Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e203131343135.roa
File:                     323830333a363239303a3a2f33322d3438203d3e203131343135.roa (raw, json)
Hash identifier:          +OJuAxO9oIuqd8u/QwjBwcoCX475li84PbtNpgnIxXk=
Subject key identifier:   AE:72:33:13:89:D3:2C:5F:E3:BF:5F:3F:A4:04:FF:1F:75:72:28:CB
Certificate issuer:       /CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
Certificate serial:       6B62451033E189A401669FA1995BA3E674E8A974
Authority key identifier: 3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e203131343135.roa
Signing time:             Tue 04 Feb 2025 18:08:08 +0000
ROA not before:           Tue 04 Feb 2025 18:03:08 +0000
ROA not after:            Tue 03 Feb 2026 18:08:08 +0000
asID:                     11415
IP address blocks:        2803:6290::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:62:45:10:33:e1:89:a4:01:66:9f:a1:99:5b:a3:e6:74:e8:a9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292
        Validity
            Not Before: Feb  4 18:03:08 2025 GMT
            Not After : Feb  3 18:08:08 2026 GMT
        Subject: CN=AE72331389D32C5FE3BF5F3FA404FF1F757228CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7c:46:c3:60:ba:d2:1f:ce:d5:00:4e:c6:e0:
                    b6:4b:53:7c:eb:30:6f:28:7a:2a:c3:1b:a3:ac:16:
                    96:d0:45:64:5b:86:8b:8c:39:2c:e2:e8:b1:94:9a:
                    93:c0:d3:f1:64:d0:f6:a9:77:47:89:ba:89:f0:5a:
                    55:47:a6:a2:26:7a:c4:41:6f:e3:b3:53:fb:65:35:
                    4c:1b:ba:ad:9f:c6:f2:7e:46:4f:8d:b6:39:0e:a2:
                    94:7c:59:f5:a9:1c:a4:e7:a2:bd:b4:e7:d2:1d:f3:
                    92:74:2e:93:ef:9d:1e:d2:c6:09:26:c9:55:8b:b9:
                    a9:27:c7:75:43:f3:81:58:db:4c:65:87:75:d4:dc:
                    2d:93:c7:02:47:0b:d7:18:15:bb:82:01:79:49:cb:
                    ca:07:8f:4c:29:45:95:29:ac:41:b5:6e:7e:3d:26:
                    aa:19:c6:78:b7:ed:9e:5a:58:e4:18:1c:7a:fa:d5:
                    42:f6:ce:a8:04:3c:80:7b:03:99:90:0d:b2:11:10:
                    23:f3:68:27:87:c5:b2:9c:7f:f0:5d:0c:a6:b9:01:
                    a2:ac:60:87:bb:53:07:ee:46:40:f9:4c:b1:83:91:
                    f1:6e:c2:29:c0:d9:33:10:e9:c8:c8:5f:36:cd:6b:
                    86:4d:6f:b8:76:2b:bb:3b:4a:3f:6c:6d:33:a5:59:
                    33:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:72:33:13:89:D3:2C:5F:E3:BF:5F:3F:A4:04:FF:1F:75:72:28:CB
            X509v3 Authority Key Identifier:
                keyid:3F:40:D9:6A:4F:BB:BE:F5:8B:DC:1A:8A:02:AB:0D:89:B2:B1:62:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F40D96A4FBBBEF58BDC1A8A02AB0D89B2B16292.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F1A903545248855FF2185F24A31F1FB9FEB25AFEE3ADB0CB82DC975846E8785/0/323830333a363239303a3a2f33322d3438203d3e203131343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:15:2b:e2:a3:d7:c0:e6:6e:a1:98:de:65:ac:4c:ad:fa:
         52:9c:68:86:2d:2d:8f:52:f6:09:bd:fa:dd:aa:5a:5a:7b:50:
         21:b8:4e:9f:f1:ca:67:fd:26:ea:4c:b0:79:24:6f:66:6c:fb:
         0f:e0:ff:54:ae:c3:11:5a:81:72:fa:e7:ef:75:ee:b1:20:a0:
         e1:91:fa:86:7c:06:56:3e:94:c5:de:c7:43:3b:24:0f:b4:79:
         9e:76:69:16:53:bc:0f:f8:20:c9:b9:2b:50:91:e4:0c:13:3c:
         2d:b3:f5:72:31:88:b6:52:20:68:a0:c9:33:74:f2:0d:99:94:
         20:e8:86:a3:18:12:2d:06:61:7a:1e:06:e2:ae:77:09:bd:6d:
         e0:ee:83:50:d0:ad:f8:4b:2b:b0:6b:cc:74:3f:ca:e3:f7:64:
         7d:a5:25:b9:96:b9:e9:fb:22:92:8e:2b:39:02:f3:37:a1:73:
         44:1d:6a:47:a6:8e:73:9b:d9:c5:14:1c:50:65:d6:98:74:73:
         b9:6e:55:f5:cd:70:a4:dd:1e:66:0c:58:ee:71:6b:c7:6c:04:
         e7:04:13:84:d5:7a:9d:84:44:67:66:22:fe:bf:bc:ed:d3:f9:
         33:73:ac:70:2c:85:be:2d:19:70:58:40:9d:43:77:9d:38:30:
         92:4f:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----