Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/323830333a653638303a3a2f33322d3332203d3e20323633383231.roa
File:                     323830333a653638303a3a2f33322d3332203d3e20323633383231.roa (raw, json)
Hash identifier:          kTKSN8PgNwT/6nIDU8S7Vq49pnIUSNwFLum9HFINWOk=
Subject key identifier:   13:B1:EA:C4:12:B7:14:41:B2:08:2D:20:3C:1C:9E:4F:07:9B:93:35
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       7FDE6EF4DAD958DFB6FFE928A69970E9B3B30FF0
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/323830333a653638303a3a2f33322d3332203d3e20323633383231.roa
Signing time:             Tue 04 Feb 2025 18:39:18 +0000
ROA not before:           Tue 04 Feb 2025 18:34:18 +0000
ROA not after:            Tue 03 Feb 2026 18:39:18 +0000
asID:                     263821
IP address blocks:        2803:e680::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:de:6e:f4:da:d9:58:df:b6:ff:e9:28:a6:99:70:e9:b3:b3:0f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Feb  4 18:34:18 2025 GMT
            Not After : Feb  3 18:39:18 2026 GMT
        Subject: CN=13B1EAC412B71441B2082D203C1C9E4F079B9335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:d1:b4:53:40:fa:7a:f3:7c:53:94:4a:17:
                    72:3e:83:18:8b:f2:84:a3:a9:ac:0a:78:6a:4e:d1:
                    81:aa:8d:87:a3:72:19:34:da:05:0e:85:78:b9:10:
                    0c:6e:a3:71:6c:3f:80:40:53:bb:6b:e2:6c:61:f7:
                    4d:18:60:b4:26:aa:20:ef:31:0e:0b:e1:5c:68:a8:
                    a1:35:f5:62:78:8f:f5:69:67:00:5a:8a:1f:22:46:
                    d3:0a:f4:88:fd:6a:dd:9e:29:57:68:91:93:3a:12:
                    bb:38:34:85:bc:ab:4f:09:bd:c8:32:80:98:57:8e:
                    7f:8f:51:61:2c:c6:9a:c3:d6:a2:3b:f0:fa:60:3e:
                    59:98:80:b9:fe:c0:08:0a:5d:c7:00:bb:42:c6:48:
                    00:f1:21:78:12:e5:1b:24:60:fd:1f:70:20:a8:94:
                    7d:de:9e:43:da:1d:eb:fa:66:30:61:2d:bd:5d:87:
                    b8:e0:13:66:8c:da:21:a5:72:e1:37:a6:08:67:dd:
                    0a:da:8a:77:8f:08:71:18:d2:8d:71:ce:e4:40:60:
                    2b:fd:6a:de:44:32:08:e8:f1:c0:d6:00:cf:0e:bd:
                    8f:3b:15:89:7a:4e:c5:5f:fd:36:c7:43:2f:03:81:
                    e2:b8:f2:e0:ef:b2:99:e7:6c:67:23:35:5c:cb:ef:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B1:EA:C4:12:B7:14:41:B2:08:2D:20:3C:1C:9E:4F:07:9B:93:35
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/323830333a653638303a3a2f33322d3332203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e680::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:5b:7b:c8:a5:40:84:7e:d2:2e:85:8a:4c:6f:b3:7d:9b:
         d1:c6:78:eb:c8:6b:f7:a1:18:b7:c8:95:bc:b7:fc:be:19:3f:
         49:44:af:79:99:18:20:d3:3f:77:71:2b:70:90:52:2b:c1:12:
         5a:4d:28:59:1b:4a:56:bd:c4:e8:3e:5a:3b:1c:d3:48:98:5f:
         74:31:c7:1f:d5:af:07:7d:db:c6:2f:f2:34:a8:c8:00:de:35:
         15:95:55:08:b4:b8:04:c8:f7:59:72:b3:9d:bf:11:55:c3:f9:
         8b:d1:42:ec:a3:80:26:b2:87:15:2b:6b:c7:71:55:fe:21:54:
         12:a2:32:c9:a5:eb:4d:15:74:d5:5d:50:44:a1:99:93:c6:83:
         3c:ed:d9:98:aa:41:1e:c7:12:b2:2d:05:63:fa:4c:34:34:0a:
         89:ff:bb:be:24:60:9e:0d:04:55:5b:a5:ec:c9:ee:78:15:74:
         3a:ab:0f:33:1c:fc:ee:d7:50:5d:6e:58:72:3f:b7:75:6a:69:
         6e:27:e3:17:68:c8:37:88:19:75:aa:52:4f:9a:bd:30:da:35:
         cb:06:70:c4:65:dc:4e:59:ee:3d:a1:3e:72:1d:6c:62:24:b6:
         5e:5b:6a:f0:ae:d4:21:a0:f1:ab:bf:1b:1a:40:fb:07:87:df:
         49:52:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:02 2025 by rpki-client