Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/323830333a656263303a3a2f33322d3332203d3e20323635373533.roa
File:                     323830333a656263303a3a2f33322d3332203d3e20323635373533.roa (raw, json)
Hash identifier:          Sn3d/nf9cWGJEaZnx+WNBr+HeCNylFPeo6SePqgJZeo=
Subject key identifier:   19:09:5D:A2:86:D4:A7:0A:47:7F:79:77:29:84:D9:E3:34:D9:A3:8A
Certificate issuer:       /CN=0E6B8732ACC8901032F35F351C4375807259D052
Certificate serial:       1E4664F4328656DB1F635EB00626CB184E73A50E
Authority key identifier: 0E:6B:87:32:AC:C8:90:10:32:F3:5F:35:1C:43:75:80:72:59:D0:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E6B8732ACC8901032F35F351C4375807259D052.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/323830333a656263303a3a2f33322d3332203d3e20323635373533.roa
Signing time:             Tue 04 Feb 2025 18:09:03 +0000
ROA not before:           Tue 04 Feb 2025 18:04:03 +0000
ROA not after:            Tue 03 Feb 2026 18:09:03 +0000
asID:                     265753
IP address blocks:        2803:ebc0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:46:64:f4:32:86:56:db:1f:63:5e:b0:06:26:cb:18:4e:73:a5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E6B8732ACC8901032F35F351C4375807259D052
        Validity
            Not Before: Feb  4 18:04:03 2025 GMT
            Not After : Feb  3 18:09:03 2026 GMT
        Subject: CN=19095DA286D4A70A477F79772984D9E334D9A38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:32:89:4b:7b:c6:ca:47:8f:9e:7a:be:34:
                    e6:a8:e6:62:6a:58:3c:46:83:bb:cd:ad:d8:5b:05:
                    ba:2f:39:59:f8:fa:a9:c3:cc:0c:aa:1a:6f:71:6d:
                    99:8f:32:14:7b:f9:4f:f4:0b:ed:72:90:8e:68:d6:
                    5a:dd:88:f3:70:f7:9e:3d:69:0f:e1:8c:70:b2:61:
                    dc:da:49:63:3e:f7:77:04:16:18:e0:a8:09:5d:b7:
                    a5:3a:fe:d8:4f:33:49:18:9b:6b:07:b1:7e:ca:ab:
                    bc:21:be:47:d0:f7:1a:64:47:d0:6a:a0:04:ea:8e:
                    40:b1:65:19:9d:fe:80:30:2f:62:f0:49:ba:55:e6:
                    bf:28:4e:f6:56:b8:94:60:3d:e5:67:24:af:3e:f1:
                    19:39:0f:16:eb:71:94:da:bf:7f:ce:f8:9c:85:ed:
                    ad:5c:a7:09:f8:3d:48:f8:cc:39:16:20:96:93:03:
                    98:9a:be:0f:e2:73:44:65:cc:07:a9:1f:5a:22:11:
                    04:d5:da:26:2a:74:2c:6d:6d:b3:db:cc:d4:85:10:
                    68:ed:b2:b2:16:f5:5c:5c:63:22:f6:4c:d4:f1:df:
                    ab:ac:89:bd:d4:29:f2:a4:c7:22:f3:4b:07:c1:a7:
                    00:dc:e3:ef:11:49:29:35:db:ca:e8:0e:6c:75:be:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:09:5D:A2:86:D4:A7:0A:47:7F:79:77:29:84:D9:E3:34:D9:A3:8A
            X509v3 Authority Key Identifier:
                keyid:0E:6B:87:32:AC:C8:90:10:32:F3:5F:35:1C:43:75:80:72:59:D0:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/0E6B8732ACC8901032F35F351C4375807259D052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E6B8732ACC8901032F35F351C4375807259D052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0CC8854BF9FDABC6034F4CDF49CE683A05BE0B1D60EDAF3F598FA4BBD008CA3/0/323830333a656263303a3a2f33322d3332203d3e20323635373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ebc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:7c:e2:41:36:17:fb:a4:87:e0:ab:57:17:5f:df:7e:3d:45:
         b9:58:89:d0:f5:ee:b9:72:92:85:ca:86:16:87:f9:09:3d:cc:
         78:ea:36:3e:62:dc:6e:f2:01:77:f9:92:46:2d:05:2f:67:d3:
         83:5b:9c:aa:05:0e:23:bf:66:95:34:80:9d:b2:57:eb:a6:6f:
         95:31:a5:35:e9:61:80:6d:7c:c2:ab:38:40:49:4f:63:70:51:
         e1:70:de:98:50:b3:49:94:dc:93:d6:26:4b:55:f3:a4:42:0d:
         b6:8e:1c:44:7f:84:e3:29:bf:4d:dc:06:58:2b:ed:d5:96:f3:
         81:bc:24:20:f5:ad:28:ef:b8:ce:d0:ad:5a:4a:7c:5d:0b:3c:
         96:91:42:30:1a:61:37:11:5f:b8:68:39:e6:e0:90:e0:b7:94:
         83:5a:89:e1:f1:2c:74:f8:fa:57:19:7c:af:f1:09:f4:f2:ba:
         be:46:6a:0b:44:99:95:47:de:61:9c:39:24:ba:7a:21:25:7f:
         5b:24:bf:cb:be:6c:be:91:54:71:61:7c:fe:7b:5d:80:0e:51:
         12:c5:ac:de:0c:dd:ce:cd:4a:11:58:f1:2b:1c:23:fd:0f:ff:
         89:17:4b:4e:84:c0:e4:b4:58:be:ce:1e:ea:49:2b:ec:c6:81:
         c2:4c:3c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:13 2025 by rpki-client