Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/783A4AF7372D60D766286B5A9D3D74DA8A314417E668E70BFF8BE7C313480C8D/0/323830333a373035303a3a2f33322d3438203d3e20323733313033.roa
File:                     323830333a373035303a3a2f33322d3438203d3e20323733313033.roa (raw, json)
Hash identifier:          tvQho69OSg8DcKnsPMyb4QlE/3sLFwNJYE0+yWen4rI=
Subject key identifier:   6C:D4:8A:AB:CA:1F:72:38:B0:8F:A5:39:F8:5C:8A:23:66:D8:17:31
Certificate issuer:       /CN=E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD
Certificate serial:       458BD4984AA56D05AFFED21E312193D86EC309F5
Authority key identifier: E1:E4:22:82:BE:74:0A:42:DA:7F:F3:B6:6D:83:D1:A5:E6:A5:C4:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/783A4AF7372D60D766286B5A9D3D74DA8A314417E668E70BFF8BE7C313480C8D/0/323830333a373035303a3a2f33322d3438203d3e20323733313033.roa
Signing time:             Tue 04 Feb 2025 18:53:09 +0000
ROA not before:           Tue 04 Feb 2025 18:48:09 +0000
ROA not after:            Tue 03 Feb 2026 18:53:09 +0000
asID:                     273103
IP address blocks:        2803:7050::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8b:d4:98:4a:a5:6d:05:af:fe:d2:1e:31:21:93:d8:6e:c3:09:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD
        Validity
            Not Before: Feb  4 18:48:09 2025 GMT
            Not After : Feb  3 18:53:09 2026 GMT
        Subject: CN=6CD48AABCA1F7238B08FA539F85C8A2366D81731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:d4:cd:61:4e:b3:03:b3:37:7d:51:a6:c0:
                    48:88:1b:38:7e:48:5a:b5:5f:23:57:dc:8a:78:31:
                    27:7e:74:c1:e9:c3:cc:5c:56:ea:c8:44:31:0e:d3:
                    cb:08:61:7f:61:bb:ae:d8:0c:a1:34:e6:6f:80:1b:
                    e0:d3:42:07:d0:e1:7e:54:07:a8:c6:79:09:02:a1:
                    b4:15:9f:9a:b7:2d:71:ce:65:7b:85:21:6f:29:9a:
                    b1:0b:bd:d3:9f:bb:ea:43:99:c4:e8:14:4b:65:f1:
                    da:ac:bd:18:5a:40:65:e1:5e:c5:cf:97:7f:45:61:
                    c8:0e:dd:37:75:30:1d:e8:64:ab:45:88:c7:f9:9d:
                    0a:c9:27:6b:0a:54:9a:3e:20:fb:ea:94:b4:9d:ea:
                    ea:48:5f:c2:5d:42:96:9b:33:24:ee:a2:01:80:bd:
                    3b:98:ea:b3:2e:d5:9d:f6:53:1a:ec:86:4e:65:30:
                    c0:f6:6a:3a:f4:9d:d4:fc:ad:f1:b1:4e:31:d7:98:
                    bf:bd:d8:7f:67:b3:ae:01:99:2e:74:8a:0b:dd:ac:
                    59:35:cb:ac:03:76:06:de:b1:9f:1e:45:a8:f0:98:
                    78:d8:18:41:66:2d:18:45:cd:78:1a:4d:bd:62:59:
                    09:3d:62:6a:ea:a7:96:81:ae:fd:13:d2:e6:8b:82:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:8A:AB:CA:1F:72:38:B0:8F:A5:39:F8:5C:8A:23:66:D8:17:31
            X509v3 Authority Key Identifier:
                keyid:E1:E4:22:82:BE:74:0A:42:DA:7F:F3:B6:6D:83:D1:A5:E6:A5:C4:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/783A4AF7372D60D766286B5A9D3D74DA8A314417E668E70BFF8BE7C313480C8D/0/E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1E42282BE740A42DA7FF3B66D83D1A5E6A5C4BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/783A4AF7372D60D766286B5A9D3D74DA8A314417E668E70BFF8BE7C313480C8D/0/323830333a373035303a3a2f33322d3438203d3e20323733313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7050::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:65:6b:b6:ab:ef:b1:90:12:d2:7f:4f:32:e5:0f:36:34:0b:
         f5:47:a2:ce:4d:5c:67:6c:0c:19:ab:cb:fd:cf:4d:6a:e8:d3:
         67:b6:dd:4c:ae:e8:10:ba:0f:2f:c3:61:3f:77:ff:63:ad:8a:
         81:0a:7e:53:60:30:ed:fc:e3:39:5e:52:ca:07:95:5a:91:56:
         ea:c1:e9:84:d6:48:c9:ce:77:64:5b:f6:2c:e8:80:62:9d:48:
         63:cf:d8:cb:aa:0a:6d:b9:4f:bb:ed:e5:23:b3:01:4b:72:9a:
         bc:48:2e:82:63:df:c2:5f:75:09:4d:de:75:91:37:0a:f6:24:
         d9:22:41:96:7c:fe:90:8b:db:72:c5:9e:fc:2b:ee:5b:c8:23:
         cb:16:9c:29:7d:ec:d9:c7:26:dc:e5:64:71:33:2e:41:90:87:
         ed:c7:3b:a9:d0:8a:8c:c3:b4:a5:e7:39:de:e9:e8:e0:68:bd:
         49:91:be:f2:51:76:6e:12:e3:56:5c:94:d6:a4:0d:e7:ad:f4:
         4e:e4:36:36:ef:2c:73:6f:a5:2c:5a:08:2a:23:77:8a:21:76:
         31:75:b8:bf:1c:e5:67:75:98:67:b8:3c:ba:f7:c5:62:cc:f5:
         8d:f8:18:79:e0:3d:36:78:51:41:51:d0:6f:43:f6:fa:95:2d:
         39:44:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----