Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a393030303a3a2f33362d3336203d3e203237383138.roa
File:                     323830333a333338303a393030303a3a2f33362d3336203d3e203237383138.roa (raw, json)
Hash identifier:          8cauuC/S4ED154SeUbdJRPs9A8ijEsdW/rkWZpuR2Wc=
Subject key identifier:   1C:12:98:E5:4D:B0:53:09:33:26:DE:37:09:2E:A2:5D:44:5B:10:EC
Certificate issuer:       /CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
Certificate serial:       632D66B437C7EA64D7E25B1146C29B08E9A886C9
Authority key identifier: 20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a393030303a3a2f33362d3336203d3e203237383138.roa
Signing time:             Tue 04 Feb 2025 18:25:05 +0000
ROA not before:           Tue 04 Feb 2025 18:20:05 +0000
ROA not after:            Tue 03 Feb 2026 18:25:05 +0000
asID:                     27818
IP address blocks:        2803:3380:9000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2d:66:b4:37:c7:ea:64:d7:e2:5b:11:46:c2:9b:08:e9:a8:86:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DDB465F07E0C4CF8244E3A2605195B41ADA3BB
        Validity
            Not Before: Feb  4 18:20:05 2025 GMT
            Not After : Feb  3 18:25:05 2026 GMT
        Subject: CN=1C1298E54DB053093326DE37092EA25D445B10EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:84:7d:e3:96:87:4e:ff:b1:9a:95:ba:35:
                    76:eb:c2:d6:55:75:35:4e:48:be:50:68:43:77:22:
                    0d:48:13:ce:7f:58:9f:cb:75:40:f5:72:d5:81:b4:
                    ab:bb:db:a4:0a:e6:76:45:e3:6b:a4:2a:22:5a:dd:
                    16:c0:27:55:7f:ed:c1:46:40:cc:4b:15:fa:8a:27:
                    fd:cf:97:1c:db:7e:cf:dc:9c:9f:ec:72:c7:48:0c:
                    33:43:cd:ab:8c:c0:37:25:07:47:f1:ed:cd:40:5a:
                    29:d8:c8:00:88:66:9a:6e:17:5a:5c:14:d2:90:9c:
                    35:de:4e:f4:60:ff:8a:86:69:1f:bc:81:64:ad:17:
                    c6:3f:9e:fa:46:ed:4c:43:68:a6:00:90:52:49:1c:
                    f0:f6:8e:14:dd:f5:11:7c:a4:af:f8:19:47:c6:df:
                    0a:c6:e8:69:43:65:d0:12:e7:4c:60:b2:6e:d0:d6:
                    24:8d:6a:5f:f6:8a:9d:a1:c6:44:a4:af:8c:ce:65:
                    df:23:9d:5e:fb:7f:04:c6:49:4a:fa:e9:25:9c:96:
                    01:b6:0c:74:0e:c3:cc:1e:af:a9:68:ba:92:dc:9a:
                    45:0a:99:eb:65:97:86:59:a8:7f:a1:cc:e1:ba:b0:
                    35:da:0f:2b:34:58:c0:cd:73:69:51:a3:69:a0:16:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:12:98:E5:4D:B0:53:09:33:26:DE:37:09:2E:A2:5D:44:5B:10:EC
            X509v3 Authority Key Identifier:
                keyid:20:DD:B4:65:F0:7E:0C:4C:F8:24:4E:3A:26:05:19:5B:41:AD:A3:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20DDB465F07E0C4CF8244E3A2605195B41ADA3BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E6635FA2162D733AE6563393FA233436377B0DC54E32CEA281C301F7134FFD4/0/323830333a333338303a393030303a3a2f33362d3336203d3e203237383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3380:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         80:77:e1:2e:f0:73:67:6e:c3:68:dd:26:c9:bd:5a:1f:04:b9:
         01:43:3c:ef:9f:ed:85:59:0f:1e:b1:ff:61:1b:17:93:ef:91:
         24:0b:bb:52:bf:17:da:eb:34:75:d2:47:59:37:83:9d:db:e6:
         3a:61:a4:98:4c:ba:ea:f4:68:ab:a5:f4:eb:8e:c5:2f:c8:99:
         9f:de:b9:17:f8:8b:3c:5a:f3:9e:45:f6:ce:4a:ae:97:5e:6d:
         d1:29:35:7d:d4:a5:3e:cd:50:a8:b0:89:ee:8d:50:51:5b:9b:
         5d:28:ae:1b:4e:08:82:4e:7b:07:a0:95:a4:b6:b2:f5:da:46:
         a3:6f:94:06:af:d5:a1:f9:a4:9e:c2:e7:47:16:0e:9d:18:0d:
         0a:cf:15:c2:9b:c1:31:e3:22:13:e6:62:71:6d:32:72:86:9d:
         78:31:e9:69:4d:10:7b:b7:d0:8c:64:ef:21:f2:25:60:91:8f:
         d7:17:d7:1d:4e:dd:53:cf:83:5e:1c:eb:3b:0d:e0:55:e6:72:
         7a:46:60:b9:7a:fb:4d:c5:c1:8b:8f:e4:bd:1c:d9:0e:5f:f2:
         bd:f4:5c:39:ae:8d:ad:b2:1b:c2:1c:6f:37:85:0c:9a:23:c2:
         aa:19:45:25:08:17:3d:78:d3:eb:1c:68:82:5d:c6:f8:1b:4e:
         9c:05:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----