Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a313a3a2f34382d3438203d3e20323731393432.roa
File:                     323830333a323631303a313a3a2f34382d3438203d3e20323731393432.roa (raw, json)
Hash identifier:          Hd6/k+KCxdjoqoC1aEBH+LnoRESqlotd8XfuGP3jQWo=
Subject key identifier:   E5:6D:6E:7C:CF:B1:04:88:A8:DD:39:19:C7:57:7C:82:8E:C8:C1:18
Certificate issuer:       /CN=B6403C53F9B05EDE5B902522724143F306D488E7
Certificate serial:       1191C6502E12AE6816EE70E16ED925D97354FB4A
Authority key identifier: B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a313a3a2f34382d3438203d3e20323731393432.roa
Signing time:             Tue 04 Feb 2025 18:28:21 +0000
ROA not before:           Tue 04 Feb 2025 18:23:21 +0000
ROA not after:            Tue 03 Feb 2026 18:28:21 +0000
asID:                     271942
IP address blocks:        2803:2610:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:91:c6:50:2e:12:ae:68:16:ee:70:e1:6e:d9:25:d9:73:54:fb:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6403C53F9B05EDE5B902522724143F306D488E7
        Validity
            Not Before: Feb  4 18:23:21 2025 GMT
            Not After : Feb  3 18:28:21 2026 GMT
        Subject: CN=E56D6E7CCFB10488A8DD3919C7577C828EC8C118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:ed:44:bb:fc:d8:ad:13:96:0b:82:82:48:
                    3e:7f:48:31:9c:c5:cf:1e:1c:a7:cc:7f:04:43:d8:
                    29:54:e6:81:9d:d6:0e:5e:93:34:e9:18:a7:68:8e:
                    22:51:4f:c4:ce:d2:47:2b:95:89:3f:63:09:84:f1:
                    0e:67:09:ae:31:9d:9f:29:af:31:3e:26:d3:30:16:
                    ad:e3:7c:80:a7:97:aa:e7:74:a8:ac:9a:00:86:da:
                    aa:81:0f:2a:28:d5:41:6b:04:52:7c:54:b4:2b:73:
                    0a:0d:c3:ef:01:d6:db:d6:57:68:ba:bc:92:80:e5:
                    5f:0e:b6:a9:a9:cb:cd:c9:5f:60:44:21:39:9d:e4:
                    cf:d7:6d:50:ae:77:c2:92:8e:65:db:4b:5f:39:cb:
                    5d:86:2e:66:2b:4c:64:4f:26:53:cb:fc:f7:e8:66:
                    a8:d0:f2:62:47:32:c6:7e:8b:f3:66:e9:72:3b:0e:
                    01:b5:72:c6:30:69:8b:a3:76:a1:dd:b8:44:e6:44:
                    fc:54:cf:3c:89:5b:ca:5d:73:c9:f7:30:7a:56:1c:
                    bf:e6:03:04:ef:6d:67:38:4b:55:9b:5e:b1:a6:04:
                    36:7a:e8:e8:71:4d:13:a1:30:01:64:c6:47:e1:8c:
                    8e:32:4b:45:4d:66:3e:46:0a:80:d8:17:d0:70:8e:
                    de:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:6E:7C:CF:B1:04:88:A8:DD:39:19:C7:57:7C:82:8E:C8:C1:18
            X509v3 Authority Key Identifier:
                keyid:B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a313a3a2f34382d3438203d3e20323731393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2610:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:9e:ff:73:0d:69:9f:01:8c:46:6f:5f:1c:02:7c:12:4c:a0:
         bc:90:5e:3c:93:3b:62:e8:7b:44:0e:6f:25:ff:21:e4:41:ac:
         64:99:cf:08:5c:88:ce:57:83:71:5f:d1:7f:78:de:ba:8b:61:
         46:29:6f:0a:3d:50:8d:a7:ae:51:93:ba:ce:76:d9:c9:40:2f:
         29:9d:f1:8f:06:6c:c3:d7:5b:4b:45:76:10:c0:e9:13:b4:1f:
         10:c8:d8:c5:9f:6b:28:7c:e1:b0:fb:a9:37:30:c0:fe:f3:83:
         bc:62:11:1d:6f:85:58:da:cf:66:67:88:c4:b5:35:e5:27:45:
         51:3d:71:d8:9e:22:23:64:7c:0a:7d:6c:fe:23:7f:e3:34:13:
         40:08:e6:b2:55:ba:cb:96:bd:c9:31:08:13:b9:0c:dc:f2:45:
         94:b5:34:94:a3:53:c8:53:ae:9d:30:19:aa:67:da:37:61:d9:
         24:a2:a3:72:24:64:d6:7f:17:39:9e:d8:d0:d6:0b:41:ef:c8:
         18:d2:5b:17:f4:75:c5:82:2e:bf:58:bc:be:62:5c:87:16:29:
         a9:43:38:0d:4c:9c:7e:1a:23:1f:03:6e:ee:f2:c5:2b:87:3f:
         32:7e:de:14:a3:3c:c5:a0:b3:79:a3:14:fb:3f:91:65:c4:bb:
         ea:28:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:18 2025 by rpki-client