Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/323830333a623134303a3a2f33322d3332203d3e203532333536.roa
File:                     323830333a623134303a3a2f33322d3332203d3e203532333536.roa (raw, json)
Hash identifier:          MYjLeSRadT6y3Mtl3Xvfa8fJcinQMDm1SMbnuXuCNZU=
Subject key identifier:   91:83:9F:35:B9:56:B3:23:18:98:00:31:AE:10:F3:AA:7D:63:2C:C3
Certificate issuer:       /CN=1BD0C44277A0552FCFDC94E0225F8F0B715DDA73
Certificate serial:       5143D94B7D1430E038FA2548C20AF3DE73D32A50
Authority key identifier: 1B:D0:C4:42:77:A0:55:2F:CF:DC:94:E0:22:5F:8F:0B:71:5D:DA:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/323830333a623134303a3a2f33322d3332203d3e203532333536.roa
Signing time:             Tue 04 Feb 2025 18:34:35 +0000
ROA not before:           Tue 04 Feb 2025 18:29:35 +0000
ROA not after:            Tue 03 Feb 2026 18:34:35 +0000
asID:                     52356
IP address blocks:        2803:b140::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:43:d9:4b:7d:14:30:e0:38:fa:25:48:c2:0a:f3:de:73:d3:2a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD0C44277A0552FCFDC94E0225F8F0B715DDA73
        Validity
            Not Before: Feb  4 18:29:35 2025 GMT
            Not After : Feb  3 18:34:35 2026 GMT
        Subject: CN=91839F35B956B32318980031AE10F3AA7D632CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ee:6f:59:13:44:73:22:db:e7:06:32:8a:a9:
                    d9:e4:e3:d9:e0:c7:b7:8d:2b:63:c0:d2:9a:51:74:
                    86:20:70:65:3a:8e:76:ca:86:67:82:b0:9c:94:3f:
                    af:fe:54:4a:e6:99:ab:75:e1:1f:1b:f9:65:cc:35:
                    0a:97:56:b2:dc:e4:f1:97:47:fa:77:21:de:5c:c4:
                    3d:50:66:0d:9e:13:84:2c:93:a2:71:20:09:ec:b0:
                    83:36:88:78:ed:1c:57:93:33:38:be:fd:9e:1e:38:
                    17:3c:1d:1e:5f:53:6c:09:1f:b3:5b:64:45:48:e5:
                    41:61:f7:13:53:6d:61:d1:af:af:fe:36:50:0f:21:
                    f5:f8:70:d1:33:9e:85:51:1c:c9:04:c1:31:d4:f8:
                    84:c2:ea:5b:34:08:8c:ee:34:71:55:1f:61:62:80:
                    b4:a2:8e:62:b8:88:23:ab:76:81:b1:1b:b8:f3:d8:
                    c9:58:40:a8:e5:92:ad:2b:66:49:e3:c1:7d:fb:f6:
                    89:54:ce:12:ec:be:3b:60:3c:7d:d8:29:3f:4b:b2:
                    86:35:b1:12:0f:b5:1a:80:a6:c4:6a:9a:3f:02:8d:
                    b9:9d:a1:70:b7:8b:43:e7:c9:c6:cc:04:c8:d1:c9:
                    7b:bd:8f:c2:00:e0:51:5d:3b:74:fc:fd:d0:1a:19:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:83:9F:35:B9:56:B3:23:18:98:00:31:AE:10:F3:AA:7D:63:2C:C3
            X509v3 Authority Key Identifier:
                keyid:1B:D0:C4:42:77:A0:55:2F:CF:DC:94:E0:22:5F:8F:0B:71:5D:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/323830333a623134303a3a2f33322d3332203d3e203532333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:da:1f:b7:bf:66:a2:51:01:3f:8d:e0:b7:b7:3d:4a:84:d7:
         35:40:43:16:d8:74:75:3a:3e:15:2b:12:45:63:32:3a:65:02:
         80:a4:48:c3:92:40:25:fb:0f:04:99:49:3c:9a:9c:32:d9:53:
         e2:40:2b:da:5f:7c:64:3c:9f:4d:75:12:9f:29:07:f0:c9:bc:
         e1:d9:6d:ef:ff:4d:50:9d:e6:f4:cf:ef:87:5e:ff:62:92:12:
         e1:65:68:b1:03:a6:ee:b0:54:e2:bf:c3:73:06:28:08:c1:16:
         99:f9:e1:2a:40:c9:b6:fe:78:56:74:54:60:f7:09:c4:c7:89:
         96:5c:53:5e:7e:6f:e5:20:b7:e0:18:86:77:7c:44:97:7e:9a:
         03:07:50:8e:35:f1:75:36:fc:6c:43:4b:13:08:0d:54:07:a9:
         85:8d:61:67:aa:9d:54:04:8c:d5:56:55:a8:7a:f4:20:04:21:
         c2:a5:8b:c0:93:76:c4:26:b7:c6:62:73:48:83:24:d7:cb:c2:
         76:98:3b:d5:18:25:7d:59:44:4c:2e:3d:87:0f:23:f2:d6:20:
         9c:52:5f:73:58:3d:9f:9c:63:7d:67:43:87:45:35:f9:95:7d:
         43:59:2e:4d:1f:5e:ce:86:48:06:fb:64:2e:65:2d:0b:c9:65:
         51:4b:3f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:28 2025 by rpki-client