Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3332203d3e20323639373439.roa
File:                     323830333a663936303a3a2f33322d3332203d3e20323639373439.roa (raw, json)
Hash identifier:          lPIa/5kOvtceoY9fqQyaJaiYHDA1xCrNIbPZ1rmzhws=
Subject key identifier:   38:5B:61:0C:DD:1E:F8:AF:28:0A:77:E3:39:00:E3:70:93:EE:91:22
Certificate issuer:       /CN=A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC
Certificate serial:       3E95B6CAD4B09B42AD3CC6C62E3B15DC8D986A39
Authority key identifier: A1:95:64:CD:95:B7:67:86:E9:E8:9D:B7:EE:DD:22:CF:6E:2D:90:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3332203d3e20323639373439.roa
Signing time:             Tue 04 Feb 2025 18:00:58 +0000
ROA not before:           Tue 04 Feb 2025 17:55:58 +0000
ROA not after:            Tue 03 Feb 2026 18:00:58 +0000
asID:                     269749
IP address blocks:        2803:f960::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:95:b6:ca:d4:b0:9b:42:ad:3c:c6:c6:2e:3b:15:dc:8d:98:6a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC
        Validity
            Not Before: Feb  4 17:55:58 2025 GMT
            Not After : Feb  3 18:00:58 2026 GMT
        Subject: CN=385B610CDD1EF8AF280A77E33900E37093EE9122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bf:0b:dc:5f:56:18:56:f6:be:3a:65:c3:2d:
                    66:c5:1d:c1:be:46:5b:6c:75:99:14:3e:f1:22:6f:
                    b8:d0:fe:d6:34:5e:20:86:14:ee:ce:8c:5f:6c:c1:
                    b7:cd:f6:a0:37:a9:f0:08:58:c8:92:de:e2:73:04:
                    30:4d:c7:59:99:e0:13:d0:48:ec:73:6e:2e:c7:74:
                    5b:21:08:3c:62:d3:8a:73:40:d2:73:4a:02:f6:03:
                    f4:e8:c6:e7:c2:bd:8d:38:1b:4f:59:6e:8f:75:2a:
                    31:ea:91:38:54:5a:bd:19:00:60:be:15:1c:97:4c:
                    a8:0d:dc:f4:76:97:95:b6:47:99:47:3a:31:13:25:
                    7a:c3:9e:84:26:19:e8:e5:69:ca:c1:48:a4:20:7f:
                    1c:96:b4:8a:6c:72:4a:16:93:06:12:88:75:2f:65:
                    35:3f:17:75:ab:1c:92:a2:3e:68:45:01:66:a0:b4:
                    47:6e:ae:17:6d:97:88:57:6f:e4:ee:d6:74:9f:17:
                    57:b2:87:5a:03:03:ab:22:3e:6d:ca:50:73:a8:11:
                    f1:61:ee:d2:6a:32:86:a7:2a:33:4e:77:ba:fa:2d:
                    ab:65:13:3c:66:83:54:46:12:c7:67:1d:a8:6d:b6:
                    00:bb:7d:d8:eb:36:aa:04:60:c2:a3:40:83:cb:30:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5B:61:0C:DD:1E:F8:AF:28:0A:77:E3:39:00:E3:70:93:EE:91:22
            X509v3 Authority Key Identifier:
                keyid:A1:95:64:CD:95:B7:67:86:E9:E8:9D:B7:EE:DD:22:CF:6E:2D:90:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A19564CD95B76786E9E89DB7EEDD22CF6E2D90DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3D1FA9E72DD18DA88D6C3BFCBCCEAD6E18A1668506CEF025050D3CF50D527/0/323830333a663936303a3a2f33322d3332203d3e20323639373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f960::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:78:bb:4d:ed:01:be:6f:b1:be:b2:ab:b2:64:b9:1b:f9:
         a6:2e:12:3b:22:dc:95:40:92:8d:64:5f:86:9b:57:7d:94:24:
         39:14:15:da:5a:c2:61:97:a5:36:5c:98:d8:5f:f3:c2:e5:e8:
         d0:21:95:0b:df:aa:6c:b2:b7:fe:7f:7e:dd:e5:b2:02:ac:b2:
         81:ef:55:ea:52:2d:61:03:80:38:33:6c:06:48:a6:62:44:db:
         b8:ba:53:66:af:e2:7a:18:75:07:89:f9:6d:f0:0d:ab:2d:76:
         67:33:36:f0:de:39:1c:b0:83:ce:bc:fa:c6:fd:47:7a:bd:a9:
         9b:9c:d4:81:c7:3f:24:f6:e6:d5:4d:8c:09:74:94:50:0e:61:
         7e:8e:d8:7e:1c:d4:32:92:54:ae:5c:cd:58:ab:47:53:78:f9:
         cd:ad:01:30:c6:b8:4f:05:ec:e4:51:64:3b:67:18:38:31:b8:
         4d:de:9e:09:95:fe:d7:46:6c:44:c4:89:46:47:1a:f9:16:b9:
         aa:9b:c6:97:39:41:c4:73:c4:32:49:e2:ab:d7:cb:93:3c:ed:
         dc:c1:05:dd:27:8d:64:37:e5:a9:d4:fa:76:a2:64:e8:f2:16:
         8e:06:fa:91:a9:25:88:e5:af:0b:e0:89:32:a2:5a:20:35:cf:
         54:08:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----