Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/351728997EC8E90EA53EF8C1947E96A975D6DE7230979B08D355AF00546EC403/0/323830333a316663303a3a2f33322d3332203d3e20323635373831.roa
File:                     323830333a316663303a3a2f33322d3332203d3e20323635373831.roa (raw, json)
Hash identifier:          TXbPds98ue9PQVj2UGMmIeNyPXxxWxSmelDbRocrijk=
Subject key identifier:   0C:22:DB:97:2F:F0:CF:8F:65:7F:61:8C:EE:CF:18:6E:7B:54:6C:CF
Certificate issuer:       /CN=F92A4B4B7B311696F9CC9738CD385CA63607178E
Certificate serial:       0C69B82D54F3846693C7EA7C1AAFD7ADCBA5F367
Authority key identifier: F9:2A:4B:4B:7B:31:16:96:F9:CC:97:38:CD:38:5C:A6:36:07:17:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F92A4B4B7B311696F9CC9738CD385CA63607178E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/351728997EC8E90EA53EF8C1947E96A975D6DE7230979B08D355AF00546EC403/0/323830333a316663303a3a2f33322d3332203d3e20323635373831.roa
Signing time:             Tue 04 Feb 2025 18:21:04 +0000
ROA not before:           Tue 04 Feb 2025 18:16:04 +0000
ROA not after:            Tue 03 Feb 2026 18:21:04 +0000
asID:                     265781
IP address blocks:        2803:1fc0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:69:b8:2d:54:f3:84:66:93:c7:ea:7c:1a:af:d7:ad:cb:a5:f3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F92A4B4B7B311696F9CC9738CD385CA63607178E
        Validity
            Not Before: Feb  4 18:16:04 2025 GMT
            Not After : Feb  3 18:21:04 2026 GMT
        Subject: CN=0C22DB972FF0CF8F657F618CEECF186E7B546CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:1d:b9:4c:df:e0:1e:bf:8d:8d:88:7f:03:
                    c6:76:f4:05:fd:3f:80:fb:cb:9c:aa:1c:b4:af:5a:
                    a9:fe:a7:0c:d1:e5:06:fa:48:1a:af:98:47:6f:fd:
                    d7:1a:c0:cc:2e:02:4e:ad:bd:23:62:b0:26:6d:6d:
                    0e:bd:b7:6e:19:71:0d:f8:44:fd:23:dc:cb:45:ff:
                    d0:3e:cb:df:ae:cc:a4:98:a2:c2:e6:13:9e:2c:43:
                    85:a2:ce:fc:de:29:fb:2c:37:c3:94:18:d6:ab:7e:
                    6b:f5:38:1a:87:bc:98:c4:6b:ad:06:9f:b1:b6:2a:
                    8e:45:c2:c4:7f:33:c1:6a:a9:d5:e5:92:c9:f4:63:
                    1a:94:2a:3e:35:2a:81:62:e9:09:76:a2:e9:c6:7d:
                    f9:bd:4c:88:9c:97:46:03:db:0b:7a:47:10:e4:2e:
                    4c:e0:f4:84:c6:6e:ef:dc:14:18:48:f0:30:9c:19:
                    cc:cf:44:22:bc:33:39:c9:97:74:97:01:ac:7e:d2:
                    31:6f:c6:0b:21:63:91:aa:2b:3e:44:36:06:76:41:
                    11:3b:e0:a9:b8:2e:87:9c:92:34:88:55:ea:0f:83:
                    92:64:7b:06:1c:28:94:ea:80:47:6d:fd:a7:8d:ec:
                    ba:8b:41:c9:ef:c6:44:77:1a:dd:8a:f3:bd:3d:eb:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:22:DB:97:2F:F0:CF:8F:65:7F:61:8C:EE:CF:18:6E:7B:54:6C:CF
            X509v3 Authority Key Identifier:
                keyid:F9:2A:4B:4B:7B:31:16:96:F9:CC:97:38:CD:38:5C:A6:36:07:17:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/351728997EC8E90EA53EF8C1947E96A975D6DE7230979B08D355AF00546EC403/0/F92A4B4B7B311696F9CC9738CD385CA63607178E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F92A4B4B7B311696F9CC9738CD385CA63607178E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/351728997EC8E90EA53EF8C1947E96A975D6DE7230979B08D355AF00546EC403/0/323830333a316663303a3a2f33322d3332203d3e20323635373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:81:e5:7d:2f:99:36:33:ff:da:27:bf:59:8e:24:50:f2:b8:
         4b:1a:b1:f8:0d:50:83:9f:5d:51:2c:3a:76:3b:56:5c:1d:f6:
         9b:96:ae:1c:a1:c9:88:3d:27:26:b3:67:57:d7:ba:43:98:d9:
         5c:b7:3f:15:ad:f6:9c:a6:dd:ba:0c:eb:46:7d:ba:ba:d1:01:
         71:6a:84:46:51:8a:dc:c5:bc:9a:61:e4:b3:40:b2:9a:20:c8:
         3a:34:3b:1e:84:b6:6c:28:1f:1b:d4:39:f1:d7:55:66:1d:f1:
         31:92:40:88:26:e3:70:f7:f5:3d:6d:08:3e:bc:bd:b4:b0:41:
         9d:a7:ba:e6:76:a8:ad:90:83:45:c0:fa:24:8e:66:74:fd:4e:
         3c:83:54:0a:88:72:36:f2:36:f6:df:e4:3e:df:c8:2c:19:f0:
         c4:d1:35:ad:21:b6:9d:8c:75:15:67:c9:50:72:01:31:9a:a7:
         5a:da:4c:6c:c0:fb:bd:a5:c4:b2:54:c5:55:8d:33:cd:67:76:
         3e:73:f4:96:b1:99:ab:51:38:c0:e8:2d:e0:a5:c8:75:c5:9e:
         93:9d:a0:7f:5b:20:eb:6c:9e:45:52:63:6b:4c:a1:52:73:9d:
         38:7b:ac:4b:e9:97:90:32:a6:86:ee:66:19:83:f8:24:46:fb:
         36:b0:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:51 2025 by rpki-client