Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a323a3a2f34382d3438203d3e203238303032.roa
File:                     323830313a3136353a323a3a2f34382d3438203d3e203238303032.roa (raw, json)
Hash identifier:          kFjQ5CEYyR/4tB+b6xRomcXIC0Febzd5jqlwEwEplZY=
Subject key identifier:   A9:DB:13:1E:B7:02:63:11:BB:C3:D3:ED:7F:85:57:1E:80:69:26:93
Certificate issuer:       /CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
Certificate serial:       0D6CA0249BC161C24FAD806261A7E8FDDF6BDF45
Authority key identifier: A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a323a3a2f34382d3438203d3e203238303032.roa
Signing time:             Sat 15 Mar 2025 18:11:56 +0000
ROA not before:           Sat 15 Mar 2025 18:06:56 +0000
ROA not after:            Sat 14 Mar 2026 18:11:56 +0000
asID:                     28002
IP address blocks:        2801:165:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6c:a0:24:9b:c1:61:c2:4f:ad:80:62:61:a7:e8:fd:df:6b:df:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A709D75E0BD0199002C071D36971A09E6D5E5F48
        Validity
            Not Before: Mar 15 18:06:56 2025 GMT
            Not After : Mar 14 18:11:56 2026 GMT
        Subject: CN=A9DB131EB7026311BBC3D3ED7F85571E80692693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b3:db:f3:d3:cc:05:4e:ab:16:16:3b:fd:d3:
                    c1:b8:98:6e:19:75:ec:7c:a8:79:d2:05:68:cf:22:
                    43:a6:34:5d:88:17:b0:09:5b:a1:26:26:13:57:90:
                    c2:f8:60:2d:f5:70:08:9d:55:81:45:0f:81:17:d7:
                    07:19:da:1e:bf:13:91:ed:dc:cd:03:1a:79:9a:a5:
                    d4:4f:5c:d1:4c:c7:33:dc:c3:ff:cf:30:e7:90:3c:
                    78:87:f3:e3:74:27:f8:53:13:51:ac:a7:55:db:a8:
                    f5:fa:1c:d5:d9:f5:b5:44:4a:68:8f:dc:0e:a0:a6:
                    34:81:70:7b:db:66:64:76:f0:56:0b:52:96:54:e9:
                    f6:1b:3d:fd:4c:96:31:60:13:9b:55:0d:64:79:2c:
                    a8:cf:ea:7d:39:4b:54:20:1d:4e:8e:21:e7:c0:c8:
                    f0:76:01:77:b3:d1:07:46:54:bd:9c:92:fb:2d:9b:
                    73:2f:b6:d9:2f:55:c1:3e:e9:97:b4:2e:de:a5:78:
                    95:8c:e8:3e:81:2f:35:b2:78:6a:57:6e:34:1d:53:
                    3e:46:dc:89:53:c1:30:20:18:7e:16:59:3f:7a:d4:
                    74:3b:43:99:6d:e4:3c:8a:44:47:7d:77:5a:b1:51:
                    23:b5:d9:d2:b2:2f:de:6a:4a:d9:e1:00:9b:57:22:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DB:13:1E:B7:02:63:11:BB:C3:D3:ED:7F:85:57:1E:80:69:26:93
            X509v3 Authority Key Identifier:
                keyid:A7:09:D7:5E:0B:D0:19:90:02:C0:71:D3:69:71:A0:9E:6D:5E:5F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A709D75E0BD0199002C071D36971A09E6D5E5F48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E0D28C0B22854F0210033DF7B0C636159312C11D1C742AFB3FD1FC378A8E760/0/323830313a3136353a323a3a2f34382d3438203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:e4:c0:7c:f4:20:86:c2:7b:89:95:77:f9:c1:3d:66:48:b7:
         c9:da:c2:2b:51:fc:40:fe:c4:72:fe:32:68:9e:66:d8:06:e3:
         3d:07:61:2d:07:1c:34:86:2c:0c:73:06:50:a3:c6:1b:d2:40:
         e8:4a:9d:c0:c0:da:1c:ae:4f:2b:64:78:c6:aa:eb:78:d0:a9:
         87:6c:c5:1e:47:34:a3:41:37:c3:c9:16:3b:bf:73:30:1f:6f:
         6e:53:49:fb:95:2a:d7:d5:d1:1e:1f:2d:1f:66:a2:64:d3:38:
         a9:30:f7:2d:64:29:6f:05:ab:dd:92:28:f4:0a:3c:3c:82:81:
         19:cf:1d:80:51:2c:3a:56:75:62:cc:51:03:2c:3e:fa:da:3a:
         7b:d9:2e:6f:2f:56:4e:af:24:ef:3f:6f:23:70:1c:89:cb:74:
         fc:71:b9:b6:a3:42:c8:52:e8:46:79:f6:32:51:8e:2c:78:79:
         f8:3b:fb:5e:2a:ea:4a:ad:71:7f:aa:a2:f0:38:20:72:5c:7d:
         dc:66:60:cf:95:17:b2:4d:eb:c6:cb:9f:c8:47:75:b5:ef:05:
         bf:f0:97:15:2f:79:44:2d:46:54:54:c7:b4:20:c2:82:40:ef:
         0f:e8:a9:9c:05:d8:49:92:7c:43:49:bd:77:4e:fa:de:34:93:
         37:58:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----