Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/323830333a363261303a3a2f33322d3634203d3e20323636383534.roa
File:                     323830333a363261303a3a2f33322d3634203d3e20323636383534.roa (raw, json)
Hash identifier:          kSQiTmxSVwDeobrKEOWHpINXRKId/q/CFCwSfzJ13sc=
Subject key identifier:   6B:24:06:BA:55:6C:97:7E:4F:0A:A6:64:EA:3E:A5:8E:59:6B:9E:50
Certificate issuer:       /CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
Certificate serial:       0EC1D69027AC262D50837D16DC0AAB3B9B7F2B8E
Authority key identifier: AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/323830333a363261303a3a2f33322d3634203d3e20323636383534.roa
Signing time:             Tue 04 Feb 2025 18:54:19 +0000
ROA not before:           Tue 04 Feb 2025 18:49:19 +0000
ROA not after:            Tue 03 Feb 2026 18:54:19 +0000
asID:                     266854
IP address blocks:        2803:62a0::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c1:d6:90:27:ac:26:2d:50:83:7d:16:dc:0a:ab:3b:9b:7f:2b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
        Validity
            Not Before: Feb  4 18:49:19 2025 GMT
            Not After : Feb  3 18:54:19 2026 GMT
        Subject: CN=6B2406BA556C977E4F0AA664EA3EA58E596B9E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:00:99:3d:d8:12:b0:33:77:65:80:c6:fb:82:
                    f5:22:66:11:a4:62:0b:24:2b:92:a1:d1:37:e7:03:
                    80:07:84:d9:3e:12:47:7c:ac:03:93:79:e5:a9:a9:
                    d4:0b:20:cc:81:0b:83:75:51:03:bf:d4:a7:9e:cd:
                    37:93:d8:d6:c1:c2:56:13:09:93:58:f9:a3:ad:ac:
                    ac:06:9c:88:38:7c:12:19:52:48:bf:62:9a:61:97:
                    52:4c:0d:a9:e9:11:7b:4b:90:b8:ce:c2:56:55:32:
                    5b:1a:1e:01:75:1e:11:97:bd:0b:46:88:29:45:44:
                    d5:68:5c:be:16:5b:38:f1:1d:bd:5d:09:37:92:f8:
                    64:e8:54:b3:bf:3c:42:68:b7:87:33:a3:f7:9b:1b:
                    22:3f:99:7d:30:8f:df:77:cd:b3:48:c1:2b:5c:5c:
                    0e:d2:3f:96:6e:eb:68:a3:92:34:be:f4:61:ac:e2:
                    0f:af:03:7f:66:b4:3c:f6:67:11:31:d0:c2:e2:fb:
                    75:8e:0a:7d:b4:3f:bf:03:11:39:a6:f4:86:87:2b:
                    ac:64:9d:b3:4f:ac:4b:c9:90:59:9c:fe:ba:02:64:
                    49:2c:1d:a4:86:c3:10:5b:44:3c:51:4d:a8:59:e1:
                    dd:0b:a2:79:ff:be:1d:36:29:4f:2c:2d:75:d2:7b:
                    b1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:24:06:BA:55:6C:97:7E:4F:0A:A6:64:EA:3E:A5:8E:59:6B:9E:50
            X509v3 Authority Key Identifier:
                keyid:AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/323830333a363261303a3a2f33322d3634203d3e20323636383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:62a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:9e:48:6e:bd:30:3a:4b:34:ef:0f:db:a6:4c:f8:a4:2a:3a:
         13:0d:19:8d:79:fa:a6:6b:2d:00:b7:00:34:84:2d:10:a0:9f:
         7f:d5:da:f3:b8:39:9d:23:c3:f3:af:99:ac:e9:c6:ad:b3:cf:
         cb:c3:e2:ec:21:5d:17:4b:f0:ee:7c:64:84:d2:ed:95:81:d8:
         07:34:69:93:ee:cb:e1:f0:b1:8e:98:c2:90:98:cd:60:52:6f:
         7c:60:ed:27:9f:f7:ed:64:59:63:ed:23:cf:0a:cd:3f:75:e6:
         ea:f2:ef:84:1f:7f:da:85:89:cc:b6:2e:74:21:39:38:1e:55:
         50:d8:7d:43:80:87:28:47:29:dc:48:0e:f7:3b:d6:53:ca:e0:
         71:e4:81:59:42:b8:50:43:e4:76:c0:42:ce:ec:81:0b:9e:75:
         49:a1:c9:82:17:ff:b8:32:11:b9:17:08:f0:55:3e:cc:89:48:
         6e:d5:26:13:54:29:88:a1:8e:26:51:f1:4f:51:0f:20:d4:2c:
         83:cc:44:95:23:aa:2c:94:ef:f9:f3:eb:d8:08:fe:31:64:a6:
         5f:53:6b:75:d9:94:82:4a:4e:93:37:42:2d:42:ec:17:8d:3e:
         d7:66:c3:82:ed:21:95:5b:9b:d8:8f:de:bb:cd:ab:d6:ee:75:
         8d:d5:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----