Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f34382d3438203d3e20323637363739.roa
File:                     323830333a366561303a3a2f34382d3438203d3e20323637363739.roa (raw, json)
Hash identifier:          fVJishM4vPqqiWQ/PmsaozHUELBcCoDrCIs7J8ZB9GI=
Subject key identifier:   F8:09:3A:94:3F:80:EC:9F:5D:D4:CA:47:EB:E7:49:EC:2E:2E:7E:CB
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       55EB22F1042E6D7109A714D9ACD8513A4F8E007C
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f34382d3438203d3e20323637363739.roa
Signing time:             Tue 04 Feb 2025 18:33:46 +0000
ROA not before:           Tue 04 Feb 2025 18:28:46 +0000
ROA not after:            Tue 03 Feb 2026 18:33:46 +0000
asID:                     267679
IP address blocks:        2803:6ea0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:eb:22:f1:04:2e:6d:71:09:a7:14:d9:ac:d8:51:3a:4f:8e:00:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Feb  4 18:28:46 2025 GMT
            Not After : Feb  3 18:33:46 2026 GMT
        Subject: CN=F8093A943F80EC9F5DD4CA47EBE749EC2E2E7ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:36:20:fe:29:b3:2c:d4:98:ec:d9:5a:18:
                    9f:0b:b1:d4:e8:c8:b8:14:54:5d:b0:e3:ec:50:51:
                    61:86:34:ab:1c:e1:49:d6:c8:39:74:09:1f:33:9e:
                    45:15:da:7e:2c:e6:bb:72:5e:42:43:1d:26:7c:18:
                    2d:07:81:38:f2:dc:1d:45:2a:03:8d:ca:35:06:a9:
                    01:d1:f8:0e:88:9e:b6:1b:9f:d9:29:b4:70:57:fd:
                    f1:3d:75:46:c9:69:6d:0c:5d:ce:03:02:b2:e4:3f:
                    82:11:a2:61:3b:76:be:b6:03:57:f5:d2:e0:1a:df:
                    ad:af:e7:54:27:fb:67:19:bf:db:8f:e3:71:c9:12:
                    c5:c6:7d:80:36:6c:79:f8:ac:60:5f:de:5b:05:17:
                    69:c2:c8:b7:dc:b9:1a:56:da:bf:73:a7:2b:b5:71:
                    39:ec:5e:00:eb:c1:fd:67:75:a3:9f:f2:f4:54:5c:
                    49:be:4f:62:bf:bd:5c:89:35:0f:41:5b:23:4f:6f:
                    16:6c:c5:b5:6c:fa:f2:a8:69:cc:49:e3:e5:53:82:
                    37:96:90:19:1e:a9:81:44:68:ff:e4:c9:60:8d:30:
                    43:60:92:fb:a6:be:fc:d0:48:d6:4c:d7:cd:32:d0:
                    63:45:d1:57:56:e1:c4:22:42:ee:8c:c2:ce:5f:79:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:09:3A:94:3F:80:EC:9F:5D:D4:CA:47:EB:E7:49:EC:2E:2E:7E:CB
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/323830333a366561303a3a2f34382d3438203d3e20323637363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ea0::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:74:0e:29:43:e4:a6:2e:ee:1a:dd:d1:1f:d1:19:44:9e:ac:
         0c:1b:ac:36:03:1f:b0:31:d5:6c:ba:49:6d:e3:23:33:8e:90:
         12:fd:d1:63:77:5b:b2:d3:72:5c:42:fb:7b:b5:33:2c:3e:93:
         e1:ef:a2:0c:03:62:04:78:30:59:48:92:08:16:34:aa:cb:86:
         c2:6b:f5:db:dc:a6:1b:74:c2:1f:15:cd:10:52:1e:28:0c:09:
         a1:a4:3c:0b:d2:f7:af:58:c5:34:d1:76:89:8c:d8:ab:8a:23:
         f2:cc:e3:4e:79:df:6b:a1:53:81:45:67:e0:db:74:34:f0:ba:
         f3:d0:85:81:ae:7a:ad:8c:50:6c:b1:0d:b0:90:d9:f6:d4:53:
         b4:6c:99:b2:df:3d:43:c2:a9:ac:97:6f:67:0f:c1:06:f2:7a:
         69:9a:37:94:dc:32:6d:f8:30:28:ca:33:99:ae:e2:f6:0e:d1:
         b9:4e:cc:6c:28:af:61:8a:39:24:d3:7a:a4:00:a5:ee:f9:7f:
         2c:9f:ed:4b:97:c9:9d:ec:ff:60:28:17:40:1f:25:9e:ba:59:
         82:23:33:cc:f5:47:c5:fe:b7:97:88:62:b8:ce:f7:2a:c2:04:
         dd:8b:15:5c:42:f2:a5:c9:e7:37:0e:39:b2:e2:2c:bc:c4:33:
         d6:d6:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:53 2025 by rpki-client