Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036353a3a2f34382d3438203d3e2033353733.roa
File:                     323830313a3166303a343036353a3a2f34382d3438203d3e2033353733.roa (raw, json)
Hash identifier:          3qLZvevg/AN30dzjov3JwNkbZAG4eO0UMkTWXeyX8wI=
Subject key identifier:   68:42:35:BB:AB:37:03:25:3E:A6:E2:FC:A2:72:35:20:E4:D0:B5:6E
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       04243B9A4CC50246F516AA0727EDC688EF8765E4
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036353a3a2f34382d3438203d3e2033353733.roa
Signing time:             Fri 21 Mar 2025 09:12:42 +0000
ROA not before:           Fri 21 Mar 2025 09:07:42 +0000
ROA not after:            Fri 20 Mar 2026 09:12:42 +0000
asID:                     3573
IP address blocks:        2801:1f0:4065::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:24:3b:9a:4c:c5:02:46:f5:16:aa:07:27:ed:c6:88:ef:87:65:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Mar 21 09:07:42 2025 GMT
            Not After : Mar 20 09:12:42 2026 GMT
        Subject: CN=684235BBAB3703253EA6E2FCA2723520E4D0B56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:bd:61:17:ea:f5:36:3b:6a:d0:69:4f:5f:
                    0b:56:00:63:76:69:d6:c8:d5:bc:68:ed:53:08:94:
                    3e:be:2b:10:9d:2e:d2:40:c5:14:85:75:45:de:bc:
                    f4:e6:23:b4:06:ab:06:e2:62:e0:23:ee:22:48:28:
                    94:58:9e:ee:a4:ca:a7:8a:55:58:18:1e:ce:ae:16:
                    c7:ff:5f:39:40:06:cc:f1:ae:75:95:10:aa:d0:e4:
                    90:41:bd:9f:d3:c7:ec:86:32:12:db:e3:04:15:4e:
                    de:4f:12:4a:46:20:8f:3c:7c:9c:36:c8:bd:f8:6e:
                    62:4c:84:c7:7b:52:4e:d5:07:5e:25:34:dd:87:3e:
                    05:d3:c3:8c:c8:e7:22:1f:ac:3e:5e:ef:18:aa:8a:
                    4f:b7:d4:68:94:dd:5e:25:a9:fe:93:a1:51:76:2a:
                    24:9d:fd:d5:76:5f:61:dc:5a:8a:63:43:4c:99:f2:
                    25:67:cb:95:10:02:11:58:1b:d0:0c:fc:08:8b:a3:
                    a7:c2:90:09:c2:a6:2f:ee:66:63:c1:98:b9:8e:ca:
                    6f:fa:9b:d0:c7:c3:88:22:66:16:81:3d:79:c4:85:
                    7f:30:51:8b:e5:0b:77:ed:aa:eb:69:51:35:7c:60:
                    20:1e:43:8d:ee:85:ba:7c:68:dd:4f:30:ba:fc:d5:
                    9c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:42:35:BB:AB:37:03:25:3E:A6:E2:FC:A2:72:35:20:E4:D0:B5:6E
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036353a3a2f34382d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4065::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:b1:a8:5b:11:7f:25:4f:bc:d6:6a:ad:a4:1a:c1:f0:6d:
         2e:5d:63:87:14:71:82:b4:11:1f:6a:47:8e:07:84:9b:a0:ef:
         74:68:37:00:4c:98:2f:ce:29:5b:f6:55:3e:7c:13:44:1f:bf:
         21:fe:fb:4b:6a:97:23:8b:db:00:d4:8e:31:54:d2:8e:e9:18:
         36:50:c7:91:5c:10:af:ba:a5:61:28:e8:bf:7b:13:94:91:e9:
         a5:a8:8c:45:dc:a9:a5:07:1b:7e:27:5b:ad:2e:a9:b5:0d:ee:
         5c:06:f2:e6:88:1e:5c:53:0d:6e:17:88:d1:02:39:4a:5d:8e:
         e6:5f:ce:cb:f0:59:14:5a:0b:c1:8e:68:dc:9f:15:25:7b:0b:
         02:f4:d5:c9:99:aa:3a:2a:b2:55:9a:f6:95:ef:77:c4:bf:b5:
         b7:6f:cb:1e:20:9e:49:1b:bc:12:14:57:55:77:9d:b0:11:2e:
         ad:2f:73:14:c8:3e:d1:09:52:0f:2d:76:f7:80:5b:5f:a9:3c:
         80:e0:f2:e6:11:d4:11:2e:5f:08:24:fe:71:3d:c5:d1:8d:d3:
         de:13:23:e9:b1:f9:c8:90:f9:fe:fd:00:4d:94:c5:d7:37:14:
         0e:da:d9:71:62:93:c0:1b:5e:a6:69:97:46:9a:4e:46:75:a5:
         ac:b8:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----