4F496C664A890EA3AB7
Authority key identifier: E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e203237393139.roa
Signing time:             Tue 04 Feb 2025 18:26:16 +0000
ROA not before:           Tue 04 Feb 2025 18:21:16 +0000
ROA not after:            Tue 03 Feb 2026 18:26:16 +0000
asID:                     27919
IP address blocks:        2803:b4c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8f:35:50:6a:85:15:ca:cc:7b:c4:f4:96:c6:64:a8:90:ea:3a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
        Validity
            Not Before: Feb  4 18:21:16 2025 GMT
            Not After : Feb  3 18:26:16 2026 GMT
        Subject: CN=DCD34DF90B849A38F3B8C0E84DCB50BFCC34B57B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:3d:67:8d:43:fc:51:e3:75:9e:13:47:af:
                    24:67:22:dd:25:90:bc:df:86:bc:11:74:c9:02:32:
                    f4:26:d4:9a:2a:8a:f7:73:6d:55:fd:9e:3a:74:9c:
                    46:f4:76:be:6e:82:8a:28:23:68:c7:8a:f4:32:a4:
                    26:bf:29:57:df:d7:cc:33:10:58:3e:37:3f:c4:a5:
                    2d:79:b6:4c:30:23:78:c4:a4:a4:ab:a2:31:2c:2e:
                    1c:fa:4e:7e:4e:a4:98:a9:91:5d:e6:27:34:73:7a:
                    db:23:b6:c4:b4:7b:34:5c:34:d0:9c:34:88:be:2b:
                    88:dc:b4:d8:23:19:77:52:23:c3:cf:36:cc:57:4a:
                    9a:08:f1:d7:0b:6c:3d:c6:8c:ae:5f:f2:39:aa:88:
                    a6:c1:85:2a:19:40:46:9e:32:43:8c:b0:5d:9c:e0:
                    04:ee:32:b2:3a:f4:23:b6:6d:a8:f8:44:43:74:ad:
                    a3:8b:a7:ca:d9:47:f5:59:a9:4a:22:df:03:1c:23:
                    79:1a:52:71:d2:89:f4:8e:c5:e2:ed:af:1d:37:3b:
                    78:48:35:4b:8e:f3:10:cb:b6:d1:8c:ee:5b:1c:b5:
                    09:f7:59:be:5e:c9:58:eb:2c:5a:7d:09:eb:7a:4b:
                    fd:d2:f0:63:34:81:cc:30:39:20:99:35:3d:20:02:
                    73:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D3:4D:F9:0B:84:9A:38:F3:B8:C0:E8:4D:CB:50:BF:CC:34:B5:7B
            X509v3 Authority Key Identifier:
                keyid:E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/323830333a623463303a3a2f33322d3438203d3e203237393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:cf:1f:7d:c9:d8:2d:9d:b5:d9:80:fc:0f:cc:ab:11:12:73:
         c6:6a:16:18:5d:68:3b:95:ca:61:ef:6a:c6:12:1b:15:10:a9:
         8f:64:f8:8c:5b:33:0d:25:97:20:96:c5:d6:03:98:e4:80:2f:
         49:39:d5:15:ac:b3:e5:71:2b:0d:af:42:40:da:92:64:37:e6:
         ec:5a:de:35:3f:91:f1:ab:48:b9:26:a9:9a:d8:58:07:13:c9:
         ae:69:1b:3f:3f:f4:88:99:cd:3a:0f:4b:ed:3a:0e:a3:5d:dc:
         e4:41:47:8b:47:93:57:bd:76:04:ef:06:20:4d:58:5e:0f:23:
         e5:b8:bc:94:4f:09:4c:dd:23:2a:eb:3c:a1:7e:47:4a:3f:c2:
         4c:22:72:93:30:da:4d:86:f6:77:8b:94:22:ba:11:91:0f:9d:
         34:2e:df:68:8b:bf:0f:1d:ad:0a:41:dc:d6:14:3c:83:be:38:
         e7:d3:53:e5:c0:c1:a8:c6:d3:e6:fb:02:6b:47:64:ff:53:24:
         36:98:f4:76:72:2d:a7:60:8a:88:44:20:fe:2b:10:e9:09:61:
         ca:0f:85:11:9a:0f:53:00:e2:b1:41:73:77:30:27:3f:1a:7b:
         ff:34:08:5f:7b:cf:9f:3e:8b:9b:6a:cc:ec:68:73:a2:3f:22:
         b8:08:90:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:26:42 2025 by rpki-client