Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/323830333a636338303a3a2f33322d3536203d3e203230323037.roa
File:                     323830333a636338303a3a2f33322d3536203d3e203230323037.roa (raw, json)
Hash identifier:          WBGR45T1Ud1uU5XLx7U1qLQriJ+XXC7X+QmXVSoncfs=
Subject key identifier:   8E:38:47:50:88:30:35:2F:99:15:C1:B1:D3:21:A2:57:17:9C:94:74
Certificate issuer:       /CN=845FC621EC41AE7512D63082015413006FEF3E35
Certificate serial:       65C96E2A3C1EE78F719AFF94D34A04CE4707B166
Authority key identifier: 84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/323830333a636338303a3a2f33322d3536203d3e203230323037.roa
Signing time:             Tue 04 Feb 2025 18:56:12 +0000
ROA not before:           Tue 04 Feb 2025 18:51:12 +0000
ROA not after:            Tue 03 Feb 2026 18:56:12 +0000
asID:                     20207
IP address blocks:        2803:cc80::/32 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c9:6e:2a:3c:1e:e7:8f:71:9a:ff:94:d3:4a:04:ce:47:07:b1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845FC621EC41AE7512D63082015413006FEF3E35
        Validity
            Not Before: Feb  4 18:51:12 2025 GMT
            Not After : Feb  3 18:56:12 2026 GMT
        Subject: CN=8E3847508830352F9915C1B1D321A257179C9474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:71:ab:31:fb:f0:3d:ca:bc:1b:0a:e0:23:
                    c1:ea:2c:85:ef:2d:1f:a5:38:df:89:55:de:e3:6f:
                    0c:94:88:30:6f:57:90:3a:47:3c:ca:fd:b0:19:d9:
                    2b:02:a3:64:51:61:8e:2f:ab:b5:84:4a:e8:bc:05:
                    be:f7:b1:1c:7b:19:2b:ad:97:d4:e2:10:8b:d1:96:
                    f7:d7:88:d1:20:94:d5:9d:ae:21:ba:66:77:a8:50:
                    e1:d1:21:ae:9d:08:e3:38:b5:ee:5c:74:de:af:21:
                    d9:df:95:9c:7b:f8:61:c8:a0:a3:07:00:da:06:d8:
                    3a:93:e4:12:2b:b2:45:29:93:f6:fe:7e:5d:17:af:
                    dd:4b:0d:f9:47:51:8c:c0:a4:49:89:78:f1:89:db:
                    45:15:fa:2c:d0:d3:bf:cc:c3:79:09:36:9e:8c:df:
                    5d:67:59:99:04:c1:c4:79:30:24:52:8f:a2:a9:c5:
                    8e:01:a8:95:74:ee:b8:9b:89:12:49:a5:11:8c:84:
                    12:5f:4f:55:5c:1a:e0:b4:86:15:03:c2:75:c1:42:
                    e9:be:e1:f1:5c:ef:b1:78:41:2f:57:5f:c8:2c:25:
                    15:95:4e:ff:46:ab:b1:e2:6c:84:2d:bc:d1:ba:9c:
                    37:6f:11:af:fc:08:bc:e6:b6:8b:3f:35:87:c8:38:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:38:47:50:88:30:35:2F:99:15:C1:B1:D3:21:A2:57:17:9C:94:74
            X509v3 Authority Key Identifier:
                keyid:84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/323830333a636338303a3a2f33322d3536203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:95:e0:be:0d:4d:5f:14:f0:3b:28:c8:0d:06:f9:39:53:c5:
         c0:f8:fa:d0:78:6d:8f:1a:d3:79:97:4d:4e:1c:c6:d8:ab:69:
         15:13:0d:ed:86:01:29:43:ed:93:98:4c:3a:38:a7:03:79:a6:
         aa:c3:5e:e9:0c:17:0f:ba:e9:33:48:9c:ab:00:a9:9e:e8:70:
         6b:e2:28:f0:22:0a:46:8e:e7:7e:71:f2:bb:bc:12:21:ba:fa:
         ee:81:ed:f6:ef:8b:78:76:7a:17:60:15:56:09:2e:4c:c9:1d:
         07:ea:c6:12:97:e2:15:49:3d:db:80:49:26:4c:f5:31:1c:a6:
         ff:c5:cb:f2:0a:f8:cb:76:98:a4:20:b2:2a:cc:57:1d:32:e7:
         fa:db:42:35:60:a9:77:83:04:ff:8f:fa:f8:b2:a5:db:a6:2b:
         ba:5f:43:3f:a7:3e:c8:4f:bb:f6:ec:ac:15:4a:69:7a:cf:e6:
         6e:ee:ee:4b:df:ae:14:73:63:bf:3a:d6:f6:0b:a0:96:2e:fe:
         95:89:87:34:da:fc:8d:19:66:bb:9b:e5:f3:8d:3d:0d:45:64:
         24:45:b6:67:87:02:ba:06:7f:60:35:f7:38:32:eb:93:08:cb:
         68:ed:f0:fd:79:d2:ff:b1:d3:fb:69:e3:ef:7c:fd:62:b2:d7:
         3b:ab:b1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----