Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa
File:                     323830333a333936303a3a2f33322d3332203d3e20323632313836.roa (raw, json)
Hash identifier:          osouLNdk92MsiqGCf/e7JXvRlHfCGf+yL+KQqT7sckA=
Subject key identifier:   91:FE:B5:22:A5:A3:C1:BE:10:30:CA:3C:97:DE:BE:0C:80:8F:2F:C2
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       6818C6B4C7692B3D4D082CE932DE1B8F779CF97A
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 18:27:41 +0000
ROA not before:           Tue 04 Feb 2025 18:22:41 +0000
ROA not after:            Tue 03 Feb 2026 18:27:41 +0000
asID:                     262186
IP address blocks:        2803:3960::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:18:c6:b4:c7:69:2b:3d:4d:08:2c:e9:32:de:1b:8f:77:9c:f9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Feb  4 18:22:41 2025 GMT
            Not After : Feb  3 18:27:41 2026 GMT
        Subject: CN=91FEB522A5A3C1BE1030CA3C97DEBE0C808F2FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:1e:f4:77:24:32:3c:25:08:37:26:bf:8a:
                    82:79:e0:f8:f9:98:34:fd:8c:19:62:5f:99:1a:f6:
                    5d:ea:2c:17:40:2e:b4:8d:5f:10:24:12:9c:0f:5c:
                    ac:24:73:21:bc:0e:5a:77:dd:ac:8d:3d:90:2f:cf:
                    60:6e:a7:35:83:3f:8d:e6:4d:06:ed:b1:8d:e1:c2:
                    a6:65:27:eb:7c:b6:76:7e:5a:f5:39:d7:04:ca:3b:
                    15:51:df:5a:be:cc:2d:1c:26:90:ff:69:b9:ae:81:
                    75:12:3c:46:8c:e8:2c:6a:a8:c0:c6:ab:9a:e3:83:
                    45:d0:d3:ed:0e:59:35:76:01:70:a3:66:ff:17:8c:
                    5b:69:74:40:9e:f8:c7:86:2b:97:74:a9:f2:59:b8:
                    95:ad:8f:88:ea:99:1d:91:d4:f2:d7:0f:5c:25:23:
                    81:cd:59:81:65:ab:3c:b2:68:b0:fe:00:fa:df:13:
                    67:7f:ee:2f:d6:dc:c6:60:83:dc:d3:0b:48:d3:81:
                    ac:4d:ec:08:99:c5:6f:a1:57:77:25:c7:ce:95:fc:
                    fe:fe:1c:03:18:6a:65:86:d6:92:a4:b9:c9:72:c4:
                    59:b8:7b:6b:1d:7b:93:8a:c2:25:bc:11:16:b7:21:
                    89:25:5c:50:af:5a:bd:cf:c8:4a:c7:74:4b:91:e1:
                    d9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FE:B5:22:A5:A3:C1:BE:10:30:CA:3C:97:DE:BE:0C:80:8F:2F:C2
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a3a2f33322d3332203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3960::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:a2:ee:33:a5:b6:48:41:2f:fc:64:21:a0:09:80:96:57:a5:
         9e:b4:f5:7d:af:1c:a4:8e:86:51:a8:04:ab:53:07:f7:92:86:
         57:d9:95:12:8f:65:b9:15:71:29:36:6b:f5:79:67:85:17:3f:
         58:5b:48:0f:9e:96:b8:3f:49:15:2a:41:9b:b9:66:93:51:8d:
         25:ce:1a:62:cb:ed:b1:80:3e:d7:b6:9f:15:35:bc:22:33:19:
         98:ae:58:0f:33:02:2a:0d:7b:7f:d8:6a:82:eb:62:70:cd:32:
         1e:07:5d:67:02:77:30:e6:fb:f6:06:ce:58:92:c1:b8:19:dd:
         f6:a8:d6:23:2d:9b:79:b9:e0:82:25:7a:6c:75:d2:e1:ad:2b:
         6c:3c:42:1d:71:a9:57:51:71:78:20:97:c0:ad:3b:1f:44:10:
         92:d1:a3:80:9a:aa:4a:6a:fd:d3:a2:78:7e:70:13:40:07:f2:
         04:50:66:85:fa:d1:57:5f:be:79:7d:f0:3f:df:90:57:98:89:
         d1:3b:8b:be:2a:bf:f8:a1:12:9d:ff:c1:ce:d3:01:fe:aa:85:
         e8:b7:60:71:55:31:7d:8b:fa:69:27:27:a2:bf:eb:17:d3:93:
         4d:92:86:aa:82:bb:a7:5a:05:e9:da:22:8a:4b:71:44:b2:2a:
         53:60:bd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----