Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/323830333a613738303a3a2f33322d3332203d3e20323633373136.roa
File:                     323830333a613738303a3a2f33322d3332203d3e20323633373136.roa (raw, json)
Hash identifier:          g6fwQ9c/YcROHd2Xo5dCiX0Z/Vw4hDcb+Ki3Yp36vS8=
Subject key identifier:   8B:8D:78:47:84:D8:43:22:AC:D4:83:AE:8F:70:85:ED:D9:CE:4F:E1
Certificate issuer:       /CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04
Certificate serial:       325F26DE54167E8AB2DB93116F6C2EEB2750D5BF
Authority key identifier: 48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/323830333a613738303a3a2f33322d3332203d3e20323633373136.roa
Signing time:             Tue 04 Feb 2025 18:09:43 +0000
ROA not before:           Tue 04 Feb 2025 18:04:43 +0000
ROA not after:            Tue 03 Feb 2026 18:09:43 +0000
asID:                     263716
IP address blocks:        2803:a780::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5f:26:de:54:16:7e:8a:b2:db:93:11:6f:6c:2e:eb:27:50:d5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04
        Validity
            Not Before: Feb  4 18:04:43 2025 GMT
            Not After : Feb  3 18:09:43 2026 GMT
        Subject: CN=8B8D784784D84322ACD483AE8F7085EDD9CE4FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b7:e9:9d:05:5b:82:95:f4:1e:dc:8f:26:a9:
                    68:e7:43:8b:c1:61:9e:e1:ff:a6:08:49:6a:92:c7:
                    11:37:97:3d:be:4c:5d:08:ff:36:ab:8f:e2:24:5b:
                    f5:3c:cf:cd:e7:91:97:c1:a6:1a:64:ef:8c:e1:6f:
                    3b:e4:a4:d8:11:52:ee:a7:c7:da:c7:24:69:27:6e:
                    cf:ef:ca:4b:d9:b0:da:bc:e8:4c:86:6c:71:45:ef:
                    2a:3d:aa:94:d8:5d:2c:42:0b:90:50:35:c0:ed:20:
                    00:39:64:36:ab:ba:7d:11:31:67:65:6a:2e:29:5e:
                    e8:c1:3f:09:b9:ec:85:bb:55:3c:79:1c:83:97:a7:
                    59:9c:89:35:06:f6:62:2a:b8:2d:c0:db:90:80:7f:
                    48:f0:22:77:85:5a:6c:e2:3c:0b:10:d1:6f:ff:3d:
                    58:be:78:ab:e1:34:78:ff:a4:a5:9d:59:8e:dd:13:
                    39:2c:8d:83:cb:a4:5c:10:41:73:88:db:61:68:eb:
                    7b:d2:fc:4e:44:a0:fd:e4:75:4c:87:3a:18:77:6d:
                    93:03:fa:cc:4b:cd:a3:77:79:13:fc:e6:80:4c:6a:
                    51:bb:37:8a:27:41:d0:82:b3:0c:30:61:65:22:b5:
                    ef:ef:8d:a0:58:75:51:c7:18:7a:63:63:19:60:30:
                    b7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8D:78:47:84:D8:43:22:AC:D4:83:AE:8F:70:85:ED:D9:CE:4F:E1
            X509v3 Authority Key Identifier:
                keyid:48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/323830333a613738303a3a2f33322d3332203d3e20323633373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a780::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:03:75:f3:14:75:7e:a9:79:50:29:90:fd:cb:15:03:80:19:
         95:2f:4a:f2:b7:c3:6a:69:d4:ba:dd:bf:39:7b:2f:f0:8b:da:
         da:6d:28:02:c4:af:75:55:98:c5:a5:e2:86:61:02:ee:ad:38:
         df:51:34:e8:19:98:34:a3:dd:11:33:b3:63:48:10:69:12:00:
         45:ea:35:eb:47:63:3c:3f:be:99:b6:e3:e6:23:4d:88:8f:96:
         cf:a8:28:08:0a:89:ab:56:9a:ec:47:08:05:f7:3f:f7:d9:3f:
         ee:a5:7c:5b:05:f5:d4:36:ad:ea:58:2c:fd:bc:66:dd:46:f3:
         4c:21:d6:f6:68:40:ff:f4:d8:9a:0d:1e:0e:0e:34:6e:c5:ed:
         b3:d7:22:ea:6b:28:c2:f8:27:68:5d:86:40:19:8d:e2:a5:c7:
         77:be:dc:f9:00:65:05:59:f4:3b:72:86:32:4b:8b:90:c7:fc:
         1e:84:58:2a:00:21:f4:3c:d7:65:6c:ab:72:9c:12:65:b9:2c:
         d4:27:97:57:d7:9d:3e:2f:ce:4b:ad:e8:87:1a:94:bd:c5:bc:
         c9:55:4a:6b:81:2f:3a:5f:ea:4b:1d:68:fb:d6:df:be:31:ad:
         94:86:79:ba:dc:d1:59:6d:ba:df:bb:3f:90:df:4f:76:e6:21:
         73:f3:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:29:07 2025 by rpki-client