Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3130303a3a2f34302d3430203d3e20323636363739.roa
File:                     323830333a663932303a3130303a3a2f34302d3430203d3e20323636363739.roa (raw, json)
Hash identifier:          yPhSXsoSthR9Hccs0pWkboxOS+jDEj4iHohgp4EaINg=
Subject key identifier:   3D:52:BE:80:83:55:1D:BF:BE:83:B3:15:5E:EE:2A:FB:77:3D:55:DB
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       21D45F719EB0FBEA007407F0D8A7C1A3AD1E4B4C
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3130303a3a2f34302d3430203d3e20323636363739.roa
Signing time:             Wed 19 Feb 2025 04:15:02 +0000
ROA not before:           Wed 19 Feb 2025 04:10:02 +0000
ROA not after:            Wed 18 Feb 2026 04:15:02 +0000
asID:                     266679
IP address blocks:        2803:f920:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d4:5f:71:9e:b0:fb:ea:00:74:07:f0:d8:a7:c1:a3:ad:1e:4b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Feb 19 04:10:02 2025 GMT
            Not After : Feb 18 04:15:02 2026 GMT
        Subject: CN=3D52BE8083551DBFBE83B3155EEE2AFB773D55DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:ed:75:75:15:68:32:6b:63:5b:88:31:fd:
                    cf:27:99:95:80:a9:66:ca:bd:9d:24:54:89:3f:9d:
                    76:6d:82:a0:ee:19:05:05:77:d6:0f:5d:54:0a:33:
                    59:5c:01:05:1d:8e:33:59:27:70:24:cc:4c:68:52:
                    1d:27:ed:bc:69:22:a3:1e:3b:33:e9:ee:e6:eb:7f:
                    fe:2a:e7:97:e3:50:87:8f:19:f3:fb:3a:c2:1e:f2:
                    58:d6:09:6f:ac:a2:cd:7b:5c:f2:c9:90:51:8b:28:
                    9b:21:68:2e:7a:81:46:ac:bf:79:9c:3e:1f:0d:6e:
                    3c:a2:81:5c:61:da:d0:8d:9d:13:07:72:46:60:48:
                    6e:0c:64:bf:89:c7:f9:f5:6a:8a:2c:c8:bd:d5:15:
                    bb:39:96:2f:d7:7a:d4:c5:41:af:ac:1d:c5:e7:48:
                    69:6f:f7:7a:79:08:19:0e:7e:4d:0c:46:2a:83:aa:
                    ce:a7:e2:be:15:59:61:7a:35:1b:05:09:b6:f3:98:
                    01:97:89:79:cc:6f:03:e1:23:d5:e1:b9:7f:fb:51:
                    2b:ca:9e:1f:ad:76:6d:9f:cb:ee:e6:43:ac:7f:87:
                    af:47:66:fa:0a:03:ec:1f:03:f0:cd:b1:d0:33:15:
                    dc:2a:1d:77:a8:19:f0:77:39:d1:98:d8:83:d9:64:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:52:BE:80:83:55:1D:BF:BE:83:B3:15:5E:EE:2A:FB:77:3D:55:DB
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/323830333a663932303a3130303a3a2f34302d3430203d3e20323636363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f920:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:23:72:26:f9:51:aa:31:62:22:ae:6e:2d:87:a6:ea:3d:6a:
         10:c3:05:ce:ef:e6:15:45:ee:57:0c:4a:53:e9:86:7e:c1:68:
         8f:63:90:7e:ea:7c:71:a5:c6:53:45:a9:33:e7:97:d8:01:cb:
         86:f4:b0:aa:24:67:d6:af:6b:4c:7b:65:a2:27:25:94:fa:dd:
         7d:e5:7a:f4:05:51:ea:30:1c:53:7b:df:16:55:84:c9:c1:ba:
         a1:95:b9:17:e7:02:99:ba:fc:e6:ec:44:a1:61:80:a6:98:b7:
         d6:38:23:66:d7:47:72:30:f5:1d:d3:14:6f:4d:5c:1a:4f:e1:
         7c:b3:8d:c6:52:f5:13:ef:a3:d2:7c:9f:ba:6f:8c:7a:2e:4c:
         90:a7:e2:56:28:9a:83:15:6b:a6:14:7a:9d:d1:26:6b:9a:04:
         d4:46:7d:c2:ff:7f:fa:46:07:93:bf:81:35:30:ae:41:77:9a:
         d5:d1:bf:ef:d4:30:ce:89:b5:43:e0:69:02:57:e3:5a:ae:b3:
         4c:aa:57:d9:79:cd:c6:1a:c9:c9:0c:97:b5:f4:e1:ed:05:42:
         1a:a5:4f:08:ba:4f:11:37:ef:d0:4e:2b:35:26:02:ca:ce:6f:
         21:01:b6:bb:27:bd:94:fa:6d:4a:45:de:43:fe:33:70:f5:dc:
         4e:e4:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----