Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/323830333a326265303a3a2f33322d3438203d3e20323730303833.roa
File:                     323830333a326265303a3a2f33322d3438203d3e20323730303833.roa (raw, json)
Hash identifier:          cqPK+VOnUTpRkhjk9sGTHl8iumQoL0xwzU4kwEqtOT8=
Subject key identifier:   C3:44:41:BC:FF:CF:59:9F:68:CB:07:B7:F3:19:90:CA:C0:67:72:05
Certificate issuer:       /CN=80C810ED88D5F93C94792378CA0CC223E6DB869F
Certificate serial:       15C6726E366554F1F79B35A8E24DB763DAAA22DB
Authority key identifier: 80:C8:10:ED:88:D5:F9:3C:94:79:23:78:CA:0C:C2:23:E6:DB:86:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/323830333a326265303a3a2f33322d3438203d3e20323730303833.roa
Signing time:             Tue 04 Feb 2025 18:04:39 +0000
ROA not before:           Tue 04 Feb 2025 17:59:39 +0000
ROA not after:            Tue 03 Feb 2026 18:04:39 +0000
asID:                     270083
IP address blocks:        2803:2be0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c6:72:6e:36:65:54:f1:f7:9b:35:a8:e2:4d:b7:63:da:aa:22:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C810ED88D5F93C94792378CA0CC223E6DB869F
        Validity
            Not Before: Feb  4 17:59:39 2025 GMT
            Not After : Feb  3 18:04:39 2026 GMT
        Subject: CN=C34441BCFFCF599F68CB07B7F31990CAC0677205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:29:61:93:5b:7f:2e:ef:7c:0c:50:41:94:
                    98:54:ae:17:2b:1c:db:79:7f:29:fa:93:40:ff:ac:
                    6a:02:b6:d5:7a:a8:f8:65:03:3d:11:09:bf:cc:78:
                    d5:30:6c:79:dd:39:f6:4c:a2:f4:b4:87:27:d9:52:
                    ae:86:d2:fa:b1:83:be:c0:3f:39:0c:77:53:ca:0e:
                    37:c3:f0:ec:67:10:a4:7b:fe:b8:d9:0b:47:68:99:
                    2f:7c:c6:c0:af:a2:4d:39:0e:cc:ed:f7:c5:91:8e:
                    d8:5e:21:8e:16:8a:53:ac:ae:ab:fd:f4:78:d1:d1:
                    9b:38:e8:ab:50:5a:98:fc:08:b9:a4:91:66:f5:08:
                    6a:f8:1d:bf:67:4f:24:97:8c:d0:a6:1c:58:15:32:
                    11:72:97:9a:63:ec:3b:76:85:02:c9:10:9d:cd:8e:
                    73:66:26:7b:71:7a:74:f2:22:ad:5a:35:1c:2d:e1:
                    fb:93:68:67:b8:55:c6:02:39:50:25:47:1e:93:a1:
                    be:3f:4d:6c:0e:f2:a5:80:77:70:cb:a9:97:51:13:
                    ed:f4:4c:e4:21:17:67:4d:b4:d3:bd:68:b3:be:de:
                    96:f8:47:f5:68:f1:e3:0e:31:7b:99:23:4b:f6:6c:
                    f1:29:e8:39:41:29:22:4d:95:e9:50:f3:3e:49:31:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:44:41:BC:FF:CF:59:9F:68:CB:07:B7:F3:19:90:CA:C0:67:72:05
            X509v3 Authority Key Identifier:
                keyid:80:C8:10:ED:88:D5:F9:3C:94:79:23:78:CA:0C:C2:23:E6:DB:86:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80C810ED88D5F93C94792378CA0CC223E6DB869F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ED4809B3D036758B98A0CED5B96A2C0FEB0C82429A076B3380A3206EB7C8DBD/0/323830333a326265303a3a2f33322d3438203d3e20323730303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:47:27:f0:59:b0:2e:70:3d:87:fe:42:81:be:ea:04:9f:e3:
         7b:e4:99:6f:7f:e3:b1:98:83:26:5e:3a:d2:0e:1e:96:e4:23:
         95:01:e1:87:96:ac:91:47:c0:e5:37:78:93:ac:63:3b:c5:a5:
         27:91:9a:a6:98:c8:96:fc:b0:13:33:83:3d:40:ca:ca:df:1b:
         74:6e:7d:33:9c:1a:05:40:9e:f0:a5:af:0d:da:1c:60:09:82:
         02:bd:ea:a8:6f:91:ab:57:3b:fc:a1:5d:23:ef:08:9a:f4:4f:
         8f:d7:d8:0f:d3:08:42:10:b1:49:fd:e9:3a:32:74:c7:72:6f:
         6d:f0:52:cf:d6:5e:4b:48:38:f6:27:11:27:1f:a3:95:7b:6a:
         60:b1:46:4c:83:5c:53:34:00:34:31:b0:e5:87:9c:93:e3:a3:
         18:9b:f0:c1:09:84:4f:d4:0a:54:c6:02:86:83:ac:81:fe:f6:
         94:bb:61:a4:74:5c:36:23:12:1f:a0:c1:4a:b5:99:44:5c:5a:
         26:f0:a1:ef:79:b0:3b:14:46:dc:f4:af:a1:cb:97:cf:75:57:
         9b:4d:d3:b5:3d:a5:40:45:38:37:35:b2:34:5a:7b:99:a5:08:
         dc:43:a8:ff:bc:86:4b:ad:ee:f3:a6:7a:ce:c1:1a:50:dc:e6:
         bc:d0:cd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:20:27 2025 by rpki-client