Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          2NcwoaOi71nqta9NKqiep12Un7XPFeiQqlRXHCfiFzc=
Subject key identifier:   41:E7:74:09:EF:6E:E7:2D:F3:0D:BA:B5:B6:50:BB:6C:AA:E4:73:AF
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       679C3C22530B5823827AB1634F97713EEDF924B7
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 04 Feb 2025 18:25:06 +0000
ROA not before:           Tue 04 Feb 2025 18:20:06 +0000
ROA not after:            Tue 03 Feb 2026 18:25:06 +0000
asID:                     27818
IP address blocks:        2803:3380:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9c:3c:22:53:0b:58:23:82:7a:b1:63:4f:97:71:3e:ed:f9:24:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Feb  4 18:20:06 2025 GMT
            Not After : Feb  3 18:25:06 2026 GMT
        Subject: CN=41E77409EF6EE72DF30DBAB5B650BB6CAAE473AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:6d:63:6b:75:38:ac:de:fd:6f:fc:b8:d3:
                    32:af:f5:99:89:96:4f:c4:2f:52:f2:7f:c9:64:b9:
                    07:ef:41:1c:45:c0:36:f3:62:2a:11:ab:a8:72:4b:
                    5a:c4:75:9d:ce:48:93:bc:3a:18:cd:a3:8c:b5:e5:
                    34:9f:eb:7f:ae:cf:22:7a:25:20:dc:e1:b4:f7:f6:
                    4f:9c:1a:a1:b8:9a:05:b4:df:4e:3b:04:63:50:aa:
                    06:f7:d8:16:c0:71:b5:3b:e8:f9:89:b6:e2:8e:98:
                    61:d3:9a:cb:5a:f8:33:68:28:dd:fe:1c:d8:5b:c4:
                    30:f9:bd:24:c1:b3:bd:e9:af:d4:75:53:6a:f8:ed:
                    c0:f2:d8:08:ec:40:93:71:99:87:9d:b7:d2:cd:48:
                    47:72:84:23:4a:23:03:01:4f:17:fc:e5:f4:92:a6:
                    54:76:6c:43:51:94:8a:be:81:7f:66:99:2c:c1:03:
                    30:4c:c4:ae:a9:52:48:12:30:ac:cc:c8:0e:68:22:
                    31:5b:fa:87:83:3f:ea:45:01:81:97:55:fb:ea:cf:
                    bc:37:8d:6a:8c:1d:0d:74:6a:73:74:ac:19:0a:ad:
                    c8:15:01:46:f2:9f:c5:99:44:cc:f6:25:74:0a:e9:
                    26:a0:6e:13:be:97:07:f3:1f:65:ab:55:84:e6:aa:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E7:74:09:EF:6E:E7:2D:F3:0D:BA:B5:B6:50:BB:6C:AA:E4:73:AF
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a323030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b8:72:d9:6d:fe:fe:cc:bc:7d:2a:8c:09:de:43:2a:8f:a2:1b:
         5d:1a:1d:67:bc:eb:02:3c:32:dd:44:1c:36:35:38:04:93:a2:
         52:5b:29:f2:77:d5:91:74:2e:b0:d7:d3:74:05:55:69:3c:f3:
         a6:f2:0b:dc:d9:46:ab:8c:83:0b:af:5e:4a:2c:8e:2d:ea:28:
         f9:2b:40:5a:f7:16:6a:21:b8:d4:73:1a:97:b5:f2:34:64:c4:
         14:11:be:aa:01:06:85:c1:cf:1b:ea:db:84:f9:56:1d:e4:19:
         b1:2a:71:f4:3e:50:12:bd:c6:c7:7d:46:4b:9b:32:59:09:1a:
         45:5e:50:df:83:39:2d:45:19:cb:2b:ad:40:01:ab:e1:9c:6a:
         ec:f2:25:83:83:07:f9:29:3b:49:1e:2e:9e:56:5b:69:54:c5:
         3f:6e:73:74:2e:1f:7c:1f:5a:e0:e7:be:6f:55:b3:b1:97:84:
         88:f8:db:ca:da:33:97:e7:b9:45:4b:5a:fe:d2:fb:77:0d:d9:
         b6:ea:a1:8a:82:30:24:9c:b6:c7:86:00:01:be:ce:3f:68:a2:
         86:f3:a1:f7:a1:1e:83:f1:23:02:6e:45:c4:d7:39:42:97:83:
         64:33:89:da:11:f1:32:a2:57:b1:03:20:db:46:86:4f:9e:93:
         65:bb:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:57:52 2025 by rpki-client