Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45C5DC090C2236E3EDB87548387E8373759B1FAF3825874CC5B50CE1FC9FC666/0/323830333a646665303a3a2f33322d3332203d3e20323731373838.roa
File:                     323830333a646665303a3a2f33322d3332203d3e20323731373838.roa (raw, json)
Hash identifier:          0WjWf2a8tjN8Ile8RVzDT0ERfORgAeZZCb2jBb5Qu+8=
Subject key identifier:   16:02:A3:80:78:08:72:FD:68:EA:F6:1D:C9:BE:6C:FF:F5:6D:D5:5E
Certificate issuer:       /CN=5F40B9CED062636E3A0E33A28926696C25163A04
Certificate serial:       408B1C028E1251E0776BB1AFE60B80E229D88742
Authority key identifier: 5F:40:B9:CE:D0:62:63:6E:3A:0E:33:A2:89:26:69:6C:25:16:3A:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F40B9CED062636E3A0E33A28926696C25163A04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45C5DC090C2236E3EDB87548387E8373759B1FAF3825874CC5B50CE1FC9FC666/0/323830333a646665303a3a2f33322d3332203d3e20323731373838.roa
Signing time:             Tue 04 Feb 2025 18:00:25 +0000
ROA not before:           Tue 04 Feb 2025 17:55:25 +0000
ROA not after:            Tue 03 Feb 2026 18:00:25 +0000
asID:                     271788
IP address blocks:        2803:dfe0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8b:1c:02:8e:12:51:e0:77:6b:b1:af:e6:0b:80:e2:29:d8:87:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F40B9CED062636E3A0E33A28926696C25163A04
        Validity
            Not Before: Feb  4 17:55:25 2025 GMT
            Not After : Feb  3 18:00:25 2026 GMT
        Subject: CN=1602A380780872FD68EAF61DC9BE6CFFF56DD55E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:5f:1e:d3:3a:4f:f8:03:6c:66:c4:94:40:
                    67:e9:85:7e:50:fd:32:d2:d7:0b:2b:63:b4:3c:5b:
                    10:21:a3:55:85:e2:5b:76:8d:ce:1f:f7:a8:7f:22:
                    98:4d:e6:75:76:c0:5c:07:16:51:8a:38:e4:67:d2:
                    ba:1f:5e:74:d4:e1:62:23:3f:4f:f1:22:f2:4f:e0:
                    e6:23:09:50:f2:9f:87:27:34:9b:79:90:1c:96:a7:
                    58:7e:2b:92:aa:3d:6a:aa:a1:6e:16:06:28:2b:8a:
                    6a:f6:8e:78:fc:6e:92:47:8b:75:e5:3e:c8:84:f9:
                    62:d2:de:6d:bc:5e:d4:fe:2b:66:3d:33:f1:f2:ae:
                    42:77:7e:4e:56:9b:36:ad:2b:2e:46:a6:d1:c8:f3:
                    41:a9:40:b5:12:73:7e:9a:b8:a8:2b:78:89:d1:06:
                    6f:d9:11:dd:61:e6:e4:39:dd:73:f8:46:89:b7:13:
                    b6:1f:85:c4:27:0a:d8:0c:b9:13:97:1f:ea:ad:ec:
                    67:c4:10:00:48:c5:7c:c5:91:38:d8:0b:7e:d2:c0:
                    86:db:24:09:98:f3:61:a9:45:aa:a3:35:99:c9:db:
                    c9:7e:21:d8:4c:72:2e:4f:36:05:7f:2f:e7:5a:87:
                    16:6a:e1:e3:e8:63:9f:e7:eb:79:c2:37:c5:c1:d7:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:02:A3:80:78:08:72:FD:68:EA:F6:1D:C9:BE:6C:FF:F5:6D:D5:5E
            X509v3 Authority Key Identifier:
                keyid:5F:40:B9:CE:D0:62:63:6E:3A:0E:33:A2:89:26:69:6C:25:16:3A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45C5DC090C2236E3EDB87548387E8373759B1FAF3825874CC5B50CE1FC9FC666/0/5F40B9CED062636E3A0E33A28926696C25163A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F40B9CED062636E3A0E33A28926696C25163A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45C5DC090C2236E3EDB87548387E8373759B1FAF3825874CC5B50CE1FC9FC666/0/323830333a646665303a3a2f33322d3332203d3e20323731373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dfe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:d6:a3:46:3d:c0:64:6b:ef:a6:cb:b4:19:5b:55:62:9a:d3:
         b8:b3:3c:0a:74:09:dc:30:8f:76:68:dd:72:7d:4f:35:3d:14:
         09:97:d5:b0:c5:7f:c3:76:b8:15:ab:2a:7d:48:d9:10:75:a8:
         a0:31:40:06:ff:fe:b0:57:dd:27:9c:d8:58:4a:25:85:55:00:
         2b:f8:cc:41:21:7c:a8:04:a1:44:9a:7a:8e:66:3a:f3:e3:91:
         d3:4c:46:8a:66:02:7d:2c:d6:0e:de:20:ba:c4:8a:96:b4:c0:
         77:c8:37:16:09:42:42:31:ef:71:b2:f5:2d:4b:1b:b3:95:6c:
         6c:ed:3a:6a:66:16:9f:5e:75:95:6f:0e:40:9d:aa:6d:ea:60:
         ed:5d:9b:49:2e:74:48:7f:9a:b6:f7:de:bc:eb:4d:48:60:da:
         ef:a5:1b:4c:ea:42:8a:ba:36:71:f7:f5:6f:17:04:74:2e:dc:
         a6:a7:4e:87:af:c1:bb:73:74:79:77:6f:81:ad:46:97:78:01:
         a1:68:79:eb:78:65:b4:11:f4:ef:c8:8f:56:33:da:57:3b:b5:
         25:a6:17:c3:ef:22:fb:0b:43:0a:af:8e:0f:8c:0b:fa:8c:bf:
         5a:3d:49:d1:7d:e7:18:34:01:e2:56:d7:f8:34:14:09:e2:7b:
         ee:7c:84:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:09:02 2025 by rpki-client