Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a353a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a353a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          le0F53VoL5pYgXllp3sWx6SXeFPNBtsB1MgC/veYYsQ=
Subject key identifier:   7C:71:F5:C0:D0:22:2C:91:4B:06:17:44:77:E7:45:D1:44:F6:CC:B5
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       09DB8C0783D153B19F5319E8AEC2D1DA7A6870FC
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a353a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 04 Feb 2025 18:29:17 +0000
ROA not before:           Tue 04 Feb 2025 18:24:17 +0000
ROA not after:            Tue 03 Feb 2026 18:29:17 +0000
asID:                     273113
IP address blocks:        2803:6850:5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:db:8c:07:83:d1:53:b1:9f:53:19:e8:ae:c2:d1:da:7a:68:70:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Feb  4 18:24:17 2025 GMT
            Not After : Feb  3 18:29:17 2026 GMT
        Subject: CN=7C71F5C0D0222C914B06174477E745D144F6CCB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:87:3a:d8:6e:89:20:aa:cc:65:57:1a:61:
                    ce:a5:df:39:45:e6:6d:a3:56:7e:11:89:4a:ff:e0:
                    ad:98:3e:0c:26:91:d6:33:ca:56:b3:14:dc:b6:0b:
                    fd:22:b8:8b:b1:a7:25:d0:f1:c5:03:38:8f:83:45:
                    47:60:df:5b:82:a0:59:69:81:7c:be:d0:8b:b8:5f:
                    c0:ce:0a:fd:34:3e:56:a5:c0:3f:43:eb:c7:f6:8c:
                    90:50:c5:12:c4:41:90:ba:87:51:7a:b8:16:43:f6:
                    3e:8c:0d:2e:1d:a0:85:9d:d1:22:66:64:cb:fc:f8:
                    76:27:eb:85:0d:e0:97:f0:de:b9:77:78:7b:06:ca:
                    84:a3:d7:56:ce:87:72:8a:a6:02:b2:7e:ab:e7:bb:
                    ec:f7:0f:c2:cf:d9:1e:ef:33:77:3d:92:9e:9e:82:
                    a4:97:9c:ac:2f:30:b5:35:93:a7:da:11:df:2e:1a:
                    51:2d:6c:45:6d:53:02:e1:02:a0:66:65:0b:7b:d5:
                    cd:5f:b9:7b:c9:8b:a7:45:97:c8:83:91:24:eb:2f:
                    8f:19:65:8e:d0:79:e6:62:0d:bf:56:89:8d:0e:9e:
                    c5:48:09:3a:4c:90:bb:1f:c5:be:09:2a:b2:af:b8:
                    21:0e:f8:66:6c:2d:7e:62:10:7b:7d:59:e0:69:31:
                    62:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:71:F5:C0:D0:22:2C:91:4B:06:17:44:77:E7:45:D1:44:F6:CC:B5
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a353a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:15:33:c5:65:b4:08:01:ab:ca:ac:dd:5a:8f:13:e9:2e:56:
         5f:bb:ca:78:21:41:54:a3:6a:05:3d:49:b7:a9:b0:fc:c2:b6:
         34:04:da:de:b5:d3:27:f2:80:81:37:95:8a:80:2f:3f:1d:59:
         4a:7b:f2:da:85:8b:97:99:64:03:7b:be:48:f0:fe:be:1a:c0:
         af:45:68:e5:74:1b:52:01:71:72:2b:e9:b8:f3:dd:c9:ba:ed:
         ce:da:3c:5b:c1:72:10:2c:24:57:d9:be:14:33:d6:38:07:f6:
         d5:0f:92:ce:37:31:70:c6:b1:19:61:49:9a:de:f1:fa:7d:42:
         da:32:55:90:37:63:1e:a1:74:76:b6:4d:40:e5:79:e6:73:0c:
         4a:ca:53:00:0f:78:03:d9:ea:70:2e:48:9b:2d:7f:19:83:da:
         b3:8f:44:8b:1a:70:c6:e6:42:2b:66:5c:2a:1d:de:62:9a:35:
         b8:a7:06:65:f9:72:c8:aa:fd:0b:9a:cb:de:55:43:e0:3e:80:
         4b:b4:7d:05:ce:5c:d4:28:4b:e6:65:c4:6c:cf:8c:1b:93:1c:
         f5:fb:77:af:bf:21:1d:52:15:1f:ab:bd:d3:70:3a:5d:2a:70:
         76:d9:50:8d:32:d3:de:07:e8:df:90:2c:e3:7e:99:8a:de:88:
         ec:0d:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:09:42 2025 by rpki-client