Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/853C5A579860D53D932FCDF506CF811478958014DA919059A7F8E869788191BE/0/323830333a626665303a3a2f33322d3438203d3e20323731373931.roa
File:                     323830333a626665303a3a2f33322d3438203d3e20323731373931.roa (raw, json)
Hash identifier:          l2YYHU615HBuK632SzHSES+Q2rFOSnBsagkEXLKRE3E=
Subject key identifier:   14:90:9C:B9:A2:4A:68:0B:2E:3A:B2:4D:A5:3C:94:64:A9:BC:85:7C
Certificate issuer:       /CN=F15D2B844C842495D2E1556A76AEFC1667610B87
Certificate serial:       4939F4164AFE2918893F6567B7351008EF20A50A
Authority key identifier: F1:5D:2B:84:4C:84:24:95:D2:E1:55:6A:76:AE:FC:16:67:61:0B:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15D2B844C842495D2E1556A76AEFC1667610B87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/853C5A579860D53D932FCDF506CF811478958014DA919059A7F8E869788191BE/0/323830333a626665303a3a2f33322d3438203d3e20323731373931.roa
Signing time:             Tue 04 Feb 2025 18:03:33 +0000
ROA not before:           Tue 04 Feb 2025 17:58:33 +0000
ROA not after:            Tue 03 Feb 2026 18:03:33 +0000
asID:                     271791
IP address blocks:        2803:bfe0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:39:f4:16:4a:fe:29:18:89:3f:65:67:b7:35:10:08:ef:20:a5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15D2B844C842495D2E1556A76AEFC1667610B87
        Validity
            Not Before: Feb  4 17:58:33 2025 GMT
            Not After : Feb  3 18:03:33 2026 GMT
        Subject: CN=14909CB9A24A680B2E3AB24DA53C9464A9BC857C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:4a:a5:38:ed:dc:74:07:61:e9:b3:89:1b:
                    1a:0b:f5:3b:e7:a0:d6:81:54:d8:10:6c:f4:2a:b0:
                    b1:31:75:15:3e:7e:6a:a2:88:23:4f:67:ff:75:86:
                    fd:29:27:2f:a9:4b:4f:e7:d2:b3:b0:ec:f1:3b:83:
                    95:f6:cf:a2:c4:a8:60:da:d9:64:29:c9:25:bc:cd:
                    f0:fd:56:f3:ae:16:89:d1:fe:48:3e:6c:c4:09:ac:
                    79:2f:71:96:d8:73:18:67:9b:fa:d9:42:79:90:bd:
                    90:8f:c9:a9:61:82:89:46:91:a8:1f:53:d3:4a:75:
                    e6:fd:41:20:53:f9:f1:19:1d:d5:e4:c0:d4:9c:ac:
                    3a:92:f7:70:e6:f0:3d:04:8b:a9:ee:9a:bf:cc:67:
                    65:6e:22:1c:64:33:53:ef:27:8f:e8:74:16:30:04:
                    3a:95:56:49:22:93:e4:d8:1f:55:8c:94:45:37:7f:
                    27:8c:93:f3:bb:8d:8e:75:b4:ba:7f:8b:16:25:5d:
                    62:ff:45:ce:7c:d6:c9:6c:ab:68:6e:e3:0c:d4:94:
                    d8:6b:f9:af:52:44:04:13:a7:95:59:85:f0:e2:54:
                    53:c2:b6:e1:65:bd:91:51:ce:68:30:4c:cb:f0:f2:
                    69:7d:f7:68:86:f8:34:e4:27:21:e5:7e:63:b3:e4:
                    70:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:90:9C:B9:A2:4A:68:0B:2E:3A:B2:4D:A5:3C:94:64:A9:BC:85:7C
            X509v3 Authority Key Identifier:
                keyid:F1:5D:2B:84:4C:84:24:95:D2:E1:55:6A:76:AE:FC:16:67:61:0B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/853C5A579860D53D932FCDF506CF811478958014DA919059A7F8E869788191BE/0/F15D2B844C842495D2E1556A76AEFC1667610B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15D2B844C842495D2E1556A76AEFC1667610B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/853C5A579860D53D932FCDF506CF811478958014DA919059A7F8E869788191BE/0/323830333a626665303a3a2f33322d3438203d3e20323731373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:cf:ef:51:8a:1e:bc:05:34:4a:22:77:1f:e5:62:6b:7c:39:
         f2:85:52:f9:88:d9:60:87:25:21:a3:10:99:7a:65:30:88:07:
         a3:51:b0:3a:62:55:0c:65:fe:f6:41:e1:9c:e6:2c:43:f2:88:
         97:f2:4a:92:9c:0d:43:54:0b:9e:1b:9e:34:a5:40:ef:91:85:
         e1:48:4c:c5:76:5b:60:dd:2c:d0:24:ee:cc:64:e7:6e:bc:4a:
         36:39:fc:3a:d9:41:b8:66:30:7a:9c:05:7f:63:a0:47:09:18:
         6b:ee:8c:68:f6:53:8b:27:2b:a5:e4:b2:78:4f:15:c4:6f:33:
         e5:c8:c9:39:10:14:1d:5e:a0:7c:75:ee:bc:94:93:1e:ab:a6:
         bd:5d:5b:63:3f:30:14:18:78:93:bd:35:45:3b:4e:20:21:4e:
         6b:9b:c0:7d:e9:92:1f:14:d3:da:77:42:55:ae:49:41:a8:34:
         a5:73:59:25:4e:68:ff:2a:c6:03:61:70:a7:b5:8a:d3:c7:5b:
         d2:01:0e:4c:a3:16:49:ae:1f:53:98:a8:a2:20:a8:61:77:2f:
         61:fd:4d:96:9d:d7:76:15:e8:04:48:2b:30:f2:71:18:d2:c9:
         93:18:93:3d:b0:f2:e7:53:57:b4:ac:5e:12:75:3d:48:3a:53:
         e6:f2:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----