Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          w3p4KWyKSEHN23a0vjvwlzCO0QT+0y5OALEwkIDlLgc=
Subject key identifier:   D0:97:59:9F:87:67:6F:B5:96:42:A9:8D:AD:D8:B8:DC:97:0C:31:18
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       102B47FCDD9718AE921C158ACD81EBFCBB25B6EA
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 04 Feb 2025 18:46:51 +0000
ROA not before:           Tue 04 Feb 2025 18:41:51 +0000
ROA not after:            Tue 03 Feb 2026 18:46:51 +0000
asID:                     271927
IP address blocks:        2803:ea10:1aa::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2b:47:fc:dd:97:18:ae:92:1c:15:8a:cd:81:eb:fc:bb:25:b6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Feb  4 18:41:51 2025 GMT
            Not After : Feb  3 18:46:51 2026 GMT
        Subject: CN=D097599F87676FB59642A98DADD8B8DC970C3118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:95:9c:ad:82:69:bd:61:af:5d:40:87:d9:
                    5a:7a:f5:c4:5d:d1:1e:25:57:90:58:e2:fc:16:f1:
                    eb:e3:a2:8e:e2:14:51:1b:1f:d3:d9:6b:0b:3e:6e:
                    af:c1:25:89:ac:2a:12:f3:2f:58:49:a3:bf:47:79:
                    b7:51:68:19:f8:7c:c3:1f:3c:86:ab:e2:5f:71:2d:
                    0c:e6:e2:5a:eb:9e:1e:33:7a:5d:f0:be:65:ff:c2:
                    d8:3e:51:85:37:83:60:a7:22:4f:73:90:9a:6b:a9:
                    df:98:69:14:fe:b3:a1:c7:b2:12:9d:45:c6:09:2d:
                    a1:a0:79:71:f9:62:53:f8:59:18:5c:68:b1:36:8a:
                    46:ea:fb:93:77:34:53:99:5d:09:ce:0e:0b:0b:44:
                    f3:1c:55:da:56:b1:3b:f5:85:21:bc:99:26:d3:a9:
                    b8:63:37:3c:c3:43:ad:68:87:25:0f:f9:09:7e:0e:
                    aa:4a:90:18:d8:0a:9f:63:99:ae:3e:ed:00:fd:4a:
                    3d:c5:ce:2e:5a:36:ad:66:25:37:93:08:b6:92:a3:
                    9b:05:e7:cf:ce:f0:03:a9:58:2e:0e:09:38:a7:91:
                    ce:6a:1c:6c:82:1f:07:da:c5:bd:0c:4c:b8:8a:00:
                    cb:4e:e0:81:76:94:ef:29:1d:fc:73:13:8b:23:ad:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:59:9F:87:67:6F:B5:96:42:A9:8D:AD:D8:B8:DC:97:0C:31:18
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a3161613a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:1aa::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:46:aa:51:0d:25:92:1e:6c:06:92:d0:a0:39:21:6c:aa:
         b0:f7:d5:5e:89:c1:38:5f:a0:49:a5:32:ee:ca:0b:18:6f:d5:
         06:64:69:8d:f2:46:40:aa:e0:08:62:16:1d:07:e4:b7:0c:7f:
         ff:07:97:c7:4b:dd:72:34:30:c6:5f:bb:f8:cd:45:72:e5:96:
         45:1f:80:b7:14:f4:33:ed:5c:b8:f4:06:0d:0f:8d:a5:4b:93:
         5a:4a:29:c3:ff:9a:57:43:c3:39:49:df:7d:32:63:bf:63:af:
         b8:d4:e4:6a:b6:7c:b4:c2:a2:4c:02:d6:b6:22:41:a4:fd:7d:
         45:08:cc:68:86:55:85:af:2c:4a:8c:a8:c4:1f:03:af:3c:fa:
         39:8d:49:9a:76:63:eb:83:67:ea:16:94:85:66:1d:a8:63:0d:
         ee:a1:23:2e:44:cd:c2:fa:1d:35:29:c1:ec:cf:03:a4:a8:0a:
         90:16:e8:bb:6d:c0:7b:50:c9:a4:cf:02:1c:6b:27:39:b5:cc:
         5c:9a:8a:8a:71:af:1e:dc:6a:2c:d2:2e:f5:07:4a:a4:75:7d:
         4e:04:9e:93:a5:c2:f3:ce:e4:87:6d:c3:b7:3a:6a:b9:70:09:
         3d:9d:7c:04:7b:a3:74:6b:86:2a:08:9c:61:75:44:51:23:c8:
         7b:ef:55:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:07:59 2025 by rpki-client