Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33322d3335203d3e203237383635.roa
File:                     323830333a346138303a3a2f33322d3335203d3e203237383635.roa (raw, json)
Hash identifier:          Cg89ERLI4y2qDcA1/1gK0V8RJbMwPDCcDnvp6S6TMCM=
Subject key identifier:   E0:A4:7E:19:A3:7C:00:09:2F:BD:51:EC:E8:6C:11:2E:99:A5:CF:56
Certificate issuer:       /CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
Certificate serial:       2FEA26896F4E350363E37C221FF325F6ABB40D9C
Authority key identifier: A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33322d3335203d3e203237383635.roa
Signing time:             Tue 04 Feb 2025 18:40:09 +0000
ROA not before:           Tue 04 Feb 2025 18:35:09 +0000
ROA not after:            Tue 03 Feb 2026 18:40:09 +0000
asID:                     27865
IP address blocks:        2803:4a80::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ea:26:89:6f:4e:35:03:63:e3:7c:22:1f:f3:25:f6:ab:b4:0d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48
        Validity
            Not Before: Feb  4 18:35:09 2025 GMT
            Not After : Feb  3 18:40:09 2026 GMT
        Subject: CN=E0A47E19A37C00092FBD51ECE86C112E99A5CF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:ef:14:a8:bb:ea:d1:ea:d3:39:c7:17:07:
                    ed:fa:6e:1c:37:b9:9a:71:24:f9:a9:65:02:00:a1:
                    f1:cb:2c:94:e5:8c:81:67:96:02:96:93:00:1c:65:
                    58:de:a4:6d:5c:a8:d2:91:9f:5a:a2:ad:4e:0a:7c:
                    93:81:b8:30:28:3f:f4:4d:79:34:01:8e:24:2b:5c:
                    5f:a3:b5:43:4a:c4:0c:a5:e7:9f:71:25:1e:53:32:
                    3a:b3:1f:e1:99:27:8b:89:a7:dd:99:82:99:5c:05:
                    10:83:dd:2a:e1:4e:0c:8b:0a:d3:7e:1d:b0:61:06:
                    01:c4:4e:c2:29:ed:da:95:2c:da:74:12:e4:c9:d2:
                    20:2b:e2:12:42:92:94:b0:3c:86:1e:56:8e:06:9f:
                    6c:d2:a5:2f:9c:c5:6c:c5:f7:07:64:c1:b4:f1:8d:
                    6b:0d:5a:f9:c2:de:2d:f8:29:42:80:48:d7:68:67:
                    0c:d5:f2:09:e2:b7:95:80:b8:05:e9:2c:6b:0e:1f:
                    2f:2b:9b:6d:51:a5:33:6e:19:0b:63:39:50:75:fe:
                    c8:fb:35:ba:74:ec:2f:4d:af:67:f6:3f:03:9b:56:
                    e2:5c:56:e6:58:6e:97:ae:75:52:b2:f0:03:5e:4d:
                    6a:7b:3a:0f:8d:4d:d2:ba:0e:87:08:7b:65:80:be:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A4:7E:19:A3:7C:00:09:2F:BD:51:EC:E8:6C:11:2E:99:A5:CF:56
            X509v3 Authority Key Identifier:
                keyid:A5:CE:25:AA:2B:9F:B1:CE:0B:E5:4F:B6:B3:39:C5:CC:F5:02:CF:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5CE25AA2B9FB1CE0BE54FB6B339C5CCF502CF48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DBE2F180B65BBCAB9DA7B5B427A1A5DE1C8C4EB182D90606D097BEC079F119F/0/323830333a346138303a3a2f33322d3335203d3e203237383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:06:aa:a9:0c:dc:f5:b1:86:a3:d5:b0:93:05:2b:af:35:af:
         4d:71:99:12:11:33:72:4f:f7:8e:84:db:99:fe:01:ec:b5:c5:
         9d:49:fa:83:17:0f:61:82:7a:8c:f6:a2:34:80:fc:a5:46:e7:
         4a:6d:bb:cc:5f:7c:f8:01:fe:20:42:5d:84:30:3b:90:4d:3f:
         cc:da:82:e6:75:b8:cf:8d:d1:e0:75:ad:06:73:30:75:9d:c8:
         98:9f:49:4b:cb:ef:47:32:33:a3:5f:5e:83:ed:c3:94:88:14:
         8f:1f:8b:78:86:b7:3d:b2:8d:37:a7:b7:44:59:3c:c7:85:95:
         4f:7b:fe:90:14:02:6e:7f:8b:a0:8c:64:7f:69:f2:af:f5:81:
         9b:da:ce:1b:20:9f:3e:b2:fe:2d:96:c0:00:67:66:95:1c:83:
         a1:93:dc:92:eb:bc:9e:05:05:96:79:3f:92:b3:0e:a1:5d:98:
         fb:e9:78:4d:ea:3a:5d:cf:51:cc:2b:9e:60:4c:67:20:13:38:
         5b:07:ab:98:15:3a:f2:95:ec:21:96:e3:1d:53:29:13:f9:78:
         6d:ef:f7:62:89:4a:66:9e:a8:de:c2:77:4e:56:63:62:36:d1:
         aa:bc:b8:61:84:9f:e4:6d:38:b0:f0:5e:35:fd:d5:40:32:4e:
         48:f7:15:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----