Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/323830333a313661303a323a3a2f34382d3438203d3e20323632323036.roa
File:                     323830333a313661303a323a3a2f34382d3438203d3e20323632323036.roa (raw, json)
Hash identifier:          qeJsRYbNF4ZcRx3Ei7gz8x5puX2lqcgi4xmix8bARuc=
Subject key identifier:   5B:01:9B:C1:7F:CE:B8:BB:06:10:CF:06:25:DF:52:6D:AC:A6:B1:A8
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       48A60F396843DCA0FC94D39749E5BAEBBBEFEAC5
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/323830333a313661303a323a3a2f34382d3438203d3e20323632323036.roa
Signing time:             Tue 04 Feb 2025 18:38:40 +0000
ROA not before:           Tue 04 Feb 2025 18:33:40 +0000
ROA not after:            Tue 03 Feb 2026 18:38:40 +0000
asID:                     262206
IP address blocks:        2803:16a0:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a6:0f:39:68:43:dc:a0:fc:94:d3:97:49:e5:ba:eb:bb:ef:ea:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:40 2025 GMT
            Not After : Feb  3 18:38:40 2026 GMT
        Subject: CN=5B019BC17FCEB8BB0610CF0625DF526DACA6B1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8b:a6:bc:dc:51:7a:d4:a9:a0:d2:35:93:43:
                    34:da:5b:e8:15:df:f8:76:48:ab:62:2e:68:a6:af:
                    02:fb:ea:9d:1f:d5:4a:76:30:e8:a9:39:2b:2c:22:
                    44:7c:cd:6c:29:3c:2c:d1:31:72:5d:e5:c1:98:0d:
                    06:3f:e1:d1:75:c3:74:64:2f:84:1f:00:9a:70:eb:
                    73:95:13:01:91:93:c5:3e:1f:71:e7:88:99:84:7e:
                    c8:31:5f:8f:e2:23:33:a5:1d:cb:e2:df:6a:ec:89:
                    0c:21:7d:fe:a7:3f:1e:3e:bc:0a:94:d0:6d:37:b8:
                    86:7d:fd:e4:11:c0:57:4c:ab:d1:04:ec:a2:96:dc:
                    48:5e:57:39:a1:02:02:02:d0:d6:13:27:59:57:55:
                    b4:c5:1d:78:48:64:25:76:29:24:28:7b:9c:d7:d9:
                    5b:bc:23:85:c9:5c:04:4b:c2:e7:e9:2f:bb:da:1a:
                    c8:cb:04:c9:f8:1a:f5:87:3a:b4:cc:99:4e:91:f4:
                    9a:73:08:68:8a:f5:57:89:7a:cb:d3:40:03:a1:f0:
                    6c:e4:b3:34:87:86:a2:48:39:40:4d:9a:60:87:3a:
                    bb:c1:61:0d:ed:22:9a:57:0f:d7:99:d9:31:ab:a8:
                    e5:82:87:c7:7d:fb:18:bf:75:53:14:65:e7:7c:fb:
                    35:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:9B:C1:7F:CE:B8:BB:06:10:CF:06:25:DF:52:6D:AC:A6:B1:A8
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/323830333a313661303a323a3a2f34382d3438203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:16a0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:53:02:2f:1f:cd:84:d8:be:27:20:0e:76:83:83:fa:c2:bc:
         8e:d8:33:92:64:ea:c6:ac:72:c6:a5:39:a9:f3:65:10:0e:1b:
         5c:a5:fd:ac:90:c7:8b:e8:3f:cb:95:cb:db:d9:5d:cd:e0:a8:
         d8:42:3a:eb:2f:13:3e:3a:ed:9d:b7:fd:e9:07:9a:fb:55:85:
         67:64:bd:48:69:39:66:8e:e9:25:65:5e:5a:cf:d6:8e:11:a1:
         9d:61:2b:fc:13:c0:de:1d:4a:d2:f0:54:e9:79:1e:08:b4:67:
         05:9e:94:d9:30:e1:1c:89:e8:94:b4:1b:87:ce:a4:19:9a:b0:
         88:3e:ce:cd:be:5f:10:c1:44:9f:17:2a:25:00:59:4b:9d:9d:
         bf:c9:8b:10:21:14:a7:74:da:14:ee:6b:c3:2f:b5:ae:de:7c:
         61:41:60:4c:c2:8f:9a:8b:84:94:f8:17:ad:84:22:b2:95:59:
         1e:72:e1:dd:2e:7f:84:07:63:e5:88:68:70:3e:1e:d0:af:a9:
         5e:73:88:f7:60:04:b8:c8:be:f3:95:25:56:e3:78:6f:d2:4a:
         23:f6:50:49:39:f0:5f:87:db:01:83:4a:fe:a9:0c:04:fa:f2:
         b4:96:3d:cb:2b:e5:02:70:5d:fe:75:4c:41:9b:e9:d5:98:f2:
         d3:0a:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----