Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/323830333a363636303a3a2f33322d3438203d3e20323637383935.roa
File:                     323830333a363636303a3a2f33322d3438203d3e20323637383935.roa (raw, json)
Hash identifier:          RzytoS9Xp46fn8KLqIZBg/NVastTuM4j+g77WIYwgcc=
Subject key identifier:   08:93:89:90:CE:6A:23:29:88:DD:19:A7:CD:D7:39:82:AD:CB:C0:DD
Certificate issuer:       /CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8
Certificate serial:       0688F8399C0C6CA4090F1BFBBF0B57A8FB60D4BB
Authority key identifier: 44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/323830333a363636303a3a2f33322d3438203d3e20323637383935.roa
Signing time:             Tue 04 Feb 2025 18:22:48 +0000
ROA not before:           Tue 04 Feb 2025 18:17:48 +0000
ROA not after:            Tue 03 Feb 2026 18:22:48 +0000
asID:                     267895
IP address blocks:        2803:6660::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:88:f8:39:9c:0c:6c:a4:09:0f:1b:fb:bf:0b:57:a8:fb:60:d4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8
        Validity
            Not Before: Feb  4 18:17:48 2025 GMT
            Not After : Feb  3 18:22:48 2026 GMT
        Subject: CN=08938990CE6A232988DD19A7CDD73982ADCBC0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a3:54:bd:41:3f:b0:18:92:78:9e:88:df:9a:
                    4b:54:20:67:f3:74:f6:ef:c5:81:52:99:e9:f4:a3:
                    97:69:aa:2d:85:f9:11:88:ea:bd:73:a6:1b:fd:f0:
                    41:98:a9:dc:58:a7:98:8f:ff:79:d4:12:c8:7c:6d:
                    4e:5a:0d:47:5a:71:d7:2e:73:bc:e8:29:d2:c9:30:
                    b1:47:bc:93:50:77:2d:c6:58:88:55:43:20:0b:e4:
                    68:c3:f7:8e:59:a6:4c:6d:8a:d7:dc:1d:c2:43:41:
                    5a:52:c0:e1:31:e6:9f:6f:61:bd:6e:6e:20:1d:bd:
                    31:2e:0c:84:70:c5:23:40:99:23:b1:b0:0f:c3:ed:
                    13:d1:ab:55:f5:07:d3:0d:bf:4c:7c:78:58:63:17:
                    05:b5:ab:4e:ba:b2:29:e5:2d:b7:78:c3:d8:68:fd:
                    bf:49:32:9a:eb:bf:b0:12:39:7d:c3:db:7c:f4:07:
                    77:0b:51:f8:7a:5c:85:55:fa:1d:90:6b:b2:08:2d:
                    81:f4:b8:e7:d3:80:75:7f:a2:cc:b3:a7:31:97:12:
                    63:ea:da:d9:eb:e4:48:a4:f0:72:b5:6b:90:c5:20:
                    e6:6b:23:70:ff:9e:00:3f:d0:72:40:6a:28:bb:cf:
                    96:71:75:12:c6:29:7d:67:8c:ae:50:07:61:da:39:
                    1c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:93:89:90:CE:6A:23:29:88:DD:19:A7:CD:D7:39:82:AD:CB:C0:DD
            X509v3 Authority Key Identifier:
                keyid:44:96:8D:AE:5E:CD:C4:31:BC:AA:7B:2A:B4:2A:20:2C:6B:24:54:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44968DAE5ECDC431BCAA7B2AB42A202C6B2454D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CDE50B2A28AE41AC50105F07A2A5A4581DFD2A3804D49E8EA51A29D0B01EB8E/0/323830333a363636303a3a2f33322d3438203d3e20323637383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6660::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:e2:dc:a5:21:d7:42:b7:c4:d9:84:90:7e:a4:24:cd:bb:83:
         ce:08:2c:69:11:88:85:df:e6:a0:de:07:73:e6:6d:73:14:fb:
         5d:9e:f6:5c:6a:cb:de:1b:cd:08:ff:74:a1:42:30:ca:5f:05:
         a5:12:74:c9:fb:1e:d1:05:60:eb:52:13:3b:bb:20:3d:aa:58:
         12:95:dc:52:ed:43:f2:13:c8:d3:85:14:08:af:83:d0:c9:c2:
         a7:42:fd:57:09:9d:63:06:97:24:cb:d7:cd:d9:22:03:5a:71:
         57:71:4d:4e:5e:a0:94:1b:02:0a:df:42:83:50:47:d0:11:ee:
         72:7f:9e:0a:61:0e:48:ac:af:a8:57:32:6a:78:19:8c:7e:7f:
         73:60:f1:63:6c:d7:29:c5:f7:47:38:7c:b3:30:ff:99:a3:0c:
         99:4f:cd:10:cf:b5:fc:96:d0:b8:14:d9:db:22:23:18:61:d8:
         9c:0d:07:70:4b:28:75:b2:4b:e7:5b:f8:e9:30:75:d7:51:55:
         62:a4:4d:77:f4:ad:3f:10:0a:bf:ad:8f:d5:1f:37:75:5a:18:
         ba:19:51:01:de:4c:09:1b:f3:39:41:94:bc:0b:a6:cf:3b:67:
         ce:aa:e3:ad:1c:6d:7f:1f:82:45:1a:9e:1a:43:d2:53:6d:7c:
         e6:cf:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:36 2025 by rpki-client