Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a373a3a2f34382d3438203d3e20323732303832.roa
File:                     323830333a396231303a373a3a2f34382d3438203d3e20323732303832.roa (raw, json)
Hash identifier:          IpgXtV+pdOdtj2q1dSBfajvoXOnaGtSFBULHzv5NxdA=
Subject key identifier:   C0:DA:A4:38:0E:35:41:F1:4F:3C:DB:E9:CA:DE:7B:92:CB:93:9B:2F
Certificate issuer:       /CN=2C415A98264D3E5779D52AFE687F01FA75663605
Certificate serial:       1AF48B458AADFB50838075D523BDCAEF73781A06
Authority key identifier: 2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a373a3a2f34382d3438203d3e20323732303832.roa
Signing time:             Tue 04 Feb 2025 18:44:04 +0000
ROA not before:           Tue 04 Feb 2025 18:39:04 +0000
ROA not after:            Tue 03 Feb 2026 18:44:04 +0000
asID:                     272082
IP address blocks:        2803:9b10:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f4:8b:45:8a:ad:fb:50:83:80:75:d5:23:bd:ca:ef:73:78:1a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C415A98264D3E5779D52AFE687F01FA75663605
        Validity
            Not Before: Feb  4 18:39:04 2025 GMT
            Not After : Feb  3 18:44:04 2026 GMT
        Subject: CN=C0DAA4380E3541F14F3CDBE9CADE7B92CB939B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:ee:b0:e0:35:ed:c0:1c:2d:2b:a7:b9:8e:
                    3e:e5:58:3c:f2:4e:06:cb:8b:84:98:d2:64:de:a6:
                    dd:62:3e:49:4f:12:aa:94:6e:78:3a:a2:f3:bb:88:
                    7c:08:fa:35:59:0d:59:eb:ed:de:f9:c4:73:b3:f0:
                    ac:bd:d4:d8:9c:d1:1f:8a:a5:74:43:27:39:74:21:
                    9f:be:fa:48:8d:c9:3b:5c:e9:ab:ef:18:e9:d7:67:
                    dc:3d:d9:2c:e1:47:49:6f:78:08:63:10:34:1e:fa:
                    d7:e0:4b:3d:33:d9:b0:29:89:4a:0b:9f:34:9c:7a:
                    a2:30:8b:ac:d8:43:90:82:ec:c6:ed:93:23:e1:4f:
                    6e:4d:bf:ab:ea:dc:ff:cb:92:28:46:b6:93:c7:a8:
                    21:8b:77:1b:fc:0c:54:a6:9c:96:a0:11:3b:da:29:
                    40:e6:b6:81:e1:55:10:7f:78:70:39:c8:0a:07:0e:
                    b2:06:89:4f:dc:95:bc:12:05:b0:c6:27:ab:96:2e:
                    24:9e:46:07:aa:92:31:fe:a2:bc:d9:51:44:c6:eb:
                    a2:42:76:18:d3:31:6b:a9:f4:2f:fa:fa:d0:03:5d:
                    d0:c4:9e:9b:c6:39:58:1d:42:2e:1a:fc:22:66:9d:
                    bb:3b:ce:99:9e:54:df:84:67:b4:6f:12:94:40:84:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DA:A4:38:0E:35:41:F1:4F:3C:DB:E9:CA:DE:7B:92:CB:93:9B:2F
            X509v3 Authority Key Identifier:
                keyid:2C:41:5A:98:26:4D:3E:57:79:D5:2A:FE:68:7F:01:FA:75:66:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/2C415A98264D3E5779D52AFE687F01FA75663605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C415A98264D3E5779D52AFE687F01FA75663605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5278F37F1642B64D1FD578A67CF9C30558AFFBFD91E92CA601F8DEA9CF4D183F/0/323830333a396231303a373a3a2f34382d3438203d3e20323732303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b10:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:bb:ce:ff:ac:90:02:18:21:23:25:57:97:9a:2b:47:01:eb:
         47:6f:4d:ea:b4:59:d8:cc:ff:a0:ca:32:7b:90:8f:1e:85:8c:
         a8:1e:25:a6:95:c7:ec:5a:cd:26:ff:23:6a:24:47:fe:5c:92:
         61:c1:56:2f:c6:63:56:fd:f7:a0:e4:28:73:1a:73:24:22:c6:
         ff:6f:40:6d:71:0b:dd:22:dc:06:97:1c:f1:21:7d:4f:ac:72:
         a8:e1:4d:67:bc:40:11:96:a5:7d:48:27:27:e4:d1:c4:c2:5c:
         ea:1d:c2:5b:66:da:24:89:94:6d:24:56:52:98:29:b7:46:2a:
         5b:61:d6:1a:99:e9:13:a4:85:44:e0:75:bc:30:6d:1a:2b:ba:
         1e:ed:98:c8:b3:e2:fe:ca:3e:3c:9d:bb:8e:4a:4b:74:40:0b:
         c6:fb:74:12:92:fa:7f:e7:b1:85:e4:cc:71:6e:c6:0d:41:47:
         77:47:3b:f3:e8:e8:15:a7:50:fc:34:a2:0b:42:54:cc:f4:18:
         2b:b5:89:d1:93:92:e4:41:96:d1:3a:42:7b:33:01:a6:4b:43:
         f1:cb:3f:54:c1:cc:2a:d9:4b:d9:7d:75:a0:ab:ce:82:cd:07:
         f4:b6:20:d9:1a:7e:7f:07:82:17:96:00:2c:d7:8a:f0:28:55:
         b6:79:91:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:56 2025 by rpki-client