Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f33322d3332203d3e20323637363739.roa
File:                     323830333a366561303a3a2f33322d3332203d3e20323637363739.roa (raw, json)
Hash identifier:          5U1nV+DdS8kBeVMKooMbEcbPrbRzReZ/+3EWAD1KDc0=
Subject key identifier:   B5:5A:89:54:66:68:79:6F:98:FB:8F:49:49:01:AE:B0:5B:DF:D0:1D
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       448B192884F976CEA3AD9BCA5ADBF5A3E1F16959
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f33322d3332203d3e20323637363739.roa
Signing time:             Tue 04 Feb 2025 18:33:45 +0000
ROA not before:           Tue 04 Feb 2025 18:28:45 +0000
ROA not after:            Tue 03 Feb 2026 18:33:45 +0000
asID:                     267679
IP address blocks:        2803:6ea0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8b:19:28:84:f9:76:ce:a3:ad:9b:ca:5a:db:f5:a3:e1:f1:69:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Feb  4 18:28:45 2025 GMT
            Not After : Feb  3 18:33:45 2026 GMT
        Subject: CN=B55A89546668796F98FB8F494901AEB05BDFD01D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:64:42:84:1e:47:2c:f4:39:ea:52:1e:f2:
                    36:28:cb:52:df:f0:61:71:62:8f:f8:31:64:df:af:
                    64:35:81:18:c8:03:07:e1:6c:7c:fd:fd:7c:6a:4b:
                    c3:b9:e0:a2:fa:e6:de:9e:a2:d5:4c:b3:44:ad:2d:
                    f6:e1:56:64:1e:4e:c8:cf:27:63:42:7f:f8:e9:8a:
                    a9:0e:c1:c0:1b:0c:4a:f1:b8:02:65:63:e9:d6:bb:
                    a3:67:87:66:07:77:0a:80:b7:14:2e:75:1b:1f:50:
                    f3:04:6e:0f:fd:f9:00:d7:b9:ab:e4:e4:b7:ce:42:
                    0c:90:74:91:b5:9d:bb:1b:bb:dc:83:fb:aa:2e:f0:
                    c9:db:60:1d:8f:fc:3c:3b:28:88:1a:62:f7:4b:87:
                    98:62:27:84:22:b8:7c:fa:38:b6:51:b2:60:77:1f:
                    93:af:54:d4:3f:ec:8a:d8:58:90:e3:ec:26:67:9c:
                    93:38:1c:b2:fb:01:f0:95:37:3b:a5:a3:07:99:4a:
                    d0:dd:eb:fb:d7:24:a7:fe:eb:d8:08:b3:1a:09:e9:
                    5f:2a:d0:9e:88:dd:a4:10:d1:ef:83:fd:54:91:9d:
                    9f:2d:47:da:e7:18:6e:8a:7f:60:c1:90:85:ee:a6:
                    c5:6e:9a:8b:19:49:11:dc:2e:15:3d:db:b9:6b:36:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5A:89:54:66:68:79:6F:98:FB:8F:49:49:01:AE:B0:5B:DF:D0:1D
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f33322d3332203d3e20323637363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:59:3b:a8:b2:ee:02:e5:d9:5f:d8:00:f4:99:36:99:b9:
         8a:8a:c2:a2:a7:3a:73:fd:d5:65:12:d1:10:66:a0:3e:a3:f8:
         07:a3:f1:71:21:22:f7:c0:60:54:6c:a1:71:03:03:95:09:97:
         1a:9d:d1:10:14:f7:9c:0a:c4:dc:92:7d:6e:d4:2f:16:37:07:
         40:c7:38:d8:04:95:14:76:b9:e7:9d:1f:1e:d5:6a:ec:f1:da:
         71:bc:cf:d9:6e:11:2b:0e:b2:38:64:c8:49:12:3a:cc:26:d2:
         17:43:9b:c1:fd:bb:b6:00:76:48:92:e2:d6:22:a5:e9:8d:77:
         6b:60:87:5d:ba:eb:c7:72:f0:85:99:bc:65:66:70:75:20:9b:
         4a:e9:91:5c:16:0d:87:78:42:97:d6:ed:9e:4f:e4:da:cf:cb:
         e8:fe:b3:68:02:3d:80:2f:30:f4:16:a2:b5:14:27:76:af:74:
         92:6f:63:30:fa:7b:7b:fc:8b:12:76:ac:59:0e:c4:d6:10:40:
         28:d8:db:1a:3f:97:9c:d5:1a:dc:c7:6e:ee:42:70:c8:dd:9a:
         bc:3a:60:ad:90:e9:71:f8:7c:3a:d9:3b:de:4d:c1:14:18:db:
         3e:30:91:5a:7c:e3:63:1d:de:ad:ec:12:3a:fa:70:91:92:2a:
         13:6a:9b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----