Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/323830333a626363303a3a2f33322d3438203d3e20323634383232.roa
File:                     323830333a626363303a3a2f33322d3438203d3e20323634383232.roa (raw, json)
Hash identifier:          xqb0OK9Ul8K6badX4YmNWGWdH4tA23iqbP1M0sszhYo=
Subject key identifier:   EF:97:3C:45:4B:FD:45:59:03:AE:1A:6C:A1:E2:DD:46:B2:31:4E:FD
Certificate issuer:       /CN=88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58
Certificate serial:       1A0175471CC90F988430B128E245A69C2CD2D7EB
Authority key identifier: 88:ED:9F:EC:72:E4:DE:7B:BA:CC:A9:96:D9:28:A1:3A:27:AF:7C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/323830333a626363303a3a2f33322d3438203d3e20323634383232.roa
Signing time:             Tue 04 Feb 2025 19:57:55 +0000
ROA not before:           Tue 04 Feb 2025 19:52:55 +0000
ROA not after:            Tue 03 Feb 2026 19:57:55 +0000
asID:                     264822
IP address blocks:        2803:bcc0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:01:75:47:1c:c9:0f:98:84:30:b1:28:e2:45:a6:9c:2c:d2:d7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58
        Validity
            Not Before: Feb  4 19:52:55 2025 GMT
            Not After : Feb  3 19:57:55 2026 GMT
        Subject: CN=EF973C454BFD455903AE1A6CA1E2DD46B2314EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:72:2e:51:de:11:03:51:83:b5:94:2b:c6:
                    39:15:55:af:e6:4e:30:9d:c9:d5:0e:b4:fb:85:9e:
                    f2:ee:85:ac:e4:8c:3f:fc:e9:48:b2:84:77:00:ca:
                    4a:29:d1:3b:c8:06:7b:2d:ff:79:a8:b8:5c:20:3a:
                    1d:95:32:f6:2c:40:09:da:e5:19:00:8f:5f:c6:05:
                    75:88:9d:2f:35:55:83:6a:cc:47:7e:0c:44:47:d5:
                    81:d2:83:3c:42:9f:91:05:27:16:d7:f9:f6:43:af:
                    24:a4:63:13:3d:eb:48:8d:1c:d5:51:ab:ae:8a:19:
                    71:9c:60:fb:5e:89:dc:ad:1f:01:b1:2d:ff:6d:79:
                    4f:b4:77:18:94:ee:3b:30:22:78:57:95:ac:ba:b2:
                    c5:96:8c:9b:12:05:ec:ab:6c:2f:93:b0:89:7f:1f:
                    5e:16:8e:04:0c:4c:f8:d1:db:da:56:92:a3:a7:27:
                    34:32:97:68:1c:c9:3b:05:a2:e9:60:6c:d5:ca:59:
                    9d:de:90:28:bc:04:98:85:96:48:55:01:68:7b:8b:
                    46:35:b1:ba:d8:7f:f5:fd:7a:d7:d2:be:80:3e:35:
                    93:c8:41:a1:a3:db:1a:c4:d2:83:99:ef:fd:cc:ca:
                    90:2c:bf:ef:11:3c:56:84:45:cf:23:7b:b1:c5:4c:
                    22:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:97:3C:45:4B:FD:45:59:03:AE:1A:6C:A1:E2:DD:46:B2:31:4E:FD
            X509v3 Authority Key Identifier:
                keyid:88:ED:9F:EC:72:E4:DE:7B:BA:CC:A9:96:D9:28:A1:3A:27:AF:7C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/323830333a626363303a3a2f33322d3438203d3e20323634383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:42:27:af:a2:b1:cc:5a:be:92:dc:cd:c7:b2:da:8b:03:05:
         a6:4b:7c:a7:7a:9a:a2:3b:fa:52:50:64:d3:50:66:2e:1a:31:
         8a:eb:1f:6e:1d:a7:a7:7b:4f:d5:29:84:39:85:99:73:9b:ea:
         e6:5f:e7:4f:a5:e7:62:49:d9:f8:03:54:09:91:61:4b:8e:53:
         0b:21:c2:0e:0c:4f:6c:ef:98:ac:54:07:cb:41:44:6d:f3:e6:
         96:78:65:4f:ab:5d:0c:4b:1d:9c:30:6b:a7:eb:e4:4a:7e:6b:
         e5:21:9f:98:44:1b:40:b5:1e:42:96:e9:6d:50:ba:78:d1:79:
         88:2f:0d:6e:b3:b4:00:4a:0d:64:8b:de:0f:6b:d3:39:f9:d1:
         7a:e1:f4:a6:c6:0e:5e:cd:ef:c3:a9:96:12:eb:82:ca:e1:9f:
         37:9e:cb:6a:48:8a:9f:28:a1:90:10:9c:84:45:6a:b8:9d:62:
         12:33:f9:74:58:29:31:f2:b5:75:ef:8d:b6:f9:82:83:c8:2e:
         6d:11:7d:0d:04:ac:46:23:f0:e3:4e:46:27:87:1f:35:4b:f6:
         ce:88:e4:83:11:25:3d:0b:dd:13:9f:5b:45:a5:3e:91:25:e3:
         5c:d1:b5:ff:24:51:e9:58:ad:d9:70:68:0e:4e:41:2e:c6:4f:
         35:f7:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:01:33 2025 by rpki-client