Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583982C23C50B781FFD016C5F0FFA5E69BA224BB4D3FB378DC12A6AA13A4FA70/0/323830333a333639303a3a2f33322d3438203d3e20323732393033.roa
File:                     323830333a333639303a3a2f33322d3438203d3e20323732393033.roa (raw, json)
Hash identifier:          wKk7H1r1My12xaO72ZLtM6TWDyElvmwbp6wKZLoVVG0=
Subject key identifier:   64:C8:60:70:6B:D8:56:C2:F1:E1:DC:95:48:B7:84:84:0E:EE:FE:02
Certificate issuer:       /CN=0B83E4D5D29270E88E2270FE148340CE15D5431E
Certificate serial:       349069CB7BA7E131E3ABE641E9E20469E59A66FE
Authority key identifier: 0B:83:E4:D5:D2:92:70:E8:8E:22:70:FE:14:83:40:CE:15:D5:43:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B83E4D5D29270E88E2270FE148340CE15D5431E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/583982C23C50B781FFD016C5F0FFA5E69BA224BB4D3FB378DC12A6AA13A4FA70/0/323830333a333639303a3a2f33322d3438203d3e20323732393033.roa
Signing time:             Tue 04 Feb 2025 18:16:12 +0000
ROA not before:           Tue 04 Feb 2025 18:11:12 +0000
ROA not after:            Tue 03 Feb 2026 18:16:12 +0000
asID:                     272903
IP address blocks:        2803:3690::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:90:69:cb:7b:a7:e1:31:e3:ab:e6:41:e9:e2:04:69:e5:9a:66:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B83E4D5D29270E88E2270FE148340CE15D5431E
        Validity
            Not Before: Feb  4 18:11:12 2025 GMT
            Not After : Feb  3 18:16:12 2026 GMT
        Subject: CN=64C860706BD856C2F1E1DC9548B784840EEEFE02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:97:d2:83:45:60:82:97:74:05:08:aa:1c:8b:
                    7c:36:f5:93:5a:6e:af:ca:09:47:8e:8e:86:e2:30:
                    ba:07:96:51:d1:a6:d2:9e:b9:b3:5b:62:98:09:0b:
                    f9:00:27:e7:fb:75:f6:45:49:52:2d:1f:a6:f9:d1:
                    86:cf:5e:7b:ce:04:0c:31:ee:cd:0e:5f:cb:49:0b:
                    b7:81:f5:28:7f:d8:00:81:3e:ba:fd:31:4b:a1:d6:
                    24:97:0c:ea:54:8d:67:36:57:24:9d:46:20:74:e5:
                    e9:56:72:74:41:95:a5:9b:60:1e:f1:64:0e:6b:c5:
                    14:3c:94:8e:48:82:f6:c7:0c:e4:fa:5b:6d:27:56:
                    a3:59:61:1b:8d:0c:43:f1:02:c2:13:35:01:4b:76:
                    f2:11:09:4b:f4:5c:ba:90:8f:bb:3d:a9:1b:a5:84:
                    9c:4b:bc:c3:31:99:1b:49:2c:d4:dd:80:84:85:06:
                    bd:12:52:7b:0e:09:f9:37:c7:f1:25:c4:f5:d3:18:
                    f4:9e:b9:0d:c4:b6:94:bc:da:2c:45:a1:16:b0:b1:
                    13:c3:d7:71:7d:fd:bd:ac:94:2e:74:0a:48:71:5d:
                    a8:43:70:a2:79:b1:b6:d7:f2:c8:70:32:f6:de:69:
                    21:f8:1e:53:4c:87:f8:e6:c7:45:e9:3a:e7:0c:29:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C8:60:70:6B:D8:56:C2:F1:E1:DC:95:48:B7:84:84:0E:EE:FE:02
            X509v3 Authority Key Identifier:
                keyid:0B:83:E4:D5:D2:92:70:E8:8E:22:70:FE:14:83:40:CE:15:D5:43:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/583982C23C50B781FFD016C5F0FFA5E69BA224BB4D3FB378DC12A6AA13A4FA70/0/0B83E4D5D29270E88E2270FE148340CE15D5431E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B83E4D5D29270E88E2270FE148340CE15D5431E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583982C23C50B781FFD016C5F0FFA5E69BA224BB4D3FB378DC12A6AA13A4FA70/0/323830333a333639303a3a2f33322d3438203d3e20323732393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3690::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:71:bf:b7:95:68:91:5c:b7:ce:07:ad:a9:1f:31:0c:4d:45:
         3c:41:46:7b:92:1c:b4:34:84:b1:73:97:62:54:23:25:f9:4d:
         97:36:63:ef:39:da:dc:29:9d:f9:25:7f:38:e3:7c:e6:5f:1f:
         99:57:6b:fd:6c:51:1d:6e:57:dc:98:95:f0:4e:d4:2a:62:1c:
         d7:9c:c4:c4:4d:1c:17:55:ae:9d:07:33:0c:8a:13:55:cc:ec:
         22:1a:02:5d:30:a0:23:7b:e7:44:98:85:16:5c:1d:48:46:19:
         a4:68:f0:c0:3d:3f:74:08:06:3e:27:4e:b8:4c:66:4b:65:cc:
         0a:09:ed:11:7c:f0:b5:09:6f:1d:a2:7b:b9:0e:2a:27:76:3a:
         87:63:cd:83:57:65:2e:72:52:22:e6:28:ca:17:85:63:dd:2f:
         1a:7d:3e:ba:b7:7a:da:99:a7:57:96:4a:22:eb:19:ac:a3:dc:
         d0:44:2a:d5:4a:ae:5a:ef:b2:57:b8:46:c6:e9:f0:a7:ff:09:
         84:49:18:e7:65:f5:7b:3f:2f:33:7e:7c:ae:42:9e:75:67:a5:
         ee:d0:bc:3a:85:3a:d3:2d:83:5b:c3:52:22:5e:dd:b4:cd:19:
         90:c2:8d:6d:43:d2:30:ec:2a:08:4d:30:b6:4c:bd:66:f3:1e:
         33:f2:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:18 2025 by rpki-client