Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a333a3a2f34382d3438203d3e20323632353839.roa
File:                     323830333a616539303a333a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          ImGxSBnsF9pq63WzYgNNj61uVomd8+/+tK4qBl5DQxM=
Subject key identifier:   8F:49:8C:2E:E6:30:72:6C:14:2F:AE:4C:29:AC:96:DC:D3:08:08:E0
Certificate issuer:       /CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Certificate serial:       58EDC3E9A62FABE91DCCF236466DE25A69F1ECA3
Authority key identifier: 4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a333a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:15:42 +0000
ROA not before:           Tue 04 Feb 2025 18:10:42 +0000
ROA not after:            Tue 03 Feb 2026 18:15:42 +0000
asID:                     262589
IP address blocks:        2803:ae90:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ed:c3:e9:a6:2f:ab:e9:1d:cc:f2:36:46:6d:e2:5a:69:f1:ec:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
        Validity
            Not Before: Feb  4 18:10:42 2025 GMT
            Not After : Feb  3 18:15:42 2026 GMT
        Subject: CN=8F498C2EE630726C142FAE4C29AC96DCD30808E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:37:f7:6a:75:19:38:3e:e8:89:cd:ca:6f:
                    56:af:a5:94:44:b2:bc:b2:1e:01:57:f3:22:de:a6:
                    be:4d:20:1f:4e:fa:1c:4d:99:fc:a9:ec:14:28:dd:
                    6b:bf:b7:bc:95:d2:7b:d3:89:fc:6a:35:d4:6e:f3:
                    3e:86:25:01:9c:dd:0d:51:11:eb:8a:29:28:0f:e0:
                    a5:c7:8d:0f:3e:ab:18:c4:cc:91:cc:3a:a7:fd:53:
                    c8:29:bf:c9:bc:b5:ea:de:12:82:26:0a:af:7e:4a:
                    42:a6:0d:e2:a3:4c:29:61:ae:03:f3:98:af:e1:04:
                    47:27:f5:73:8c:4d:d9:36:51:c7:b6:3b:80:9a:55:
                    9c:3a:3a:cd:55:79:78:70:5a:68:79:d8:3c:00:a0:
                    f2:7c:bb:39:b8:88:b8:c3:73:b4:3b:11:4e:c4:c0:
                    8b:a8:f5:aa:70:81:e0:2e:49:20:61:3d:88:4f:e1:
                    8f:7e:72:56:14:bf:c8:26:5c:8d:7b:19:6b:19:04:
                    a1:0a:28:21:01:29:b2:6f:4f:eb:94:28:79:cb:f6:
                    ed:61:16:f4:2e:fc:44:bf:e0:67:5a:2f:2d:3d:a3:
                    7b:19:e4:48:6f:26:b7:6e:af:d5:a3:b1:2d:88:7c:
                    07:98:6a:a8:8e:86:90:a4:5f:bb:18:3c:e4:65:f7:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:49:8C:2E:E6:30:72:6C:14:2F:AE:4C:29:AC:96:DC:D3:08:08:E0
            X509v3 Authority Key Identifier:
                keyid:4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/323830333a616539303a333a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ae90:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:41:18:03:6b:fa:3f:5e:04:69:22:98:df:9d:c1:11:ad:8e:
         ab:76:ea:f3:7c:6d:a1:b2:a1:36:ec:97:29:71:9a:98:cf:ea:
         9c:02:83:15:92:8b:c0:84:f7:56:f1:0c:a8:e2:2d:f8:e5:a5:
         90:8d:4f:0d:46:90:ed:0e:ac:fb:c6:7f:41:1c:70:94:75:ce:
         77:c5:7f:ba:c8:4c:74:dc:ba:f8:e5:cd:68:91:fd:6c:3c:d9:
         f8:ee:d1:26:63:c3:7e:11:c8:1e:83:36:00:64:68:06:35:3b:
         6e:ac:4d:17:f2:28:f9:31:e1:2e:45:a5:33:45:e1:0c:7f:9d:
         03:d5:02:4e:a0:03:6e:6e:97:1d:12:8c:10:24:18:70:fd:5e:
         ed:e6:46:49:71:91:79:0a:77:d7:19:1f:92:54:ae:af:1c:dd:
         c1:41:1b:8b:74:f4:d1:d0:45:0d:93:bb:8e:ad:1f:89:0c:0f:
         93:62:cf:d8:99:43:2d:ee:9a:66:68:c1:d6:e9:93:0d:cc:82:
         2e:30:1e:96:1a:69:63:be:ea:52:e2:40:91:78:3a:6e:c6:7f:
         8b:92:b1:9b:a3:32:38:cb:a6:48:38:84:5c:ab:72:a5:58:8a:
         f2:07:ae:fb:1a:18:12:b0:2f:1b:b2:9f:74:5c:b1:f2:12:ab:
         4c:a9:58:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----