Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34332d3433203d3e203237383735.roa
File:                     323830313a3165303a3a2f34332d3433203d3e203237383735.roa (raw, json)
Hash identifier:          6vRhkYD/zV5Z7Aqhq6zyShBWS23fGFPHD3Fn7vV7TKQ=
Subject key identifier:   F0:2D:56:4E:89:0A:F7:C7:B9:18:09:A6:A0:45:60:85:48:60:69:81
Certificate issuer:       /CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
Certificate serial:       030E1793FBFD039A3FBA808F3FA9EEC77DBACFB1
Authority key identifier: D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34332d3433203d3e203237383735.roa
Signing time:             Tue 04 Feb 2025 18:05:24 +0000
ROA not before:           Tue 04 Feb 2025 18:00:24 +0000
ROA not after:            Tue 03 Feb 2026 18:05:24 +0000
asID:                     27875
IP address blocks:        2801:1e0::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0e:17:93:fb:fd:03:9a:3f:ba:80:8f:3f:a9:ee:c7:7d:ba:cf:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC
        Validity
            Not Before: Feb  4 18:00:24 2025 GMT
            Not After : Feb  3 18:05:24 2026 GMT
        Subject: CN=F02D564E890AF7C7B91809A6A045608548606981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:07:7b:18:a7:09:fd:5f:1d:f2:b6:ab:c3:3d:
                    0a:de:2e:70:cc:71:90:89:05:af:d8:32:4c:57:da:
                    36:65:9e:5c:0e:5f:3f:26:05:78:87:f8:8e:2d:82:
                    d6:00:3d:c5:f1:49:01:9c:3c:c2:18:ce:92:a6:0b:
                    be:16:6c:e2:c2:8c:d1:af:0c:95:25:9f:22:84:68:
                    c9:02:eb:5e:6a:9c:25:e5:fa:55:0b:03:fb:18:d3:
                    0a:fe:17:4d:fb:34:e9:42:40:c1:fd:7e:b3:69:d2:
                    e4:49:b6:03:f3:96:61:73:60:36:97:dc:c7:1d:2b:
                    62:e2:ab:09:fa:71:ea:8a:3c:a3:19:5f:50:0c:9f:
                    41:36:0b:51:a1:63:2c:d2:fa:4c:fa:85:73:76:94:
                    8d:ec:eb:f6:e9:6d:38:6b:34:4b:cc:30:2e:39:2e:
                    b6:46:5c:46:d0:ea:3c:9f:5b:75:ae:cb:8f:e7:8c:
                    c0:01:c9:06:bd:5e:6f:19:be:7b:84:68:7f:c4:49:
                    34:54:e2:f4:10:37:07:91:2e:8b:69:14:ca:60:d0:
                    95:f9:f9:cd:f6:99:27:4a:8b:f8:f6:69:b6:82:57:
                    22:bd:7c:45:a3:31:19:37:a7:5c:59:91:df:89:bf:
                    f4:01:b8:0e:ef:6f:d6:e6:6d:e3:01:3f:43:be:1f:
                    a0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:56:4E:89:0A:F7:C7:B9:18:09:A6:A0:45:60:85:48:60:69:81
            X509v3 Authority Key Identifier:
                keyid:D0:53:F7:D4:2F:C9:FD:03:55:6A:9F:3D:2A:F9:E3:D2:22:1B:AD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D053F7D42FC9FD03556A9F3D2AF9E3D2221BADFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71F989F8C5FF9E9E126C5F90FEF9F95A13F2F7E810F68D0E441664BE3FA9C024/0/323830313a3165303a3a2f34332d3433203d3e203237383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         8b:8b:ce:2c:82:aa:a7:c0:68:cf:f2:03:24:00:6d:d3:48:b4:
         b4:80:48:b6:c1:74:62:ed:95:eb:ec:c6:99:3c:2b:f9:05:54:
         a5:26:68:f5:0c:4b:11:4d:ec:69:c7:d8:d3:85:0b:a8:5c:c3:
         e5:6e:68:1b:71:45:5d:0f:37:fb:37:dc:03:2a:33:29:55:a5:
         e1:96:85:fa:03:8b:74:da:c7:95:be:4c:56:70:34:84:4b:1d:
         bc:b0:8e:d3:dc:0a:9f:97:9d:ea:64:02:81:ba:a3:6a:41:3b:
         31:1b:a6:be:33:b8:32:c0:89:c4:7f:1d:f9:53:cc:f5:92:82:
         d6:92:88:4e:1f:28:3e:d7:99:e2:83:82:4c:22:c4:da:1b:63:
         a8:9c:76:89:33:4c:22:37:c3:a6:7f:13:bc:57:fe:fa:7e:5a:
         b0:26:2a:1e:eb:e2:3f:20:be:56:4b:0f:8a:a8:5b:39:c1:53:
         91:a4:24:ce:a9:4a:b6:72:40:e3:2b:f9:7d:81:2b:c1:77:9a:
         d1:0a:af:93:f0:69:65:74:46:ca:17:a8:f6:a0:05:c2:b2:e1:
         fa:87:24:2a:d5:b5:b1:d6:2f:67:0a:e1:7c:c4:83:0c:1c:a0:
         a5:b9:92:3e:d4:9e:45:e7:39:6c:c4:e8:14:66:6a:b9:11:4d:
         aa:9b:5f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:41:42 2025 by rpki-client