Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/323830333a6563303a3a2f33322d3332203d3e20323635363632.roa
File:                     323830333a6563303a3a2f33322d3332203d3e20323635363632.roa (raw, json)
Hash identifier:          b4wV1WCgYiTNk9pTuDG25w0lEZ1CEFKsUPasF5h3wMk=
Subject key identifier:   28:75:33:98:45:BB:FB:0C:55:6E:A5:BE:F2:71:B2:87:4B:8A:20:4E
Certificate issuer:       /CN=80D3550CF73B167B6F22E20047A686FB2D761E88
Certificate serial:       5D9D377D8E3A18ED31653E12C0D9E831DB0CDDA2
Authority key identifier: 80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/323830333a6563303a3a2f33322d3332203d3e20323635363632.roa
Signing time:             Tue 04 Feb 2025 19:57:48 +0000
ROA not before:           Tue 04 Feb 2025 19:52:48 +0000
ROA not after:            Tue 03 Feb 2026 19:57:48 +0000
asID:                     265662
IP address blocks:        2803:ec0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9d:37:7d:8e:3a:18:ed:31:65:3e:12:c0:d9:e8:31:db:0c:dd:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D3550CF73B167B6F22E20047A686FB2D761E88
        Validity
            Not Before: Feb  4 19:52:48 2025 GMT
            Not After : Feb  3 19:57:48 2026 GMT
        Subject: CN=2875339845BBFB0C556EA5BEF271B2874B8A204E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:91:b8:a7:48:cb:a8:94:cb:1a:f0:a0:c8:
                    b4:57:66:2d:4e:30:b7:c1:34:cd:97:af:c7:87:e1:
                    83:f0:47:dd:14:26:bf:57:e0:a4:5b:1b:8e:79:bb:
                    45:02:be:df:b3:7a:00:1d:33:fc:a7:39:d9:68:e1:
                    cf:66:87:43:2f:fc:44:9f:eb:95:49:30:30:17:15:
                    fc:e0:93:ff:10:da:b3:b0:df:4a:d5:d5:44:e0:fb:
                    04:73:37:ce:d3:a8:b8:40:2b:be:43:d4:10:3a:52:
                    3a:60:d3:3e:89:5f:25:6b:64:78:e8:e3:e8:d6:3a:
                    f1:18:d5:4b:c7:a3:90:ca:9b:74:c6:b6:ad:e5:5d:
                    25:11:3c:43:67:95:d7:ef:7d:c4:c4:b7:c4:c2:8e:
                    95:89:c5:68:ea:ae:d3:a9:2a:aa:62:d5:04:36:fe:
                    92:61:0f:2d:9b:0d:57:93:e0:35:87:6f:ac:e3:a8:
                    9a:3b:d4:ce:20:38:17:c8:6c:ea:9c:ca:28:cd:4c:
                    49:92:e7:fe:24:7d:60:81:40:8a:c2:45:32:77:bd:
                    46:9f:4c:7f:6a:57:91:a2:84:c9:9a:d6:aa:41:67:
                    5c:31:ba:f8:02:33:59:ef:a3:b8:c8:4c:0e:08:47:
                    68:47:f0:9b:b6:bc:13:de:05:96:47:cc:fe:74:a9:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:75:33:98:45:BB:FB:0C:55:6E:A5:BE:F2:71:B2:87:4B:8A:20:4E
            X509v3 Authority Key Identifier:
                keyid:80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/323830333a6563303a3a2f33322d3332203d3e20323635363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:d0:20:07:da:a5:6c:0d:77:65:9f:9b:6d:63:15:d3:4b:fc:
         37:16:16:6a:6c:be:e5:3c:5b:ee:4d:fd:a5:78:0b:a4:5f:2a:
         56:08:bc:12:fa:eb:e7:02:da:77:b5:0a:d4:d1:4d:83:65:d2:
         22:e5:c5:1b:fc:32:9a:3c:3f:55:22:24:d5:10:bb:9a:25:c1:
         92:50:48:45:03:b4:df:26:93:ba:5e:19:aa:a3:be:da:94:bf:
         9f:c2:03:ea:89:ba:08:d5:de:1d:69:b9:f3:55:1e:e7:b4:8a:
         d3:a2:3b:6d:a4:2d:9b:2c:41:b7:b7:5e:c9:fe:6e:b8:b7:34:
         54:a2:34:74:be:f6:72:a2:c9:14:d2:a1:6c:0e:87:cd:60:f8:
         a6:98:81:aa:f0:85:28:1e:88:1a:b4:c5:b0:b2:cc:a0:33:75:
         14:0b:af:30:f5:c4:67:fb:3c:90:58:17:5f:be:ef:e3:26:78:
         ec:d8:cd:7a:f7:b0:88:71:95:f0:62:da:b6:82:e2:16:ef:91:
         93:32:97:4f:0e:92:e3:f7:d3:00:d3:46:65:3a:c0:59:21:22:
         d5:05:c0:fc:10:b4:68:7a:ca:56:59:41:d3:02:d5:b7:08:fe:
         f5:a0:8d:5e:54:0b:69:67:04:96:4d:7a:b4:5e:66:d5:27:7e:
         29:68:5a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----