Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a373a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a373a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          xFFns4u7ztb2JJq6Yng1YlzsMoID1lgYfdhfTGennUI=
Subject key identifier:   FD:29:74:5E:60:97:10:AC:C6:E3:95:72:1E:50:ED:84:8F:5F:70:EF
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       369B2500B9E3F2687AA7571E055B6ECA8C0D7BC5
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a373a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 04 Feb 2025 18:29:18 +0000
ROA not before:           Tue 04 Feb 2025 18:24:18 +0000
ROA not after:            Tue 03 Feb 2026 18:29:18 +0000
asID:                     273113
IP address blocks:        2803:6850:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9b:25:00:b9:e3:f2:68:7a:a7:57:1e:05:5b:6e:ca:8c:0d:7b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Feb  4 18:24:18 2025 GMT
            Not After : Feb  3 18:29:18 2026 GMT
        Subject: CN=FD29745E609710ACC6E395721E50ED848F5F70EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:c8:6d:32:8c:be:7b:d1:df:44:51:69:e6:
                    5a:a5:e3:f1:32:9f:c4:19:ee:e6:4c:32:0c:29:19:
                    49:70:03:32:46:b0:33:25:3e:6a:e4:88:2f:0c:ad:
                    a3:4a:24:5d:c0:0c:36:1f:f3:ee:15:25:47:19:e3:
                    2a:a3:36:bd:fd:46:00:06:91:38:4a:0c:3d:6e:3a:
                    02:23:b9:84:80:5a:a4:fd:67:47:9d:9a:41:81:cd:
                    e5:c6:40:a4:18:e8:d3:f7:4c:7c:f7:6f:ff:be:55:
                    29:b5:69:fd:e3:7e:67:70:a1:bf:df:35:0b:61:f8:
                    7c:c2:8e:27:25:d1:12:81:25:95:59:96:b9:45:dd:
                    4d:4a:ea:9a:e5:6c:05:49:2e:f9:75:9c:b4:58:9b:
                    73:a8:d9:46:88:42:58:65:7b:99:23:06:bc:05:f8:
                    12:c5:01:0f:d8:bf:57:30:db:af:d7:48:d0:79:0b:
                    76:60:07:87:e4:aa:55:04:2b:7e:cb:f1:3e:5a:e6:
                    a3:49:9f:89:d0:76:c3:35:2d:ba:da:fa:9d:2a:ac:
                    e3:70:31:36:b2:c6:98:ae:50:1a:b7:53:e6:ff:ad:
                    09:1a:50:61:78:ec:36:ff:12:9f:2c:bb:80:7a:2b:
                    27:96:77:15:30:db:ec:ac:88:3c:e7:71:84:31:f0:
                    b5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:29:74:5E:60:97:10:AC:C6:E3:95:72:1E:50:ED:84:8F:5F:70:EF
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a373a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:53:9a:57:f2:78:fc:74:bc:8d:22:d0:d5:f7:65:05:4c:3a:
         85:e3:55:4d:ea:94:10:fe:3b:23:9a:75:41:ee:e9:74:c9:19:
         39:fa:10:76:b9:93:5a:e9:03:90:83:79:ac:94:dd:c6:c1:45:
         fa:88:c8:44:0f:ec:fa:47:27:eb:71:07:b0:2d:52:cd:c5:6c:
         93:ca:43:ae:12:b2:15:64:b9:4b:b2:a1:45:9f:e1:10:92:aa:
         5c:9c:8f:0f:0c:d4:46:ff:bf:5e:33:b7:12:23:9a:e9:f6:cb:
         6d:5f:41:94:a4:3d:99:fa:1f:6e:fd:33:87:54:6a:70:8e:08:
         9c:29:0e:96:1f:dd:8b:cf:08:24:30:0d:51:f4:95:9e:c9:8f:
         6c:50:18:ba:1d:1a:2a:96:d4:76:c6:59:6f:b5:0f:50:85:01:
         8e:3b:00:f6:69:0e:7b:7d:a6:3d:d0:e6:c1:7f:f0:ac:e5:a1:
         3a:19:03:c7:9c:87:3c:7d:0c:37:6d:79:44:6a:17:82:8b:e0:
         34:61:2c:27:09:c3:eb:9a:0c:1f:28:0b:d0:8f:3f:bc:58:be:
         4d:b6:80:79:87:93:3d:5a:4b:b4:c1:42:6b:f0:51:ce:b2:03:
         8b:ae:e4:65:84:3c:c3:a0:be:51:0a:24:f8:4c:e1:6e:c7:a3:
         57:73:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:57:33 2025 by rpki-client