Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/323830333a386332303a3a2f33322d3332203d3e20323634363638.roa
File:                     323830333a386332303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier:          pyGQTqCUxskq57DWzQu70ApCVVxWd9abx48haT/Y9rA=
Subject key identifier:   85:52:7A:E4:04:E0:76:8C:2C:AB:93:98:EE:E2:0E:82:20:12:27:D9
Certificate issuer:       /CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
Certificate serial:       522B02371ECC735FDAA84204039E6739B27E76A7
Authority key identifier: BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/323830333a386332303a3a2f33322d3332203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:26:51 +0000
ROA not before:           Tue 04 Feb 2025 18:21:51 +0000
ROA not after:            Tue 03 Feb 2026 18:26:51 +0000
asID:                     264668
IP address blocks:        2803:8c20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2b:02:37:1e:cc:73:5f:da:a8:42:04:03:9e:67:39:b2:7e:76:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
        Validity
            Not Before: Feb  4 18:21:51 2025 GMT
            Not After : Feb  3 18:26:51 2026 GMT
        Subject: CN=85527AE404E0768C2CAB9398EEE20E82201227D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:69:3d:14:3d:87:82:48:22:98:3d:83:5f:
                    cd:7d:3b:83:61:b3:61:df:e1:05:1b:a2:c6:83:4b:
                    44:fc:04:f1:6b:9f:36:9f:6a:86:78:eb:14:8d:1f:
                    7a:92:2f:26:44:f7:0e:eb:52:a6:84:40:e0:5f:bc:
                    ac:0f:0a:34:7a:97:6d:c9:1b:07:8d:47:70:22:bf:
                    ef:96:8f:60:78:83:dc:32:4c:bd:1a:07:b8:ba:52:
                    f1:31:db:6f:a9:5c:51:5e:e6:2e:ce:f9:49:10:43:
                    ac:c7:3d:e9:ad:87:05:e3:ae:89:59:1f:78:de:9e:
                    a5:78:3c:c7:dd:82:5b:cf:eb:bd:d5:91:9d:0a:b0:
                    30:10:49:38:54:35:a5:a9:a0:b0:60:55:34:fb:85:
                    4b:79:79:21:19:86:27:1b:02:04:e3:f4:46:2e:fb:
                    4d:54:7f:14:2e:a6:1b:43:0f:02:45:ba:cd:60:85:
                    d4:9a:57:64:96:03:d5:10:47:97:a0:41:e6:b8:d8:
                    d9:5c:2f:c7:37:78:26:14:38:e9:53:af:92:97:a3:
                    87:29:1d:37:1b:f6:03:e7:e1:fc:7d:e0:ec:f2:ad:
                    80:e0:c2:a8:de:bf:eb:5f:fb:a7:8c:ab:8c:f1:7c:
                    55:3f:c8:53:af:b8:6d:33:b2:a4:5a:0c:11:50:af:
                    5b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:52:7A:E4:04:E0:76:8C:2C:AB:93:98:EE:E2:0E:82:20:12:27:D9
            X509v3 Authority Key Identifier:
                keyid:BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/323830333a386332303a3a2f33322d3332203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:8c:33:57:c9:66:92:05:e0:d9:d7:14:1d:be:37:3e:21:
         fd:97:e2:57:e5:9b:b4:83:2d:50:40:ff:b8:dd:bd:91:81:2b:
         84:eb:b0:12:04:cf:ce:15:ca:89:1b:e3:d1:0a:0d:af:c1:eb:
         08:b1:12:70:bb:65:ec:fd:5d:ff:1d:e9:bf:a2:77:1a:c4:47:
         64:60:76:f9:c8:c5:4b:e1:d1:37:98:3d:30:74:93:c6:82:17:
         2c:75:4b:13:62:9e:1d:54:da:c6:95:77:52:ff:fd:5f:f2:59:
         5d:a6:b4:05:0e:ec:d1:41:1e:a4:1b:b7:de:85:b2:50:fe:0a:
         f4:03:f3:77:b0:49:4c:62:01:0f:8d:cd:b7:dc:d4:1d:22:40:
         0d:37:b9:7c:1a:b9:c0:0e:b2:ff:82:7c:b3:c3:ad:8e:6a:c6:
         93:dd:b8:0f:23:1b:09:e9:de:2b:39:c4:c4:b6:41:54:e7:27:
         e0:f4:df:73:76:f0:51:08:35:3f:00:e9:8d:45:ff:06:51:39:
         88:3c:12:49:5f:9a:dd:2e:af:81:bf:67:8a:9a:18:d4:09:b0:
         04:a2:08:32:96:af:3b:4d:73:0f:cd:af:48:18:01:fc:03:58:
         3e:fe:0c:55:da:2a:30:f3:2f:5c:29:05:f5:a1:c1:6c:ff:1c:
         fa:48:17:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:40 2025 by rpki-client