Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/323830333a343163303a3a2f33322d313236203d3e20323635363738.roa
File:                     323830333a343163303a3a2f33322d313236203d3e20323635363738.roa (raw, json)
Hash identifier:          mZkM+wCeZZ/cWB1epA2pKVifONvUQqkeVpJvKU35H1Y=
Subject key identifier:   02:0B:8D:4A:B9:AB:27:EF:A3:7B:FE:DB:E8:BF:DA:24:C1:24:3B:EF
Certificate issuer:       /CN=85A05B4BE012BF18A1139686B06217D2F16BE873
Certificate serial:       2526D74A1D18CE22B36E36B16D9B6F4F92C9DEB3
Authority key identifier: 85:A0:5B:4B:E0:12:BF:18:A1:13:96:86:B0:62:17:D2:F1:6B:E8:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/323830333a343163303a3a2f33322d313236203d3e20323635363738.roa
Signing time:             Tue 04 Feb 2025 20:06:25 +0000
ROA not before:           Tue 04 Feb 2025 20:01:25 +0000
ROA not after:            Tue 03 Feb 2026 20:06:25 +0000
asID:                     265678
IP address blocks:        2803:41c0::/32 maxlen: 126
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:26:d7:4a:1d:18:ce:22:b3:6e:36:b1:6d:9b:6f:4f:92:c9:de:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A05B4BE012BF18A1139686B06217D2F16BE873
        Validity
            Not Before: Feb  4 20:01:25 2025 GMT
            Not After : Feb  3 20:06:25 2026 GMT
        Subject: CN=020B8D4AB9AB27EFA37BFEDBE8BFDA24C1243BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:c9:44:3d:1f:f7:dc:64:40:1b:3f:f7:07:
                    f2:76:b2:1f:3d:f5:b3:35:21:8c:97:2e:cc:7d:bd:
                    cc:f5:82:38:41:18:1b:9d:36:eb:7f:98:73:25:71:
                    f2:3d:26:56:32:d3:f3:2e:d9:ce:fc:21:27:c1:53:
                    4a:18:4f:8c:64:29:e6:f0:44:3e:84:d4:8d:33:4a:
                    f8:fb:e4:82:b9:0b:4e:a5:33:7d:13:09:6a:70:4c:
                    5f:f7:75:7d:25:d6:9a:bb:3a:77:b0:66:61:8f:de:
                    f4:d8:34:67:0e:48:58:74:37:0b:cd:d9:b5:9e:f6:
                    30:84:be:46:ee:60:66:c2:7a:99:27:35:8d:0c:48:
                    84:fd:dd:65:4b:36:8c:91:19:7f:bd:6d:a4:63:6d:
                    95:7b:84:3a:09:75:fd:25:f9:40:d8:97:5f:0a:ad:
                    62:4f:29:28:a5:92:ca:ab:54:89:4d:6f:e2:3e:7e:
                    81:ce:59:38:c4:43:ab:67:cb:3b:84:93:bd:dc:d2:
                    39:49:83:e7:83:d6:c4:01:11:1d:1d:3e:c4:c9:93:
                    ba:36:00:ca:fd:77:1e:53:e1:39:c9:91:54:cc:e2:
                    f3:c2:ca:03:90:69:86:4f:1a:3b:64:d5:2d:93:01:
                    d0:44:cc:2d:be:d5:a0:c9:31:0a:9a:69:90:c8:c5:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0B:8D:4A:B9:AB:27:EF:A3:7B:FE:DB:E8:BF:DA:24:C1:24:3B:EF
            X509v3 Authority Key Identifier:
                keyid:85:A0:5B:4B:E0:12:BF:18:A1:13:96:86:B0:62:17:D2:F1:6B:E8:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/323830333a343163303a3a2f33322d313236203d3e20323635363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:41c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:63:31:4d:d6:4d:48:ad:c1:0b:7f:6a:d8:29:79:b2:fb:e4:
         67:ab:de:6d:c2:14:4a:c6:6b:8b:b2:88:24:98:86:c4:7b:f5:
         63:ae:df:c8:40:0a:dd:3f:e8:1d:88:b6:eb:0f:05:82:9f:91:
         40:4d:dd:a6:8a:63:a4:e0:30:74:c6:0f:69:1a:bd:95:55:c0:
         9b:83:9f:12:2f:15:b7:42:d8:9b:17:4e:eb:85:34:d8:31:cd:
         92:80:7f:9c:8f:0b:cf:e3:84:ce:54:40:8f:5c:ff:0f:27:ff:
         f8:9a:23:f7:0a:98:65:6c:df:42:e9:13:3e:44:83:1f:99:94:
         fa:66:23:f1:3a:45:2a:d6:a6:5c:b6:1b:01:6a:0c:13:80:65:
         9d:a1:66:c0:b5:e9:c9:c5:97:3b:7b:b4:06:6f:20:94:3d:a2:
         9f:8c:68:91:4c:da:16:02:76:9f:5a:90:8a:e1:43:db:65:9d:
         71:ad:cf:f4:f8:d7:a6:84:92:ac:ec:c1:f8:bb:09:e6:b1:60:
         47:7c:62:0c:22:69:86:8e:fd:d5:ce:4f:99:3e:92:25:23:3e:
         c9:ae:94:9d:bf:46:58:04:75:4f:cf:2b:b7:b4:a3:a0:14:33:
         9d:47:2a:d8:91:a4:51:27:d5:3b:07:5f:89:ca:e6:66:bf:db:
         e6:6e:71:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:15 2025 by rpki-client