Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EC3962FF26BE7872ABC4095A55F43A02AEDF0217C075928030DDF971A7C5A8F/0/323830333a613365303a3a2f33322d3438203d3e20323730303638.roa
File:                     323830333a613365303a3a2f33322d3438203d3e20323730303638.roa (raw, json)
Hash identifier:          IVfsgn0A/TQMSdrJ+8WEGvuQwy5tHiVC5wOijrb+suk=
Subject key identifier:   C9:30:C6:A3:51:29:FE:A8:78:5B:09:98:26:13:AF:E4:6C:BB:30:4B
Certificate issuer:       /CN=701AAE061E1228C91D250BAD56D2FDF00FB0E988
Certificate serial:       1762A7A90DA751BFEAE7153EE11CCBDCD7CD3F68
Authority key identifier: 70:1A:AE:06:1E:12:28:C9:1D:25:0B:AD:56:D2:FD:F0:0F:B0:E9:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701AAE061E1228C91D250BAD56D2FDF00FB0E988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EC3962FF26BE7872ABC4095A55F43A02AEDF0217C075928030DDF971A7C5A8F/0/323830333a613365303a3a2f33322d3438203d3e20323730303638.roa
Signing time:             Tue 04 Feb 2025 18:39:48 +0000
ROA not before:           Tue 04 Feb 2025 18:34:48 +0000
ROA not after:            Tue 03 Feb 2026 18:39:48 +0000
asID:                     270068
IP address blocks:        2803:a3e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:62:a7:a9:0d:a7:51:bf:ea:e7:15:3e:e1:1c:cb:dc:d7:cd:3f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701AAE061E1228C91D250BAD56D2FDF00FB0E988
        Validity
            Not Before: Feb  4 18:34:48 2025 GMT
            Not After : Feb  3 18:39:48 2026 GMT
        Subject: CN=C930C6A35129FEA8785B09982613AFE46CBB304B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:2a:1d:6a:46:b7:0c:fc:fa:f7:fc:e5:91:
                    2e:70:84:c9:1d:59:72:74:36:fa:03:88:ad:60:d7:
                    73:2b:56:94:13:35:91:6a:b1:46:64:64:98:ec:3c:
                    1e:ce:0e:2e:47:01:bd:50:47:cb:d3:ca:44:d2:ca:
                    08:83:95:1f:d1:3b:e1:f0:e4:db:e4:d7:41:da:94:
                    58:26:ef:4e:ac:ba:53:a8:bd:04:77:1e:eb:da:b8:
                    e6:3c:c1:79:0c:fc:04:d5:4b:b5:03:54:76:73:24:
                    e2:32:5c:97:72:83:bd:37:16:82:d6:fa:eb:28:65:
                    50:39:4a:02:87:df:5d:9a:6f:07:b1:3b:63:70:c0:
                    da:dd:a6:5c:d6:6d:b9:ea:43:b4:39:af:b6:2e:a6:
                    3f:4c:93:54:b4:8d:bb:ae:c7:7c:28:09:05:b0:49:
                    b7:5c:22:28:8b:d8:cf:9d:98:1b:5d:b9:a4:60:e9:
                    98:10:07:a5:fe:52:46:d1:f7:27:ac:84:ba:4b:04:
                    df:53:5b:47:a0:76:e9:96:7c:a0:00:51:90:4d:99:
                    e1:4d:2c:8c:c7:43:8c:92:98:e0:16:60:70:90:97:
                    70:17:ed:ec:bb:e4:5e:e0:0c:bc:bd:0a:2b:94:cb:
                    98:c6:b0:38:2c:c7:48:fe:30:2e:4d:43:06:83:7e:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:30:C6:A3:51:29:FE:A8:78:5B:09:98:26:13:AF:E4:6C:BB:30:4B
            X509v3 Authority Key Identifier:
                keyid:70:1A:AE:06:1E:12:28:C9:1D:25:0B:AD:56:D2:FD:F0:0F:B0:E9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EC3962FF26BE7872ABC4095A55F43A02AEDF0217C075928030DDF971A7C5A8F/0/701AAE061E1228C91D250BAD56D2FDF00FB0E988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701AAE061E1228C91D250BAD56D2FDF00FB0E988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EC3962FF26BE7872ABC4095A55F43A02AEDF0217C075928030DDF971A7C5A8F/0/323830333a613365303a3a2f33322d3438203d3e20323730303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:3a:28:03:a4:ee:5e:71:ec:f0:f9:27:1a:5a:cb:61:2e:50:
         7a:23:36:81:5f:df:76:76:d8:f1:5d:0e:96:fb:0e:6a:e9:82:
         a7:02:fd:14:8c:80:3a:e7:42:fd:b7:ae:b6:b8:cf:82:ef:b0:
         1c:96:36:16:16:7b:f5:8a:a2:84:be:e1:73:15:d8:cb:d0:27:
         d7:19:92:e9:62:a6:cd:c3:42:e6:0a:d7:3a:a8:ad:34:4f:d7:
         44:90:3d:0d:71:64:35:26:0a:42:d5:f5:78:61:72:36:de:45:
         82:1d:85:2a:46:f3:d0:87:7c:54:17:c5:75:b9:48:ed:73:b9:
         a4:98:af:71:fa:72:f4:f3:86:d8:70:3e:47:46:3a:9e:64:15:
         ac:9d:fd:8a:ac:30:1f:1e:ad:43:ae:ee:da:f6:ea:d6:c3:dc:
         39:3e:6a:e0:8d:f6:4c:76:ce:09:4d:89:85:00:9d:76:9d:e3:
         43:e2:89:e5:9b:d3:ef:12:e2:85:aa:79:a4:4e:4e:c4:71:ae:
         18:81:90:7d:1d:19:a8:e8:89:7d:c5:42:da:aa:bb:9d:33:56:
         61:23:63:a6:02:f6:3a:f5:44:43:0e:82:58:b2:64:00:ed:9e:
         66:9d:c0:9d:9f:76:91:d6:99:05:93:88:9e:4e:29:b3:08:17:
         84:2d:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:43:35 2025 by rpki-client