Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/323830333a653036303a3a2f33322d3332203d3e20323632313931.roa
File:                     323830333a653036303a3a2f33322d3332203d3e20323632313931.roa (raw, json)
Hash identifier:          EWub1SRff2IJH3KVefIE4z3IZH5UpnMFkvS4QpcUCyg=
Subject key identifier:   27:FF:E0:99:85:2B:15:34:40:4D:8A:7B:60:B9:8A:E6:1D:7E:A8:D7
Certificate issuer:       /CN=B3AA883DF802251B99A42D7F578AD8768A729025
Certificate serial:       74C750A86D3E020F30BE0B135479E328B99703E5
Authority key identifier: B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/323830333a653036303a3a2f33322d3332203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 18:52:33 +0000
ROA not before:           Tue 04 Feb 2025 18:47:33 +0000
ROA not after:            Tue 03 Feb 2026 18:52:33 +0000
asID:                     262191
IP address blocks:        2803:e060::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c7:50:a8:6d:3e:02:0f:30:be:0b:13:54:79:e3:28:b9:97:03:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AA883DF802251B99A42D7F578AD8768A729025
        Validity
            Not Before: Feb  4 18:47:33 2025 GMT
            Not After : Feb  3 18:52:33 2026 GMT
        Subject: CN=27FFE099852B1534404D8A7B60B98AE61D7EA8D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:08:df:2c:d1:f5:b0:6f:bf:c9:11:0d:e3:
                    8d:e5:55:d7:5d:26:1c:36:8f:f7:c9:fb:55:a6:9d:
                    45:d4:83:a1:42:56:5e:c7:7f:a5:af:5a:b7:ce:60:
                    66:de:a7:de:4a:72:dc:42:0e:f2:ac:72:45:80:8c:
                    7d:c5:5e:af:60:a6:00:94:08:3c:c4:c0:1c:4e:e2:
                    19:84:3f:cb:52:73:5c:64:f2:7b:11:55:ba:7c:89:
                    98:31:1a:d9:0b:2d:9f:80:b8:ed:ca:9d:b5:a3:6b:
                    da:6d:de:23:1f:ef:c7:68:ad:f7:92:9b:1d:3f:e1:
                    d8:ec:b6:ac:1d:9c:20:37:f6:74:57:27:14:00:cb:
                    26:14:5b:8e:d9:1a:33:f9:26:9f:1e:1d:37:0f:76:
                    9c:d8:a9:5f:fb:67:8a:3f:7d:44:d3:33:43:4d:81:
                    ab:0b:37:06:f8:3f:8d:f9:24:21:7c:48:7a:f7:f9:
                    4b:af:6f:c2:a2:77:3c:68:36:78:08:05:5d:54:61:
                    f6:5b:aa:19:78:74:3a:47:b6:fc:54:c4:f0:23:44:
                    24:f2:76:15:43:f1:af:d1:a9:b9:05:34:b7:68:b5:
                    38:92:cd:0c:b8:55:e1:80:e8:6e:d3:ed:3a:e4:39:
                    15:4d:20:47:5f:e4:4b:6e:0b:1b:08:a1:14:bd:78:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FF:E0:99:85:2B:15:34:40:4D:8A:7B:60:B9:8A:E6:1D:7E:A8:D7
            X509v3 Authority Key Identifier:
                keyid:B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/323830333a653036303a3a2f33322d3332203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e060::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:00:61:95:5d:eb:7e:84:26:1f:aa:05:73:8d:54:b4:4d:f4:
         44:e5:9a:14:bf:a2:02:37:00:69:a8:94:11:3b:e5:ee:e5:65:
         f9:a0:76:5c:f9:2a:02:d8:54:c4:bb:17:07:4b:72:bb:2e:c4:
         a0:cb:7d:d5:3d:73:47:81:88:d6:0c:55:c4:f2:e0:a6:a9:8e:
         93:69:eb:58:a0:cb:c4:94:5e:91:f0:77:3b:d5:b0:9e:08:5f:
         c3:f7:db:31:51:02:67:a3:a1:6a:a4:0c:1f:6c:b0:07:eb:4d:
         3e:c7:5c:3a:61:46:a5:21:15:3f:0c:f2:45:78:32:4e:15:61:
         1f:25:7a:c4:26:0e:32:fd:fb:45:92:83:8c:be:e3:8d:12:58:
         fd:fe:27:31:5f:c8:b5:47:17:be:76:a0:9e:ed:b5:ff:ef:2a:
         6a:6c:ab:7d:6f:38:f9:a8:ee:40:a7:03:c0:d7:9c:1c:47:fc:
         5c:d0:cb:51:d7:1d:b4:dc:63:67:51:06:95:f8:56:68:fb:db:
         dc:74:92:0c:ae:28:52:0f:e1:8f:8c:71:fd:55:06:9c:e8:b5:
         63:92:58:e7:1d:4f:94:d9:7c:08:d0:83:34:fb:c6:46:09:75:
         28:fd:5f:66:88:cd:0e:8c:09:b3:40:a9:a0:07:c9:3f:23:9f:
         a6:28:bd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:36 2025 by rpki-client