Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/323830333a313136303a3a2f33322d3332203d3e20323639373238.roa
File:                     323830333a313136303a3a2f33322d3332203d3e20323639373238.roa (raw, json)
Hash identifier:          8jEZPg7HflUcFRXvKOXvykN5uwQ5+8cYRaj0xei3gH0=
Subject key identifier:   E2:E5:BF:B3:3D:BD:D3:02:7A:CB:C8:C1:8F:09:A7:ED:DE:A4:1A:59
Certificate issuer:       /CN=13B657FF6E17844C871CDBE69EB5DF87796F1536
Certificate serial:       5DA6A7A4BD382DF28DE5F2253ED22D777B444E32
Authority key identifier: 13:B6:57:FF:6E:17:84:4C:87:1C:DB:E6:9E:B5:DF:87:79:6F:15:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/323830333a313136303a3a2f33322d3332203d3e20323639373238.roa
Signing time:             Tue 04 Feb 2025 18:51:54 +0000
ROA not before:           Tue 04 Feb 2025 18:46:54 +0000
ROA not after:            Tue 03 Feb 2026 18:51:54 +0000
asID:                     269728
IP address blocks:        2803:1160::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a6:a7:a4:bd:38:2d:f2:8d:e5:f2:25:3e:d2:2d:77:7b:44:4e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B657FF6E17844C871CDBE69EB5DF87796F1536
        Validity
            Not Before: Feb  4 18:46:54 2025 GMT
            Not After : Feb  3 18:51:54 2026 GMT
        Subject: CN=E2E5BFB33DBDD3027ACBC8C18F09A7EDDEA41A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:b2:20:78:86:1b:37:04:27:7f:bf:ec:1a:
                    aa:4c:81:3d:a8:01:b8:63:51:71:01:4a:df:d2:0f:
                    46:f9:14:4e:bd:5a:99:16:2d:24:07:14:07:f1:74:
                    17:ef:14:91:9a:c7:aa:a1:77:b9:53:22:84:14:f3:
                    f1:74:a7:5f:18:a0:4d:2f:34:34:2a:dc:3b:d4:0b:
                    a0:ea:f0:ca:97:f5:0e:9f:13:03:cb:56:66:6e:f5:
                    13:52:bb:eb:7c:52:35:cd:a3:98:c9:04:65:46:ab:
                    7c:3a:8c:3c:eb:9c:da:f2:d2:c1:ce:c3:2c:fc:e7:
                    23:bc:55:b2:04:45:5c:ab:b5:b8:8d:c7:08:9c:b0:
                    24:d4:42:77:e6:d6:6b:77:a1:06:84:81:73:f3:2a:
                    70:0f:85:b2:15:c7:21:53:3f:d2:8f:4f:3e:b5:e1:
                    6e:1d:6a:86:91:65:c0:a7:7b:1c:86:4c:a5:98:63:
                    43:ab:7c:19:79:92:ac:6d:69:57:ff:0f:22:60:b9:
                    16:1f:5e:0c:06:65:cd:81:ec:90:52:13:7b:35:8d:
                    59:2f:3d:d6:76:6a:d1:a6:e9:03:94:8a:2c:38:17:
                    36:38:69:2d:56:26:12:26:5c:ef:83:08:ea:da:0d:
                    3c:9b:8f:b9:af:2c:44:11:e2:a6:7f:2a:cd:96:f3:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E5:BF:B3:3D:BD:D3:02:7A:CB:C8:C1:8F:09:A7:ED:DE:A4:1A:59
            X509v3 Authority Key Identifier:
                keyid:13:B6:57:FF:6E:17:84:4C:87:1C:DB:E6:9E:B5:DF:87:79:6F:15:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/323830333a313136303a3a2f33322d3332203d3e20323639373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1160::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:85:0e:9a:0a:55:1b:e5:61:25:8a:a2:49:e0:7e:eb:77:
         6a:29:2f:cf:bf:32:23:0c:73:5e:a5:12:12:12:e7:db:ec:01:
         28:10:0c:ee:56:44:33:5a:cf:41:44:3b:e3:0b:c0:da:b7:15:
         6e:76:3d:0e:58:be:b3:3c:bd:77:d0:ef:39:7c:cf:41:6b:c8:
         f4:8e:1d:a2:00:7a:b7:60:94:dc:e4:07:7d:c9:ed:09:15:5a:
         76:28:ce:b9:ae:7d:f8:5f:ca:d0:d5:6d:10:ad:43:6d:aa:cb:
         f5:62:0c:25:20:57:b9:ea:b6:57:63:db:d1:81:3d:da:fb:d2:
         aa:7c:cb:2b:50:51:cb:92:a9:d1:0e:f2:df:eb:28:6c:a3:0f:
         3c:98:4e:c3:36:18:c4:c0:18:4a:78:45:88:91:ae:6e:10:5b:
         a6:e2:26:ed:19:ba:86:2c:87:d7:76:2f:aa:40:8d:b7:46:65:
         6f:29:f3:1f:d0:fd:e9:8d:d8:90:75:76:e8:41:40:40:79:76:
         f1:6e:95:a5:6f:41:06:56:df:4f:be:91:a7:ac:49:65:19:c3:
         e4:4d:1e:67:d6:a0:e6:09:41:0c:51:65:77:83:b3:3c:5e:cc:
         21:0b:b0:14:58:c3:d8:a7:ac:5c:01:ee:41:d4:00:7a:b7:b4:
         7d:29:af:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:08 2025 by rpki-client