Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/323830333a663632303a3a2f33322d3332203d3e20323635383639.roa
File:                     323830333a663632303a3a2f33322d3332203d3e20323635383639.roa (raw, json)
Hash identifier:          kIHtE3hauHRN+3AyLA9N0eCFXbyzBTPFJCuHde5D6UA=
Subject key identifier:   64:A3:68:DC:A5:68:E1:83:98:38:AB:01:19:DC:71:DD:00:86:FF:66
Certificate issuer:       /CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
Certificate serial:       BB477F96396D40E7C425D19331F2B31F80A48A
Authority key identifier: E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/323830333a663632303a3a2f33322d3332203d3e20323635383639.roa
Signing time:             Tue 04 Feb 2025 18:29:10 +0000
ROA not before:           Tue 04 Feb 2025 18:24:10 +0000
ROA not after:            Tue 03 Feb 2026 18:29:10 +0000
asID:                     265869
IP address blocks:        2803:f620::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bb:47:7f:96:39:6d:40:e7:c4:25:d1:93:31:f2:b3:1f:80:a4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
        Validity
            Not Before: Feb  4 18:24:10 2025 GMT
            Not After : Feb  3 18:29:10 2026 GMT
        Subject: CN=64A368DCA568E1839838AB0119DC71DD0086FF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:58:de:63:43:3c:28:ab:98:62:d5:83:0a:
                    06:92:54:65:1a:5c:78:a7:d3:a8:25:34:4b:3f:87:
                    d6:84:a1:f8:fc:c1:97:b9:1b:de:4a:f7:99:22:27:
                    fa:fb:8c:08:c5:71:41:db:c7:1c:a9:e6:33:c2:a8:
                    a3:2e:e7:59:7d:76:9f:e6:76:d9:bd:9e:da:22:9f:
                    53:6f:4f:11:be:12:92:b8:27:fd:0c:18:51:cc:b6:
                    69:f8:b3:ca:f3:8c:15:5a:ec:91:f0:81:58:72:da:
                    31:d7:ab:31:20:61:e9:c1:d4:34:0d:c5:04:10:98:
                    17:cb:31:b2:1d:d6:b9:f8:32:f1:38:45:88:c1:d7:
                    64:b7:7c:1d:7a:9f:ab:d7:7a:a2:d1:48:f0:6e:00:
                    5d:c2:9f:19:6a:73:e5:49:c5:bc:ae:f0:da:ef:5d:
                    0a:83:cb:77:89:fd:79:f5:18:11:bd:02:5e:66:c1:
                    95:84:54:b2:f5:ac:7a:ab:ef:87:24:35:8a:49:00:
                    0d:db:4d:fa:33:78:58:45:8c:6f:78:6e:a7:34:dc:
                    7c:29:8c:d1:c8:4b:18:e4:54:56:38:41:88:f1:0a:
                    68:33:9e:36:84:cd:77:7b:fe:62:5f:a1:1c:47:d1:
                    eb:4f:ca:70:8f:44:a2:be:16:aa:8b:a4:74:3f:8f:
                    c9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A3:68:DC:A5:68:E1:83:98:38:AB:01:19:DC:71:DD:00:86:FF:66
            X509v3 Authority Key Identifier:
                keyid:E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/323830333a663632303a3a2f33322d3332203d3e20323635383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f620::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:30:62:4a:da:16:89:ed:31:d0:8a:0a:65:38:b3:a6:81:53:
         22:18:b6:46:ba:d3:fb:f8:c9:7b:a2:17:21:1b:40:ae:dc:ec:
         19:57:6b:77:39:fa:09:45:c3:03:65:50:b9:ad:28:70:35:1b:
         8a:f8:b2:9f:fd:2d:e6:56:e2:9e:04:36:dd:81:d6:ca:c3:09:
         37:b2:a2:51:41:a2:2c:dd:31:78:18:0a:36:88:26:dd:33:ea:
         0d:18:0a:47:b3:3b:a6:52:2c:d8:d7:58:6e:5d:bb:dc:1f:e8:
         a8:41:4b:87:f2:bb:9a:45:c6:21:78:47:f7:82:3a:72:cd:22:
         b4:70:e7:f3:ff:86:5c:1e:95:cd:b0:57:f2:75:69:56:45:df:
         35:36:f4:56:b6:f2:fa:46:8f:c3:77:0d:06:04:8f:aa:28:68:
         df:82:87:d7:38:c6:6e:61:fd:54:ed:a5:24:b8:65:e9:a1:91:
         34:4c:17:2d:81:e1:1d:bc:46:b5:1c:9f:29:7b:7a:aa:00:66:
         5f:11:8e:e9:37:bf:a5:54:27:32:60:3f:ac:c1:26:aa:63:7c:
         89:2c:04:d2:8b:59:4c:b1:82:6e:70:09:23:0c:39:18:fd:29:
         27:ae:79:1c:59:e0:4e:86:81:71:25:7d:06:4e:a5:0e:2b:4f:
         ca:f2:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:18 2025 by rpki-client