Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a6130303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a6130303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          4g8fyxH5DP1Ar9oJrnDEgVu3AurwCKiGdhwGOgne8EI=
Subject key identifier:   D2:C4:3D:C2:25:71:38:14:9B:2E:FE:8A:6E:6F:5B:B6:A1:55:F4:95
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       36F0A69BCA1535E805F7FC37DEA56BE99B508F64
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a6130303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 04 Feb 2025 20:01:12 +0000
ROA not before:           Tue 04 Feb 2025 19:56:12 +0000
ROA not after:            Tue 03 Feb 2026 20:01:12 +0000
asID:                     266894
IP address blocks:        2803:56a0:a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f0:a6:9b:ca:15:35:e8:05:f7:fc:37:de:a5:6b:e9:9b:50:8f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Feb  4 19:56:12 2025 GMT
            Not After : Feb  3 20:01:12 2026 GMT
        Subject: CN=D2C43DC2257138149B2EFE8A6E6F5BB6A155F495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:95:f3:c9:5e:9d:2b:a0:88:11:96:a3:ef:
                    44:17:20:f7:46:5f:f1:65:fb:60:39:e8:97:4b:6f:
                    f4:ba:86:17:e9:ca:dc:51:8f:65:71:71:19:87:4c:
                    e5:35:f7:1b:1d:8e:ce:14:8c:ad:d2:74:ec:2a:d3:
                    f2:00:24:75:15:0f:2e:2e:4f:29:9f:9f:45:89:f1:
                    d9:ac:02:dd:ca:e1:43:07:2f:e5:6b:a6:e1:dc:11:
                    9b:ed:90:99:6b:f3:aa:bc:5c:a3:bc:51:d5:27:c3:
                    f4:89:d7:92:d2:52:e5:27:73:6b:4a:15:18:24:de:
                    b1:b1:82:b0:a8:92:58:31:26:bc:ca:56:74:92:79:
                    61:10:9d:07:7d:4b:1c:0f:53:77:4c:5f:04:5d:06:
                    14:09:3b:90:f9:ec:b9:1c:99:f8:45:36:d8:6c:2d:
                    17:fb:f3:8a:b4:26:60:ab:bf:2b:e8:4f:77:fb:3b:
                    72:ab:49:4b:17:9a:9c:d3:f0:d5:c3:b2:6e:b7:d0:
                    c7:31:51:8a:e0:66:99:7e:1e:40:95:c6:d9:fa:ea:
                    cd:b4:b1:45:de:3a:f1:77:5a:36:c5:b5:1e:10:92:
                    e5:c8:04:ad:e5:8f:fc:55:7a:1a:de:9a:ea:ec:6e:
                    00:92:e2:c9:45:49:22:63:61:2f:f5:e8:29:c1:f6:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C4:3D:C2:25:71:38:14:9B:2E:FE:8A:6E:6F:5B:B6:A1:55:F4:95
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a6130303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:85:c2:c6:ae:69:0c:32:9c:7d:af:fc:50:71:f5:f3:bf:23:
         87:2a:c4:46:19:8f:e0:b6:00:8f:01:24:b5:51:56:7a:af:db:
         9d:d2:91:de:48:41:d7:e5:b5:ab:87:84:46:77:88:6b:b6:82:
         01:1a:eb:83:bf:02:c2:a2:35:86:33:ac:01:c3:3f:d6:ea:3b:
         97:bd:3c:c6:dd:d4:85:f9:7a:54:5a:d3:b8:4d:79:3f:e2:65:
         9f:57:a7:0b:49:34:47:0b:37:0b:68:f8:d8:98:06:4a:1c:f1:
         3d:10:0d:cf:5d:77:3c:ee:e3:54:8b:06:23:34:54:a4:cf:7a:
         d7:a9:5c:6d:0a:77:a9:3b:55:b6:84:83:e6:5f:2a:39:eb:64:
         f0:e7:e0:f8:59:10:80:3e:0e:71:af:7f:5e:c7:f1:fe:a2:63:
         29:b5:9e:67:f6:3b:12:31:be:16:27:da:b7:e8:3b:38:0e:7a:
         b0:70:87:48:a1:fe:20:76:a4:87:e7:0b:46:d8:4f:b3:db:13:
         fb:f2:d5:4a:0d:a9:a0:44:50:6f:47:9c:76:fa:47:8e:9f:4b:
         ec:bf:d5:cb:49:4e:fc:f7:5c:a6:ab:f4:4d:e3:1f:e1:83:03:
         ca:62:ce:2e:b7:ef:a7:97:b6:18:31:0e:aa:57:2b:5d:78:c8:
         f5:41:69:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----