Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/323830333a653038303a3a2f33322d3332203d3e203132313530.roa
File:                     323830333a653038303a3a2f33322d3332203d3e203132313530.roa (raw, json)
Hash identifier:          a3nQLMD0biHyv0ciuCKKXdgkfZJwRPUrzqV48J46oaM=
Subject key identifier:   C4:94:12:3E:21:B1:44:9C:1B:FA:45:72:3B:00:C3:0F:59:AB:BC:D1
Certificate issuer:       /CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
Certificate serial:       066A315CF5413DFE51998E8A2F30B95A8D1511AA
Authority key identifier: C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/323830333a653038303a3a2f33322d3332203d3e203132313530.roa
Signing time:             Tue 04 Feb 2025 18:00:55 +0000
ROA not before:           Tue 04 Feb 2025 17:55:55 +0000
ROA not after:            Tue 03 Feb 2026 18:00:55 +0000
asID:                     12150
IP address blocks:        2803:e080::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6a:31:5c:f5:41:3d:fe:51:99:8e:8a:2f:30:b9:5a:8d:15:11:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7
        Validity
            Not Before: Feb  4 17:55:55 2025 GMT
            Not After : Feb  3 18:00:55 2026 GMT
        Subject: CN=C494123E21B1449C1BFA45723B00C30F59ABBCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:f6:23:f8:5c:6f:f4:14:94:a4:83:47:8d:
                    35:74:bd:77:84:56:e1:2c:35:a8:4d:8b:d2:a3:63:
                    53:29:4b:71:c7:41:04:dc:8c:4d:82:f9:24:ba:36:
                    eb:2b:45:d4:b3:df:fa:8f:3c:21:f2:e4:99:e9:db:
                    fd:c9:26:1a:9d:02:be:10:dc:85:c1:4f:61:85:c2:
                    4a:6d:b6:01:a3:d2:43:25:83:17:7a:97:1e:bf:a0:
                    af:24:35:eb:ba:c8:07:da:73:70:63:37:ee:38:3c:
                    6c:44:f5:5b:6b:90:db:96:db:28:34:2e:c2:63:a3:
                    33:ff:0f:1a:b5:c4:01:21:18:e9:68:df:32:42:49:
                    f0:60:a4:de:8d:c3:0e:ba:48:ef:2c:5d:59:bc:ae:
                    ed:a3:c2:1a:14:31:46:7d:9d:ad:c8:49:b5:c2:a6:
                    cd:0d:10:77:f2:78:2a:b4:f6:1a:57:b2:fc:12:35:
                    72:ac:9b:d1:f4:51:08:a3:14:95:c8:76:b6:2d:92:
                    a5:62:37:36:9f:c9:a6:86:1f:a6:e1:eb:0b:b0:cc:
                    f5:44:99:e2:fb:3f:60:39:f3:20:08:b6:c3:24:dd:
                    f7:b6:80:8f:d3:6d:64:ad:8e:7d:8f:eb:93:d6:05:
                    5d:24:9b:bc:68:b7:1e:ad:72:d6:8a:62:42:5a:2c:
                    d0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:94:12:3E:21:B1:44:9C:1B:FA:45:72:3B:00:C3:0F:59:AB:BC:D1
            X509v3 Authority Key Identifier:
                keyid:C2:BD:7C:7D:74:F4:9C:E6:BE:C8:0D:95:C9:62:13:DD:0D:C5:C4:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2BD7C7D74F49CE6BEC80D95C96213DD0DC5C4B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6FFF22C277A104448C9BCFF9F7595C1BDBD80DE090D9A4889EB7B703E1F31945/0/323830333a653038303a3a2f33322d3332203d3e203132313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e080::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:99:a0:de:7d:a3:a4:52:e8:76:b7:27:60:0b:13:ae:76:
         35:30:9c:d5:b1:53:5b:ba:d4:e7:68:bf:53:da:bc:90:5b:24:
         85:50:ec:7c:f7:b6:a8:cf:ca:6f:7a:45:e1:d1:40:ad:de:0d:
         b7:75:16:bc:bd:79:38:3e:40:ff:71:da:34:3f:af:6d:85:d4:
         9d:c6:53:0d:35:2f:96:37:86:3d:f1:68:69:bf:f9:53:69:13:
         f8:ab:ae:31:a2:88:b3:a8:1c:24:f2:8e:35:d8:c2:46:07:4d:
         23:58:1e:2b:86:64:c1:c0:bf:a7:1c:d8:5c:ac:b5:bf:70:ac:
         cd:76:ba:d3:d8:8d:87:39:7b:8a:49:62:c4:ad:55:b0:a9:6c:
         de:0f:80:0d:d6:90:72:13:61:41:f1:c7:0f:f5:9f:91:76:c3:
         61:3f:92:64:3b:41:9c:72:66:01:1f:16:d6:a8:0c:27:b5:56:
         51:43:44:74:b4:f1:2d:1a:47:a6:f4:3e:20:3d:2c:67:a4:64:
         dd:f4:9f:92:e6:52:c7:28:ca:dd:0a:22:9c:21:ee:a1:bc:1b:
         40:98:81:a7:20:8d:34:6c:58:99:17:22:65:95:35:6e:9d:81:
         95:88:c5:91:25:b2:c7:39:da:b9:ef:19:76:73:0b:ce:5c:db:
         08:76:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:10 2025 by rpki-client