Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/323830333a333663303a3a2f33322d3438203d3e20323634383237.roa
File:                     323830333a333663303a3a2f33322d3438203d3e20323634383237.roa (raw, json)
Hash identifier:          kj4RuPGH9vwJjnaKfisWSZ8mS6rcbzIN/po8DRyac6M=
Subject key identifier:   0B:FF:35:ED:3A:B1:02:6A:1B:0E:6D:19:08:20:54:8B:65:B8:4D:86
Certificate issuer:       /CN=1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA
Certificate serial:       0103D0E7122E85A033346306482C5591BF458171
Authority key identifier: 1B:F2:77:94:00:E0:A8:57:89:A6:D6:0B:10:CC:1B:8D:EC:0E:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/323830333a333663303a3a2f33322d3438203d3e20323634383237.roa
Signing time:             Tue 04 Feb 2025 18:37:00 +0000
ROA not before:           Tue 04 Feb 2025 18:32:00 +0000
ROA not after:            Tue 03 Feb 2026 18:37:00 +0000
asID:                     264827
IP address blocks:        2803:36c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:03:d0:e7:12:2e:85:a0:33:34:63:06:48:2c:55:91:bf:45:81:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA
        Validity
            Not Before: Feb  4 18:32:00 2025 GMT
            Not After : Feb  3 18:37:00 2026 GMT
        Subject: CN=0BFF35ED3AB1026A1B0E6D190820548B65B84D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:57:46:0d:4d:1e:74:9c:f2:43:dd:d0:01:
                    01:ec:7d:6b:31:7c:41:e4:8f:ef:6a:03:98:2f:82:
                    90:3d:c9:3c:02:a7:71:63:06:15:81:b0:68:1a:38:
                    b9:66:8e:17:c3:58:8e:d7:bc:f8:3f:2d:8c:fa:15:
                    c1:c5:28:8d:ea:73:61:eb:46:37:99:1b:a0:eb:00:
                    79:38:0f:39:aa:ac:b8:99:d5:db:cf:6b:cd:8b:15:
                    cb:a7:69:d9:3b:70:88:b9:d8:4d:bc:3d:d3:87:25:
                    8a:d0:c6:41:fc:29:7b:52:1b:78:d6:97:79:4e:e9:
                    65:e3:c3:e7:22:cf:7a:9e:45:51:a5:4d:ea:a5:11:
                    4c:61:a8:b6:e6:e1:ca:8c:a0:ff:48:95:f4:c8:13:
                    2b:2d:c9:9c:87:81:2c:b1:51:35:37:e6:59:8b:c1:
                    a6:d1:24:7f:e1:b4:08:88:61:df:0c:40:5b:cb:28:
                    96:98:9e:61:35:fc:a1:9b:4f:68:07:6f:5f:3a:3b:
                    14:49:a3:f0:35:8e:98:c4:1d:ac:c1:66:04:98:6b:
                    2d:bf:6e:b1:b8:02:43:5c:1f:c8:f1:7f:7d:d0:e6:
                    63:b9:21:0d:12:57:7c:92:0a:a0:90:0a:f5:17:9c:
                    48:e1:34:79:ab:9c:7e:5d:1b:f0:6e:86:88:9a:fe:
                    08:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FF:35:ED:3A:B1:02:6A:1B:0E:6D:19:08:20:54:8B:65:B8:4D:86
            X509v3 Authority Key Identifier:
                keyid:1B:F2:77:94:00:E0:A8:57:89:A6:D6:0B:10:CC:1B:8D:EC:0E:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/323830333a333663303a3a2f33322d3438203d3e20323634383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:36c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:8f:31:b8:22:29:c1:0c:41:30:6d:d4:90:90:79:92:78:
         6e:6a:e9:16:05:ca:c2:76:78:e9:43:32:61:a8:8a:d3:92:41:
         a0:32:62:5d:7f:35:ba:e8:d9:33:ed:e4:08:03:f1:0f:e1:ad:
         d8:fa:87:b6:2c:f2:b1:bc:72:68:db:30:9d:06:1a:f6:19:74:
         c3:22:c3:15:41:71:0d:dc:a7:76:be:3d:e8:ae:de:e1:9d:54:
         7f:ef:d5:9b:66:62:89:ae:40:68:c2:9d:17:e6:e9:3b:27:f7:
         3f:39:90:95:1b:1c:07:7a:9c:7d:a0:cf:9e:69:83:0b:3e:3c:
         0a:46:b0:4c:e9:57:47:8b:22:68:d2:90:a9:e3:27:9a:aa:9d:
         f3:17:67:2c:89:d1:69:27:88:0e:e2:b6:97:68:6c:72:4d:03:
         89:6d:40:8d:6f:6b:ec:6e:c6:0f:c2:87:8c:c8:d0:6f:73:97:
         e3:64:57:8d:df:ea:4f:f9:19:ab:f8:99:9a:b6:b8:e5:66:76:
         11:c1:7d:81:d7:c9:31:84:18:94:50:d1:04:69:ba:02:e6:81:
         17:da:96:f0:97:a2:92:6f:06:30:53:ae:91:b8:ac:2d:c5:61:
         61:89:73:c4:83:6e:6a:0e:71:27:e1:6b:d5:28:24:fd:68:33:
         7f:49:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----