Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/323830333a333230303a3a2f33322d3332203d3e20323632323431.roa
File:                     323830333a333230303a3a2f33322d3332203d3e20323632323431.roa (raw, json)
Hash identifier:          ljzNmUiIXivdzlYnd8xYNeVLBcHoSMT9ESUCr0J/uDE=
Subject key identifier:   1F:99:DF:88:AC:83:F3:B8:EF:B0:58:07:F9:AB:35:D0:72:C6:EE:28
Certificate issuer:       /CN=96EAFA0906A1E2F48685E9D99165923172C806EA
Certificate serial:       59A97F0ED43E35D0CC231CE242720FBACBC763C3
Authority key identifier: 96:EA:FA:09:06:A1:E2:F4:86:85:E9:D9:91:65:92:31:72:C8:06:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96EAFA0906A1E2F48685E9D99165923172C806EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/323830333a333230303a3a2f33322d3332203d3e20323632323431.roa
Signing time:             Tue 04 Feb 2025 18:04:05 +0000
ROA not before:           Tue 04 Feb 2025 17:59:05 +0000
ROA not after:            Tue 03 Feb 2026 18:04:05 +0000
asID:                     262241
IP address blocks:        2803:3200::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a9:7f:0e:d4:3e:35:d0:cc:23:1c:e2:42:72:0f:ba:cb:c7:63:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EAFA0906A1E2F48685E9D99165923172C806EA
        Validity
            Not Before: Feb  4 17:59:05 2025 GMT
            Not After : Feb  3 18:04:05 2026 GMT
        Subject: CN=1F99DF88AC83F3B8EFB05807F9AB35D072C6EE28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:1a:55:70:df:3c:77:05:0d:d7:83:04:9f:
                    9e:f1:ca:2a:77:bb:b3:59:56:92:c5:3a:c9:b8:d1:
                    1c:43:b7:fe:9a:5d:7c:17:f8:0d:94:2c:79:6e:f3:
                    5f:cd:1e:d1:14:04:12:82:a6:43:33:ce:be:fd:ee:
                    d3:9f:7e:6a:2e:00:3b:71:e5:67:19:84:06:2c:c7:
                    63:de:31:53:e4:b5:db:c1:db:16:e0:f7:1f:4f:c6:
                    88:3c:4a:e4:c2:33:f2:d6:c9:d8:99:d7:f4:26:06:
                    98:e2:4d:e8:14:77:14:c6:29:7e:f7:fc:b2:f6:bc:
                    2d:08:3a:74:fe:77:6a:8a:84:8b:49:1d:1a:4b:40:
                    05:1d:47:e5:a3:53:db:27:7a:c6:80:bb:57:7e:6b:
                    d3:3e:90:fe:00:5e:f5:57:5e:23:e4:d8:f0:fc:e2:
                    34:3b:59:a8:57:1a:89:8b:7f:19:a6:1e:92:cd:38:
                    b4:ee:dc:de:55:9d:d3:73:41:60:22:7d:d5:73:d8:
                    6b:96:7a:61:7b:0b:9d:a6:01:5b:f0:a6:75:74:74:
                    e8:57:00:3c:10:97:1d:ec:6e:ba:f9:91:6f:61:c4:
                    eb:5f:2b:29:8c:fa:48:8c:24:0f:25:0a:54:a5:5e:
                    3c:3c:46:70:7f:51:f8:09:67:fb:be:a7:b0:45:83:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:99:DF:88:AC:83:F3:B8:EF:B0:58:07:F9:AB:35:D0:72:C6:EE:28
            X509v3 Authority Key Identifier:
                keyid:96:EA:FA:09:06:A1:E2:F4:86:85:E9:D9:91:65:92:31:72:C8:06:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/96EAFA0906A1E2F48685E9D99165923172C806EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96EAFA0906A1E2F48685E9D99165923172C806EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59066A93CBD1AD8CE6AC0175903C7A8AF9612F212804831582AF7EB7047531C8/0/323830333a333230303a3a2f33322d3332203d3e20323632323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3200::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:a3:df:ca:7e:bf:4f:f8:81:13:a6:88:4c:3f:8a:6a:66:79:
         77:94:d7:4a:20:70:07:bb:4a:67:00:25:6b:80:9b:74:52:a2:
         d8:b1:0e:99:4c:fc:42:03:2f:af:72:2c:78:51:a1:b0:65:57:
         fc:27:cc:48:00:bf:a2:97:7a:1a:d7:f3:54:4b:d6:8e:5f:60:
         13:68:2a:65:6a:d9:bd:84:84:2d:b5:f2:12:92:57:3a:ab:c4:
         8b:55:47:a6:f8:dd:11:67:4d:7e:c6:15:9d:43:25:d6:64:00:
         83:ad:8e:b2:27:94:d8:d2:e1:e2:36:aa:23:ee:5e:1e:f6:ce:
         60:be:a1:fc:69:e3:77:cf:e8:02:df:11:9d:21:c8:6d:ad:da:
         fe:0b:83:8a:7f:f8:c9:b7:86:10:1c:9f:68:03:67:75:b8:81:
         10:a1:e2:12:5d:50:a4:e6:b8:45:0e:a5:c2:3d:d8:32:14:cd:
         01:f6:4f:fc:0b:75:88:f1:d9:c9:b1:c0:48:f4:10:26:52:08:
         b7:f7:8c:1d:34:73:88:3f:8c:2d:9f:fc:2e:a8:a9:d3:68:eb:
         23:f4:69:49:7d:6e:2a:de:09:89:7b:dd:5e:8b:c7:ba:89:75:
         ca:63:cd:a7:f8:14:f2:d1:74:5a:5e:52:40:ac:64:90:82:07:
         78:f1:17:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:54:14 2025 by rpki-client