Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/323830313a31373a643030303a3a2f34382d3438203d3e20323635363936.roa
File:                     323830313a31373a643030303a3a2f34382d3438203d3e20323635363936.roa (raw, json)
Hash identifier:          PibeeZojGzduHWYsAfsXMSlFr+9j80Gc9ytKV7AUpzw=
Subject key identifier:   29:F8:66:73:A9:26:38:07:BE:9F:19:E1:83:84:7C:79:BB:12:B6:BD
Certificate issuer:       /CN=1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2
Certificate serial:       7E2B6064FA494464EA44DBA04657076A4B9A17D8
Authority key identifier: 1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/323830313a31373a643030303a3a2f34382d3438203d3e20323635363936.roa
Signing time:             Tue 04 Feb 2025 18:48:37 +0000
ROA not before:           Tue 04 Feb 2025 18:43:37 +0000
ROA not after:            Tue 03 Feb 2026 18:48:37 +0000
asID:                     265696
IP address blocks:        2801:17:d000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2b:60:64:fa:49:44:64:ea:44:db:a0:46:57:07:6a:4b:9a:17:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2
        Validity
            Not Before: Feb  4 18:43:37 2025 GMT
            Not After : Feb  3 18:48:37 2026 GMT
        Subject: CN=29F86673A9263807BE9F19E183847C79BB12B6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:5f:4c:8b:e0:71:64:1a:bc:9d:9b:7d:e6:
                    be:5c:17:7f:29:cd:c8:bf:cb:6a:03:02:39:86:e9:
                    7a:c2:4e:0a:79:f2:12:65:fd:82:d0:f4:1d:58:53:
                    d1:ae:dd:b5:ca:17:6d:78:55:45:e5:71:19:bd:aa:
                    72:a2:53:d3:e4:75:81:d1:d7:99:d9:ab:e8:a2:63:
                    9b:c3:8c:57:26:e3:60:74:7b:0b:06:7a:84:b5:51:
                    dc:8f:63:49:a3:63:1b:f7:3f:f6:78:f5:92:74:4c:
                    3d:bb:29:60:0b:91:9e:15:c1:dd:21:6d:ad:09:4b:
                    2b:a2:7f:c6:e5:ef:60:69:db:c1:b6:40:e0:00:58:
                    7d:0f:2c:de:e8:44:63:53:5e:dd:b2:1d:29:4a:d2:
                    fd:ea:67:1d:e2:32:64:3e:5b:3a:fa:af:14:7a:a9:
                    c5:8b:3b:44:7b:dd:2b:90:87:74:66:eb:cb:78:cf:
                    b6:76:71:ef:1f:e1:f1:d0:c6:91:c1:b4:e9:ef:1c:
                    67:84:6d:d4:63:7e:fb:e6:e0:bc:0e:01:b7:f6:4e:
                    51:75:f2:96:96:44:02:57:de:fe:d3:e3:ff:aa:77:
                    65:5a:71:55:5b:ce:c0:f3:95:96:15:76:7b:85:71:
                    15:34:20:bb:4c:40:13:51:03:72:82:a5:44:1d:52:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F8:66:73:A9:26:38:07:BE:9F:19:E1:83:84:7C:79:BB:12:B6:BD
            X509v3 Authority Key Identifier:
                keyid:1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/323830313a31373a643030303a3a2f34382d3438203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:50:9b:95:2d:16:a2:b3:6b:28:9a:45:80:e3:f7:f5:d6:89:
         e7:77:8b:78:93:99:95:7c:1f:8d:a9:24:6f:43:4a:ff:e0:da:
         1d:77:12:b0:f9:c5:53:b3:a9:2b:87:7c:f6:8a:74:26:74:b0:
         e5:69:b4:86:93:d3:85:eb:97:82:0a:e3:30:2b:c4:ce:be:dd:
         6c:cc:fd:23:2d:34:70:6b:f2:24:27:00:ca:90:87:1a:b7:56:
         01:8a:a6:f4:cf:12:17:76:77:22:5b:e6:d0:c1:3e:0e:a3:0c:
         59:1d:1f:84:c5:71:18:8c:07:8b:c1:d7:95:5b:73:ed:3f:1b:
         72:ac:f3:a7:76:a5:b5:e7:78:ba:9a:9b:c3:00:70:3a:06:ba:
         1c:c7:94:f4:c4:65:52:4b:dc:30:f0:3d:88:a7:15:03:b2:47:
         2d:3f:14:a3:60:d1:86:60:be:6a:33:46:40:03:31:6a:5b:54:
         5f:e3:1b:a0:84:94:b8:b8:a2:1e:3a:1d:3a:78:bb:ae:07:d7:
         b4:6b:fa:e3:c3:bc:5c:e0:8c:d1:7c:e9:dd:7f:09:5d:01:12:
         d9:e1:b3:fa:60:fd:f5:8e:7c:50:81:f8:34:fd:4f:87:04:84:
         dd:fc:f9:d9:7c:ec:b2:d8:36:1a:a2:41:96:95:7d:94:5d:58:
         8b:d4:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----