Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B0457F1A413CD2A0457DCB9E111A72EF516CDA4EB2721B4A76FF7B4D4FFDC9D5/0/323830333a383636303a3a2f33322d3438203d3e20323637383931.roa
File:                     323830333a383636303a3a2f33322d3438203d3e20323637383931.roa (raw, json)
Hash identifier:          rjEYjyPsmGodJh2+Fh/TGUABFYna78nGjByA/VWJW9U=
Subject key identifier:   D6:03:A5:A0:57:8F:F5:48:8C:93:87:DF:EB:8B:31:29:E6:62:C9:83
Certificate issuer:       /CN=46BB55B0DD2AFADCDF3238DA996B7272D18DABA8
Certificate serial:       4C901C75EE8FDE4B60501BF0AAFF6E97784E8AD7
Authority key identifier: 46:BB:55:B0:DD:2A:FA:DC:DF:32:38:DA:99:6B:72:72:D1:8D:AB:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46BB55B0DD2AFADCDF3238DA996B7272D18DABA8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B0457F1A413CD2A0457DCB9E111A72EF516CDA4EB2721B4A76FF7B4D4FFDC9D5/0/323830333a383636303a3a2f33322d3438203d3e20323637383931.roa
Signing time:             Tue 04 Feb 2025 18:46:12 +0000
ROA not before:           Tue 04 Feb 2025 18:41:12 +0000
ROA not after:            Tue 03 Feb 2026 18:46:12 +0000
asID:                     267891
IP address blocks:        2803:8660::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:90:1c:75:ee:8f:de:4b:60:50:1b:f0:aa:ff:6e:97:78:4e:8a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46BB55B0DD2AFADCDF3238DA996B7272D18DABA8
        Validity
            Not Before: Feb  4 18:41:12 2025 GMT
            Not After : Feb  3 18:46:12 2026 GMT
        Subject: CN=D603A5A0578FF5488C9387DFEB8B3129E662C983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:3a:e0:c8:7f:81:7e:23:be:16:6e:14:29:
                    6a:0c:e8:60:bf:f4:8f:8a:27:ed:64:6c:26:6e:02:
                    07:02:b2:65:c4:7b:c9:29:62:5c:96:89:d6:99:4b:
                    e1:fc:72:3a:70:9b:64:dc:9c:d8:c1:8e:46:b8:53:
                    8d:f8:9a:cc:28:06:7a:e2:59:50:44:e4:ab:e9:dc:
                    44:7a:9d:20:e6:35:4c:b9:bb:16:6d:22:32:10:e6:
                    10:31:72:1b:88:79:7b:a8:5f:ab:45:19:60:e7:9b:
                    c0:23:be:bb:88:16:dc:7a:36:7b:7e:16:4e:25:f6:
                    32:0c:9b:90:ab:86:80:04:23:d4:1b:11:4b:d5:4a:
                    a7:46:f3:2f:ef:1a:3c:14:43:e2:29:d1:a9:d9:0e:
                    30:f6:da:db:b6:64:11:cf:dc:6e:77:ac:50:7a:c9:
                    ce:b2:01:dd:41:7c:b2:2b:e9:91:42:05:7d:ed:71:
                    1e:fa:d6:07:a3:bc:2e:3c:27:ab:ce:8e:a3:71:4e:
                    f1:f2:48:79:82:4f:08:aa:c3:ca:61:75:86:f6:0a:
                    32:f4:95:2e:66:96:06:73:03:d1:4a:18:cf:f4:13:
                    4b:6d:2d:cd:03:88:78:ee:30:46:4a:93:0d:bf:fb:
                    8f:b0:36:6f:48:44:b2:30:a2:3a:65:f3:a4:e0:7f:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:03:A5:A0:57:8F:F5:48:8C:93:87:DF:EB:8B:31:29:E6:62:C9:83
            X509v3 Authority Key Identifier:
                keyid:46:BB:55:B0:DD:2A:FA:DC:DF:32:38:DA:99:6B:72:72:D1:8D:AB:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B0457F1A413CD2A0457DCB9E111A72EF516CDA4EB2721B4A76FF7B4D4FFDC9D5/0/46BB55B0DD2AFADCDF3238DA996B7272D18DABA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46BB55B0DD2AFADCDF3238DA996B7272D18DABA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B0457F1A413CD2A0457DCB9E111A72EF516CDA4EB2721B4A76FF7B4D4FFDC9D5/0/323830333a383636303a3a2f33322d3438203d3e20323637383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8660::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:0c:86:85:e3:8a:5a:2b:7f:a0:0e:84:70:05:97:e6:56:
         d4:62:97:c1:36:f5:60:a9:38:17:e9:43:da:01:80:e9:1b:37:
         7a:d1:9e:a6:5d:c1:fe:f0:30:67:b6:c0:0d:c4:98:4c:10:25:
         39:4d:33:4f:5b:63:93:7d:3d:89:4f:88:7f:ff:39:e6:7b:d0:
         53:b2:91:19:54:35:36:57:37:a6:50:fa:8a:b7:7a:bd:79:f4:
         8a:cd:34:86:8f:32:31:a3:97:51:d8:40:01:b0:14:d8:79:6d:
         40:9a:c4:3e:55:9b:d0:8d:c4:a6:3e:6c:23:d1:a0:0e:10:98:
         99:53:37:3d:f6:0d:a6:6e:2f:03:f9:5c:a4:6b:38:1a:20:0c:
         7f:b2:64:17:9a:96:32:50:5c:15:97:f7:a8:75:46:89:dc:23:
         ae:16:48:6e:b4:81:ca:d4:71:68:e9:60:87:d6:95:c2:2d:ee:
         2f:a0:6f:8e:c2:c7:89:f7:f1:94:61:76:29:b5:72:b1:19:99:
         20:bc:8b:74:8b:08:ab:16:3d:36:2b:fd:7d:65:ca:7f:fc:b4:
         b7:5b:40:38:73:35:37:43:4e:bf:01:87:df:ac:3f:bf:ef:89:
         f9:6c:5d:9b:9c:fb:da:d1:20:e9:f1:9c:9c:70:4a:d1:8f:f5:
         4b:a3:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:39 2025 by rpki-client