Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/323830333a633836303a3a2f33322d3332203d3e20323637383139.roa
File:                     323830333a633836303a3a2f33322d3332203d3e20323637383139.roa (raw, json)
Hash identifier:          49k0yyR+tbJpHfo8j+f3+M7doN9RbjRxGb7db7XacpM=
Subject key identifier:   AB:01:31:C6:28:16:61:C5:59:26:C3:8D:D7:1B:6A:BB:79:03:8F:C4
Certificate issuer:       /CN=F2F56A7D46F18855519ECBFCA7BDC0C7D3508748
Certificate serial:       7B9297B5CBE3EA426740B3F81E1BAB345759B524
Authority key identifier: F2:F5:6A:7D:46:F1:88:55:51:9E:CB:FC:A7:BD:C0:C7:D3:50:87:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/323830333a633836303a3a2f33322d3332203d3e20323637383139.roa
Signing time:             Tue 04 Feb 2025 18:19:21 +0000
ROA not before:           Tue 04 Feb 2025 18:14:21 +0000
ROA not after:            Tue 03 Feb 2026 18:19:21 +0000
asID:                     267819
IP address blocks:        2803:c860::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:92:97:b5:cb:e3:ea:42:67:40:b3:f8:1e:1b:ab:34:57:59:b5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F56A7D46F18855519ECBFCA7BDC0C7D3508748
        Validity
            Not Before: Feb  4 18:14:21 2025 GMT
            Not After : Feb  3 18:19:21 2026 GMT
        Subject: CN=AB0131C6281661C55926C38DD71B6ABB79038FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:54:ff:4a:66:50:0d:17:4c:f2:88:8c:9b:ad:
                    f1:96:c9:bf:9e:a0:d1:86:4a:f3:b6:f9:b3:10:b3:
                    d8:e8:af:56:b2:f3:3a:05:1d:78:e0:1f:9a:b7:24:
                    72:ca:16:ed:b2:35:61:2b:4c:84:fc:5e:6a:8b:f3:
                    19:7c:40:2c:00:ed:7f:9f:30:19:97:55:35:22:e4:
                    34:b0:61:d3:59:84:0c:01:08:9b:13:63:cf:16:a9:
                    80:05:d8:82:2e:71:77:96:a8:bc:62:2c:be:65:ed:
                    4a:df:c8:62:91:66:53:4c:76:84:b2:40:7c:ea:37:
                    77:28:6b:95:df:33:1b:1f:3b:44:29:26:21:e4:66:
                    6f:ce:cc:74:d9:51:9c:e0:0a:29:cc:e5:e6:56:0c:
                    b0:c0:64:50:18:52:24:fe:49:0c:c4:f6:e3:77:6c:
                    6f:6d:92:91:0b:b2:cb:c6:23:c0:14:a9:8b:6c:40:
                    fe:3d:25:95:67:1b:cb:22:7d:77:49:8d:9b:03:e2:
                    a1:5c:5e:4e:1d:48:7d:f9:cf:bb:dd:ec:da:09:c1:
                    cf:83:11:2d:55:83:49:c8:e0:cb:5e:36:b3:5b:6c:
                    30:d6:50:97:23:d3:63:0b:be:c3:ba:9a:95:40:57:
                    a0:a7:e0:bf:15:52:86:a6:08:cf:12:4b:75:ee:45:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:01:31:C6:28:16:61:C5:59:26:C3:8D:D7:1B:6A:BB:79:03:8F:C4
            X509v3 Authority Key Identifier:
                keyid:F2:F5:6A:7D:46:F1:88:55:51:9E:CB:FC:A7:BD:C0:C7:D3:50:87:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2F56A7D46F18855519ECBFCA7BDC0C7D3508748.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A617CC547E5C627EB95D5E0BD1E83126DA8CCE1215B28E5897498AE179053F96/0/323830333a633836303a3a2f33322d3332203d3e20323637383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c860::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:a1:38:a0:a7:d7:be:a9:95:4a:5c:d3:40:81:5d:2b:b3:d3:
         63:93:da:75:33:cf:f9:4e:8e:c6:fc:34:b9:c9:d3:8b:bd:76:
         43:43:1b:75:26:1c:b2:24:5f:f6:0e:ad:90:40:ea:42:2e:63:
         a4:06:3b:3b:cd:3a:27:a8:d4:72:a7:4c:8b:21:f8:77:4d:b1:
         74:13:ac:4c:7d:7a:ea:f5:11:cb:8b:9e:93:96:69:aa:4c:34:
         8e:e1:24:8a:07:7d:8c:6c:4b:14:3c:71:4a:08:1d:8c:18:8e:
         13:10:3d:df:bd:87:c8:ca:06:24:45:07:bf:f4:c3:2c:55:4a:
         30:4b:f4:14:df:8c:08:4c:8b:f6:df:a7:c0:b4:7e:20:7e:25:
         6a:a7:a2:54:93:87:ad:46:6d:39:cc:22:09:1a:43:30:e1:0b:
         2d:6b:4d:da:3c:9b:0f:9c:aa:a1:9d:79:14:86:2c:6f:25:3b:
         0c:5f:2c:cb:4e:05:3b:80:88:57:44:7b:31:ad:ef:30:92:3d:
         7f:33:53:2f:da:60:df:e8:5b:3c:a1:5a:29:a7:bb:0a:42:f6:
         04:ae:0a:ee:a6:81:32:28:76:02:8c:54:e7:d6:52:bf:66:60:
         bc:79:52:4e:7a:a7:7b:e8:69:02:17:92:97:b8:8e:74:f8:a3:
         13:4b:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:41:55 2025 by rpki-client