Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/323830333a353163303a3a2f33322d3332203d3e20323632313831.roa
File:                     323830333a353163303a3a2f33322d3332203d3e20323632313831.roa (raw, json)
Hash identifier:          0q3+yvO01PQcE0Jg4CzaN3sw7O3fCReDya/HiXzyAkw=
Subject key identifier:   51:DF:A5:55:B1:44:AE:A1:94:01:B4:DB:FC:35:E3:90:A3:88:33:98
Certificate issuer:       /CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA
Certificate serial:       474054241332F66CC7C3ADE3E33F6933D45959F5
Authority key identifier: BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/323830333a353163303a3a2f33322d3332203d3e20323632313831.roa
Signing time:             Tue 04 Feb 2025 18:20:23 +0000
ROA not before:           Tue 04 Feb 2025 18:15:23 +0000
ROA not after:            Tue 03 Feb 2026 18:20:23 +0000
asID:                     262181
IP address blocks:        2803:51c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:40:54:24:13:32:f6:6c:c7:c3:ad:e3:e3:3f:69:33:d4:59:59:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA
        Validity
            Not Before: Feb  4 18:15:23 2025 GMT
            Not After : Feb  3 18:20:23 2026 GMT
        Subject: CN=51DFA555B144AEA19401B4DBFC35E390A3883398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:54:b9:a8:06:3e:d6:54:53:92:84:43:d7:
                    fb:2e:fc:a1:36:01:f7:f1:81:94:be:fc:40:73:a9:
                    6e:98:23:88:65:7b:e5:b4:44:0e:60:64:67:43:7e:
                    86:cb:e3:29:30:2c:fd:80:45:3d:c8:c9:b1:7f:35:
                    70:07:5f:94:2a:95:c5:ca:99:8c:82:9c:69:08:3e:
                    0f:8a:9f:42:88:5d:06:80:5e:7b:4c:b2:4c:36:da:
                    ff:40:e8:75:27:cc:9b:74:8c:28:f3:96:be:d8:36:
                    ec:13:ad:2d:c4:8f:53:81:d3:87:a1:41:48:a3:42:
                    a8:a7:c6:a6:36:db:37:dc:38:46:f7:a3:01:af:46:
                    14:9b:c1:1a:f7:3b:4b:17:c8:e6:f9:49:54:d8:64:
                    13:6a:30:60:d6:26:3b:b2:45:87:cf:b7:13:75:d4:
                    b0:2d:f4:fd:aa:31:00:9a:69:64:2e:11:31:80:7e:
                    cf:57:56:2e:3d:0d:f5:23:ec:17:46:4e:ab:56:46:
                    af:2c:e0:57:60:2f:92:19:62:b3:89:a8:37:75:b7:
                    50:26:11:6b:07:ee:f6:ef:ef:cf:af:02:1a:78:c5:
                    89:b8:c4:3e:0e:3f:8f:32:7c:3d:78:54:84:4d:80:
                    a5:4a:5e:dc:12:68:a3:c8:70:85:29:ea:62:c9:89:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DF:A5:55:B1:44:AE:A1:94:01:B4:DB:FC:35:E3:90:A3:88:33:98
            X509v3 Authority Key Identifier:
                keyid:BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/323830333a353163303a3a2f33322d3332203d3e20323632313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:51c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:a3:ce:ed:09:32:e3:45:db:b2:43:1d:b1:34:bd:28:d1:90:
         20:73:d3:bb:31:cd:28:fd:4c:e8:01:28:dc:06:d8:b8:65:5a:
         7a:bf:e7:d1:cd:61:75:38:df:e8:8f:df:3c:a4:6c:81:37:1e:
         82:b2:79:fb:6a:54:f9:49:28:71:6b:93:18:0e:e2:b0:04:93:
         28:c4:e6:b1:d2:d0:5c:17:3e:e8:0e:c2:77:88:3b:22:02:ce:
         27:a9:31:f5:6d:02:98:54:41:fb:8c:e4:ed:9b:6a:eb:a9:06:
         2b:ff:e0:11:0b:df:e0:68:35:a1:fe:a5:c0:d2:1c:66:76:23:
         24:af:02:4a:88:c8:8b:27:46:4e:c8:22:0e:e5:ca:46:4c:d1:
         48:df:f1:55:53:0b:87:e1:7a:67:8f:05:22:ef:98:81:90:ee:
         00:84:29:b7:69:bc:9b:94:af:8d:1f:d6:2d:16:82:af:15:5b:
         7c:9e:88:15:7b:72:86:22:f8:71:be:51:3e:49:82:81:e5:47:
         85:b2:a8:11:e6:76:20:7f:c1:ec:6f:f1:27:05:1e:b7:d8:f1:
         b3:bd:2c:54:ca:e5:ff:cb:3e:b8:21:73:ba:fb:25:e5:08:55:
         7d:3f:ec:6f:38:ac:ab:98:96:e8:55:80:5f:b1:be:e2:66:51:
         42:8d:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:33 2025 by rpki-client