Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a363030303a3a2f33362d3438203d3e20323733313432.roa
File:                     323830333a326335303a363030303a3a2f33362d3438203d3e20323733313432.roa (raw, json)
Hash identifier:          22Rpvu2t74KTrNBETx4IdqvqOHzjMmkMuHzGJQXbd/k=
Subject key identifier:   87:D5:C7:29:22:64:3D:57:F5:4F:2D:56:4F:D5:94:C8:00:45:37:70
Certificate issuer:       /CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
Certificate serial:       105AC1F11D680A68F541183D55508F6313881C10
Authority key identifier: 41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a363030303a3a2f33362d3438203d3e20323733313432.roa
Signing time:             Fri 21 Mar 2025 13:12:44 +0000
ROA not before:           Fri 21 Mar 2025 13:07:44 +0000
ROA not after:            Fri 20 Mar 2026 13:12:44 +0000
asID:                     273142
IP address blocks:        2803:2c50:6000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5a:c1:f1:1d:68:0a:68:f5:41:18:3d:55:50:8f:63:13:88:1c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41B8103DCE88DDDEADBAC30879C4A785F1517EE2
        Validity
            Not Before: Mar 21 13:07:44 2025 GMT
            Not After : Mar 20 13:12:44 2026 GMT
        Subject: CN=87D5C72922643D57F54F2D564FD594C800453770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:74:94:f3:61:96:2b:ae:04:40:bd:8a:a7:
                    fe:98:81:c9:3d:47:71:3e:01:a3:18:c3:3e:bf:dd:
                    b0:fd:9f:1e:0a:de:52:ae:3a:b6:14:7e:ea:91:5c:
                    22:62:19:b7:a3:bd:40:8e:f7:ff:ea:52:5f:23:41:
                    4c:92:78:35:3c:ec:1c:88:d6:35:70:3c:56:f4:67:
                    75:07:2f:d2:85:7a:ad:3b:b9:3a:05:b2:a0:49:b2:
                    5b:bb:9a:2c:57:8b:55:08:9f:2a:61:fa:10:0f:15:
                    c2:0a:4f:15:b5:a1:41:80:ce:93:ee:c7:db:86:39:
                    1e:b5:9e:14:ff:41:fb:ec:67:9d:d7:97:41:61:ae:
                    f0:3b:28:1b:18:f4:cc:d7:da:35:d8:27:fb:d2:db:
                    05:5e:b0:00:50:9f:ca:79:c6:b3:a9:45:bb:8c:f9:
                    91:22:77:1d:50:c7:b7:1d:1b:f5:64:01:8f:75:8d:
                    9a:a8:a9:7c:41:69:66:e4:eb:70:40:71:8e:62:b8:
                    09:8c:55:a9:7d:20:37:02:7f:09:46:29:78:59:94:
                    f9:28:06:15:48:56:d7:8f:d1:2e:95:6d:20:5a:04:
                    b1:82:07:62:dc:57:ac:2b:d9:b6:1d:c1:c9:61:da:
                    83:1c:f0:be:ae:f4:ad:6c:cc:ac:c6:f8:e5:8b:48:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D5:C7:29:22:64:3D:57:F5:4F:2D:56:4F:D5:94:C8:00:45:37:70
            X509v3 Authority Key Identifier:
                keyid:41:B8:10:3D:CE:88:DD:DE:AD:BA:C3:08:79:C4:A7:85:F1:51:7E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41B8103DCE88DDDEADBAC30879C4A785F1517EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5178255AB399D1DA538AD2E09B31292FFBBF4DA76656D398ECBBEE0FCBEF09DE/0/323830333a326335303a363030303a3a2f33362d3438203d3e20323733313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:c8:7b:5b:d4:f7:bc:f9:8a:5e:be:f2:d3:eb:70:a9:ff:49:
         0c:c4:40:1e:11:e7:74:1d:b7:d0:79:eb:6b:f2:16:86:42:15:
         8f:aa:63:35:fe:68:fe:b5:f2:82:21:98:8a:d3:f5:e8:16:ee:
         d2:38:4a:f7:09:89:48:50:e6:1e:a0:41:f4:bc:5b:68:3f:72:
         e5:5d:eb:17:59:4e:05:b8:cf:96:7d:1e:66:95:3d:3b:19:2e:
         03:c9:a9:b8:1b:b3:2e:6a:6d:c8:92:4c:7a:14:ac:e7:7c:09:
         0c:08:a1:14:86:7e:69:ac:78:9a:d7:24:bd:a3:fa:a4:ab:be:
         cf:c6:49:62:30:8f:87:c8:fc:ff:94:90:2d:e5:c9:75:71:56:
         4d:bb:20:9f:9d:06:34:05:59:57:d8:10:5b:c0:f3:2f:73:af:
         14:6a:2f:0b:2c:cf:8a:f2:dc:7d:0c:09:0e:93:eb:55:cc:48:
         73:05:8c:00:6b:5a:d7:64:3b:7d:96:94:c9:81:9f:28:07:7f:
         75:f4:44:1a:bc:96:e5:ff:e5:e4:d1:b2:fa:f7:c4:30:98:e2:
         8b:1d:9c:3a:35:93:29:81:6e:69:dd:a4:20:b0:11:68:6d:e1:
         70:f9:e2:86:95:c3:69:e6:a3:cc:63:84:ea:a0:6c:4a:0f:f3:
         e1:d1:dc:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:00 2025 by rpki-client