Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237363531.roa
File:                     323830303a3330303a3a2f33322d313238203d3e203237363531.roa (raw, json)
Hash identifier:          dX9mBKQk/aZ9j4t8GO2UvyBSQx1+D6w1tENk86NVk/U=
Subject key identifier:   4C:F6:4E:46:F8:A0:62:98:36:CE:4E:E1:E1:FF:82:D4:0B:10:94:DB
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       581469497176202F2BF40C403000069E15CF289F
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237363531.roa
Signing time:             Tue 04 Feb 2025 19:56:34 +0000
ROA not before:           Tue 04 Feb 2025 19:51:34 +0000
ROA not after:            Tue 03 Feb 2026 19:56:34 +0000
asID:                     27651
IP address blocks:        2800:300::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:14:69:49:71:76:20:2f:2b:f4:0c:40:30:00:06:9e:15:cf:28:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Feb  4 19:51:34 2025 GMT
            Not After : Feb  3 19:56:34 2026 GMT
        Subject: CN=4CF64E46F8A0629836CE4EE1E1FF82D40B1094DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:59:ea:2a:90:96:af:e8:a0:3b:ff:5f:56:
                    83:b2:da:7c:b3:87:84:65:fa:2b:e8:de:6d:7a:ec:
                    ef:81:65:26:18:0f:57:e4:1e:aa:90:d0:b2:e0:08:
                    f2:b3:b9:5e:3a:c4:e0:d7:60:fc:f5:f6:6a:d9:19:
                    c8:d0:d3:84:3a:8e:07:36:0c:07:24:75:de:32:1d:
                    5a:cd:0b:ba:ba:07:fc:77:71:cb:ca:bd:c0:0b:9a:
                    9e:0c:a2:a3:62:a4:73:73:de:ef:04:88:37:9b:e8:
                    d2:a9:bd:f9:d5:09:56:c5:5f:00:57:4d:05:3a:73:
                    27:08:26:7d:9c:b3:b2:f6:23:72:ed:59:34:37:92:
                    2d:05:12:17:65:c8:a3:9c:69:7b:69:aa:13:1c:19:
                    89:8b:0d:79:ae:75:cf:a7:27:f3:00:03:56:7e:76:
                    89:56:22:bb:a4:19:47:73:1b:7c:3b:4b:c3:32:b3:
                    ff:c9:08:75:1d:e1:1c:10:6c:ba:3d:bd:97:7c:91:
                    0c:31:29:ad:98:e7:ab:72:5a:1f:02:a1:6a:b7:5c:
                    9e:99:f7:99:5c:20:dd:b3:87:74:6e:3d:fb:8f:db:
                    20:a0:c6:d3:9e:ea:66:c5:5f:d5:ad:a2:24:a3:16:
                    a1:27:7d:3a:52:8d:78:79:9e:37:17:88:ae:1e:55:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F6:4E:46:F8:A0:62:98:36:CE:4E:E1:E1:FF:82:D4:0B:10:94:DB
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/323830303a3330303a3a2f33322d313238203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:e5:db:18:08:bc:3b:6e:6d:27:75:3e:36:7a:d1:a8:73:53:
         b7:3b:d4:0a:ee:6e:7b:b7:ac:8e:de:ac:7b:d3:32:fa:e4:bf:
         50:16:00:c3:7a:2a:45:22:f6:71:77:bf:37:d0:35:6d:5b:c8:
         98:4f:0d:bb:95:38:5b:f1:00:61:9d:21:5a:4c:5e:0a:ab:9a:
         1f:22:5c:f3:df:4e:82:e9:7c:86:57:81:ab:64:ad:f5:c4:6f:
         1c:34:06:22:54:10:f6:d9:fd:b9:dc:ac:9e:f5:43:31:7e:21:
         51:bc:c9:a4:71:af:86:e2:2e:91:11:b6:fe:03:56:92:1a:80:
         c8:77:6f:00:1d:f2:33:45:76:02:d1:c7:ad:8c:47:68:5a:9b:
         e9:6f:28:70:37:86:2f:5f:c2:d1:cc:fc:c8:6d:2a:45:15:19:
         c7:33:f2:c5:c1:21:e6:24:11:48:af:7c:20:c0:07:0c:24:36:
         3f:5c:5d:84:ef:12:60:6f:4c:81:3e:05:d0:0c:95:10:27:8c:
         37:b8:d1:e3:b3:58:a2:a9:b8:dd:87:d9:70:3c:93:04:57:d9:
         c9:f0:4d:6d:f7:95:cb:a5:2e:ec:82:4c:65:c2:aa:c3:d5:da:
         2b:f4:6d:9f:24:3c:24:59:20:12:4a:08:48:64:1e:60:92:a5:
         1a:0e:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:55 2025 by rpki-client