Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a353a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a353a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          YgrtnYdm0SARxqGHyLgg/d7oSmuIwUFFCLViAIvLYqo=
Subject key identifier:   16:A0:19:07:10:E2:F3:74:1C:F8:EB:03:BB:11:AA:6C:DF:05:9D:AA
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       791C0E918945617AA0E61BD88DC6FCF28BA3359D
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a353a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:35 +0000
ROA not before:           Tue 04 Feb 2025 18:06:35 +0000
ROA not after:            Tue 03 Feb 2026 18:11:35 +0000
asID:                     271935
IP address blocks:        2803:7a10:5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1c:0e:91:89:45:61:7a:a0:e6:1b:d8:8d:c6:fc:f2:8b:a3:35:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:35 2025 GMT
            Not After : Feb  3 18:11:35 2026 GMT
        Subject: CN=16A0190710E2F3741CF8EB03BB11AA6CDF059DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:bd:6a:d3:17:53:83:b4:ed:af:3b:89:e4:
                    4c:ca:30:2b:54:a7:d8:c2:f9:95:09:0a:92:3b:75:
                    9b:44:f5:31:ff:38:d0:37:cf:d6:1e:6e:87:3d:2b:
                    6f:a3:9c:13:3e:bb:27:66:ca:f7:5e:72:64:7c:1d:
                    96:ba:48:e9:6e:6d:2a:5e:24:64:e9:01:98:64:2b:
                    15:e1:cb:c9:8d:02:88:09:9b:75:e6:b7:28:27:90:
                    c1:1c:3e:b8:db:41:8e:e4:e5:27:9d:86:b4:ef:40:
                    eb:c9:35:96:99:05:b8:50:7b:6d:e3:4e:a2:a6:89:
                    03:08:44:41:63:ba:67:0c:63:11:78:73:05:19:d1:
                    e2:eb:44:7a:8f:4f:51:9e:03:41:71:88:50:f1:5e:
                    89:56:35:d3:c9:19:10:50:3e:a4:ac:fb:74:23:ea:
                    97:14:c9:72:04:9e:a2:48:45:24:76:bd:d8:df:6a:
                    7d:52:ce:ea:d4:b9:20:31:f1:0f:7f:1b:6f:cc:6c:
                    d5:82:17:88:22:ce:fc:59:78:1b:6d:b3:80:41:90:
                    dc:27:0d:1a:48:06:5a:05:92:7f:95:a4:7c:52:72:
                    82:52:1f:bd:38:d9:25:00:71:20:02:e7:95:c7:1d:
                    9f:15:76:05:05:16:a6:f6:00:a0:4d:07:f9:94:2a:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A0:19:07:10:E2:F3:74:1C:F8:EB:03:BB:11:AA:6C:DF:05:9D:AA
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a353a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:f9:b0:40:dd:50:c4:76:5b:79:d8:b0:3c:ca:d3:35:3b:a7:
         54:cf:9c:7e:17:a8:1b:fb:0f:b6:2c:1f:27:42:85:d4:69:98:
         12:05:77:9d:e0:5c:0b:ee:c8:72:cd:6e:5d:8f:62:92:1e:1e:
         0f:ec:a1:af:9a:18:af:33:f2:59:bd:59:1e:23:07:52:c9:32:
         40:94:ac:50:36:72:6b:22:ba:1a:47:24:3f:12:8f:07:07:68:
         47:fb:37:75:99:08:11:97:46:e0:06:ad:b8:be:a4:c1:7c:5a:
         d3:fe:bd:79:9a:bb:fa:33:46:4d:ec:0b:2c:8e:f7:44:05:03:
         ce:50:65:40:ef:a2:ff:6f:34:b9:5e:8a:1a:20:dc:6e:7a:4b:
         9c:b9:2a:54:2f:e1:f0:6c:1b:72:7d:07:30:b0:2d:ad:ea:a8:
         b3:f2:2b:89:58:d3:90:2b:37:52:90:a0:7f:4c:be:94:7c:78:
         56:f2:dd:8d:ca:f4:8e:27:14:09:47:62:98:bc:79:4a:5c:8b:
         c2:d7:ce:c0:3a:96:f8:72:79:c7:e7:7c:58:c5:e7:ec:86:19:
         c0:0f:4d:bc:a9:92:bb:66:85:8a:f1:c4:7f:0e:c2:f4:c4:b8:
         4f:ee:74:c5:e5:96:7d:73:9c:5c:1a:db:1f:c0:a3:82:df:13:
         e1:67:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:19:57 2025 by rpki-client