Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a666666613a3a2f34382d3536203d3e203134363138.roa
File:                     323830333a383239303a666666613a3a2f34382d3536203d3e203134363138.roa (raw, json)
Hash identifier:          1Qf/0tLKvE3bM9zncAeAbFMKr/fMJ59lwA71SUg2p8k=
Subject key identifier:   FB:F3:54:1B:F3:27:3F:E7:D2:DD:45:5D:54:3F:01:3F:E9:80:C3:DE
Certificate issuer:       /CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
Certificate serial:       7C57174BC2E63978089DE73E098D00A3020DE60B
Authority key identifier: 1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a666666613a3a2f34382d3536203d3e203134363138.roa
Signing time:             Sat 08 Mar 2025 15:11:29 +0000
ROA not before:           Sat 08 Mar 2025 15:06:29 +0000
ROA not after:            Sat 07 Mar 2026 15:11:29 +0000
asID:                     14618
IP address blocks:        2803:8290:fffa::/48 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:57:17:4b:c2:e6:39:78:08:9d:e7:3e:09:8d:00:a3:02:0d:e6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
        Validity
            Not Before: Mar  8 15:06:29 2025 GMT
            Not After : Mar  7 15:11:29 2026 GMT
        Subject: CN=FBF3541BF3273FE7D2DD455D543F013FE980C3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:ab:67:73:6a:a0:79:47:4e:9d:36:9b:2c:
                    7c:1a:50:91:5f:62:06:76:92:db:7b:cb:d1:2d:8c:
                    24:a7:cb:35:ce:b1:40:3a:57:74:b9:e7:ab:bd:5b:
                    92:57:ba:38:54:02:13:f4:9b:35:f0:29:9c:32:a9:
                    3f:47:45:25:a7:f5:c4:ef:6d:95:18:19:3f:e5:f0:
                    42:62:1b:07:01:d9:d6:d9:c3:04:aa:fe:21:8b:82:
                    63:48:91:11:7e:24:52:d5:39:74:1b:22:26:99:a2:
                    f4:25:41:6f:4a:7f:d7:50:8d:dc:42:dd:ab:61:1a:
                    fd:6e:4f:74:e9:ae:d6:77:43:6b:d7:d9:cd:32:36:
                    1f:aa:dc:aa:95:58:d5:49:bc:57:c1:8f:b7:6e:fb:
                    e0:38:86:c2:33:e1:3b:f9:8c:61:22:1f:12:5c:58:
                    b9:39:24:35:45:e7:33:e4:e2:37:d7:7f:d0:38:d9:
                    28:09:99:f1:de:32:81:63:27:33:d7:51:70:0f:cb:
                    f6:14:35:4b:9b:79:1f:47:aa:2b:7d:05:bd:e0:87:
                    ca:0e:81:31:33:e2:c6:21:1d:ce:64:c4:6d:c8:59:
                    5a:5e:b2:83:9e:b8:a2:29:82:fc:82:27:13:a6:80:
                    f0:fb:46:80:0a:e5:5b:f1:c0:4b:6c:b7:47:b3:45:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F3:54:1B:F3:27:3F:E7:D2:DD:45:5D:54:3F:01:3F:E9:80:C3:DE
            X509v3 Authority Key Identifier:
                keyid:1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/323830333a383239303a666666613a3a2f34382d3536203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8290:fffa::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:43:9d:8f:c1:e0:ed:fd:3f:dc:58:75:52:e4:7a:49:86:a5:
         5a:de:fe:f5:10:90:4c:4d:2f:bf:bb:15:94:af:0a:51:11:2b:
         0c:7c:94:45:12:5d:b6:76:e8:13:7c:1b:01:14:ed:b4:91:15:
         f6:50:4d:95:32:7a:0f:79:ca:de:30:4e:5e:91:ef:e9:c0:25:
         0d:c4:33:88:c4:26:03:da:af:1a:89:a5:d1:3a:78:d9:33:d9:
         6f:e9:9c:d2:0f:dd:92:bf:f6:4d:04:82:71:fd:7a:6a:1d:d6:
         21:cb:68:ea:aa:f6:a5:af:4d:d3:08:87:05:57:a0:76:21:ad:
         e7:fa:b6:88:cf:c6:51:8f:f5:2c:53:99:22:3f:cd:ff:be:5d:
         02:08:6c:33:fd:80:42:9c:14:1a:67:c9:40:e8:e7:56:29:2f:
         de:de:47:57:54:0d:35:6f:c2:a4:9b:50:a2:97:dc:11:34:57:
         54:6b:65:4f:84:05:83:93:6d:24:eb:57:32:bc:f9:5e:82:0a:
         0e:13:db:87:ab:99:94:6f:54:29:9d:cb:64:92:0a:36:40:30:
         e7:89:02:6e:b6:26:18:35:83:29:bd:43:ee:f8:dc:ea:7a:fa:
         fa:9b:25:b6:20:8b:b7:33:35:ec:8b:4b:bc:fd:5a:9c:a3:8a:
         2b:4c:0f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----