Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/323830333a333532303a3a2f33322d3434203d3e20323636363932.roa
File:                     323830333a333532303a3a2f33322d3434203d3e20323636363932.roa (raw, json)
Hash identifier:          486YuHb0TZkCTZ4LEnj3J5dcWO1avJ4iXQ2N89HUlJs=
Subject key identifier:   D6:18:49:DD:AC:1B:9F:6C:04:95:33:75:C6:63:D5:28:7E:6D:6C:95
Certificate issuer:       /CN=FB9D18F1F20CEBD4BF01B9B1704F55049B256872
Certificate serial:       4092D06CD15CB24255B4C49AD3679AACF5ADF1DF
Authority key identifier: FB:9D:18:F1:F2:0C:EB:D4:BF:01:B9:B1:70:4F:55:04:9B:25:68:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/323830333a333532303a3a2f33322d3434203d3e20323636363932.roa
Signing time:             Tue 04 Feb 2025 18:55:59 +0000
ROA not before:           Tue 04 Feb 2025 18:50:59 +0000
ROA not after:            Tue 03 Feb 2026 18:55:59 +0000
asID:                     266692
IP address blocks:        2803:3520::/32 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:92:d0:6c:d1:5c:b2:42:55:b4:c4:9a:d3:67:9a:ac:f5:ad:f1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9D18F1F20CEBD4BF01B9B1704F55049B256872
        Validity
            Not Before: Feb  4 18:50:59 2025 GMT
            Not After : Feb  3 18:55:59 2026 GMT
        Subject: CN=D61849DDAC1B9F6C04953375C663D5287E6D6C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a1:ad:a4:fd:5a:64:6d:d9:fa:e3:a5:a3:3d:
                    24:de:4d:e3:1c:b4:71:2a:00:41:5f:4f:13:b6:fd:
                    62:4f:69:33:3c:b7:90:67:8a:0b:30:15:f0:18:1d:
                    5c:a8:c7:11:97:64:d8:1f:94:6c:e5:d7:bd:68:28:
                    86:3d:24:8a:39:d6:b8:ec:47:29:d3:51:0d:49:9c:
                    e1:f8:26:72:3e:67:91:a1:2b:7f:6e:ac:90:70:81:
                    b3:fd:9e:9f:e5:22:0c:2b:81:37:78:03:e6:c7:02:
                    6e:94:c4:e9:ae:4b:7d:39:ea:c3:3f:c4:28:2c:53:
                    b2:3a:50:f5:20:c8:a2:73:5a:c4:dd:73:44:e1:2c:
                    43:8b:cb:51:fc:76:be:98:73:2f:50:c1:d0:9a:56:
                    15:99:7d:9c:aa:d5:ab:00:4e:7c:2e:ca:d1:1a:e9:
                    86:0a:a5:69:63:be:2e:d2:88:a8:69:c7:75:ac:b5:
                    72:33:b6:35:c0:c8:82:53:6f:3e:1d:8c:63:1b:90:
                    3f:0d:17:4f:ef:9d:c2:4f:8a:94:16:12:fe:79:3f:
                    b6:ae:e5:cd:c6:36:84:3b:a9:5b:75:6c:1b:e6:2c:
                    64:3e:af:1d:9c:c5:04:29:ad:e9:a9:a4:ef:ad:fb:
                    8d:20:57:c3:76:ae:5c:5f:0b:63:77:e1:13:34:50:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:18:49:DD:AC:1B:9F:6C:04:95:33:75:C6:63:D5:28:7E:6D:6C:95
            X509v3 Authority Key Identifier:
                keyid:FB:9D:18:F1:F2:0C:EB:D4:BF:01:B9:B1:70:4F:55:04:9B:25:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB9D18F1F20CEBD4BF01B9B1704F55049B256872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73D4AC74FA72F544C7EDB1DE18DC03FD4713C042BC491FD9479312F262F4EED0/0/323830333a333532303a3a2f33322d3434203d3e20323636363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3520::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:e2:e8:6a:da:69:38:9d:db:2c:11:7f:c9:c4:17:eb:25:
         0f:4c:47:28:e1:0a:4d:83:3b:62:d9:23:5c:0e:34:e0:46:5f:
         c8:e9:c0:0c:bd:09:dc:c3:f0:97:a4:95:6f:29:93:4a:05:8d:
         01:c3:0e:29:f0:42:30:8d:32:f6:b4:8b:54:2c:c5:de:e7:e8:
         a7:ca:81:cc:15:c0:3a:f7:87:d8:f3:62:9a:b3:49:b2:4c:52:
         26:00:b1:64:e8:c5:c5:08:1c:63:27:4a:35:45:45:fe:c7:2e:
         fa:40:25:46:50:cb:63:3a:49:ad:af:45:f2:28:06:bb:d6:87:
         93:0c:5d:8d:49:25:68:54:0c:18:80:12:3e:ed:59:87:fb:68:
         5c:ac:64:32:02:2a:3f:a3:db:0b:68:ab:32:73:8e:76:90:d2:
         26:ba:e8:45:b2:63:c0:a4:ce:f5:9b:d4:27:24:b2:16:a1:62:
         50:47:c5:32:5f:db:43:b4:eb:2e:ec:f9:72:ee:e9:af:87:1e:
         b9:8d:e4:d2:b6:f6:9f:42:5d:22:62:bc:4e:c3:b6:8d:7e:3e:
         11:12:1e:3c:8a:bf:68:6c:2f:ce:9d:bf:54:60:f1:f6:76:48:
         6c:d8:3e:e0:5f:1a:67:98:66:4c:5b:6e:0e:fb:a9:1b:5a:a4:
         dc:e8:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----