Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a383a3a2f34362d3436203d3e20323732313336.roa
File:                     323830313a3130393a383a3a2f34362d3436203d3e20323732313336.roa (raw, json)
Hash identifier:          i8KAOljcMtphTjmHJYSQrFgakELafvF0QNKPhAt5+ck=
Subject key identifier:   31:8D:53:1D:14:60:82:36:12:0F:98:10:BE:A1:D8:5B:67:64:95:E9
Certificate issuer:       /CN=03CA54765F0951D369734386CF982D71F5CB5403
Certificate serial:       6F54526987EA6290DC9D3A26A5D7E913932D1E3A
Authority key identifier: 03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a383a3a2f34362d3436203d3e20323732313336.roa
Signing time:             Tue 04 Feb 2025 18:46:36 +0000
ROA not before:           Tue 04 Feb 2025 18:41:36 +0000
ROA not after:            Tue 03 Feb 2026 18:46:36 +0000
asID:                     272136
IP address blocks:        2801:109:8::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:54:52:69:87:ea:62:90:dc:9d:3a:26:a5:d7:e9:13:93:2d:1e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03CA54765F0951D369734386CF982D71F5CB5403
        Validity
            Not Before: Feb  4 18:41:36 2025 GMT
            Not After : Feb  3 18:46:36 2026 GMT
        Subject: CN=318D531D14608236120F9810BEA1D85B676495E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cc:93:5d:29:2b:eb:6c:ab:39:28:ba:e5:51:
                    18:d2:5a:5b:1d:88:05:69:cb:a6:44:4c:3a:08:df:
                    fe:79:03:c7:36:25:5f:11:a0:5f:f4:4b:29:5e:9e:
                    b9:ee:3a:ff:af:fc:93:25:3e:20:ca:ec:fd:0b:51:
                    a7:57:71:00:48:05:3a:86:1e:35:4c:4b:3b:df:de:
                    aa:de:c5:15:21:0c:a4:20:0c:2d:f9:c3:6a:56:51:
                    55:d0:6b:7e:11:c5:41:ec:3f:1f:d2:8e:ad:66:ff:
                    68:c7:39:04:b8:4e:23:6f:12:83:ee:c0:d3:fd:97:
                    e4:0e:b5:e7:99:20:05:79:d8:24:16:d5:ed:82:b3:
                    cb:07:fc:2f:0a:d1:6d:4d:c4:cb:4d:e8:e7:5e:e2:
                    ea:3a:1d:9d:45:e4:df:72:2b:92:e1:10:0c:da:70:
                    4b:30:df:ca:21:41:fe:98:0f:b0:20:21:58:6c:e3:
                    75:52:f4:74:01:ad:0a:03:41:05:84:de:43:53:d6:
                    8c:6d:36:e9:b5:d6:88:80:2e:6a:ef:a3:02:78:76:
                    82:6a:81:7d:fa:2f:34:e3:10:c0:3c:9d:fe:a5:bd:
                    25:ae:f7:4f:b6:b1:2c:4f:28:bb:de:16:f3:06:19:
                    3b:1f:44:05:95:63:93:7f:d0:09:72:34:89:91:94:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8D:53:1D:14:60:82:36:12:0F:98:10:BE:A1:D8:5B:67:64:95:E9
            X509v3 Authority Key Identifier:
                keyid:03:CA:54:76:5F:09:51:D3:69:73:43:86:CF:98:2D:71:F5:CB:54:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/03CA54765F0951D369734386CF982D71F5CB5403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03CA54765F0951D369734386CF982D71F5CB5403.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D074091ABD4AC0C45CE98A084B2572D23DA224081356C9D61467810DBB6180CD/0/323830313a3130393a383a3a2f34362d3436203d3e20323732313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:109:8::/46

    Signature Algorithm: sha256WithRSAEncryption
         6f:b2:45:3c:b0:bd:48:b4:1a:19:6b:26:09:66:d3:31:bc:a7:
         92:97:97:6a:3f:fa:62:55:28:62:76:3a:f2:79:fe:9c:93:b8:
         25:d5:73:50:0c:11:81:3b:11:ad:cd:d5:23:5f:71:93:7d:a3:
         7e:f1:28:bf:59:a3:00:af:8b:8d:7e:d1:d5:c6:c0:66:b5:18:
         d5:2f:d3:c5:cb:cd:bb:cd:af:15:58:f5:0a:86:8a:28:25:c2:
         e1:b1:30:ed:f9:80:41:07:df:24:0d:f7:15:6f:cd:26:27:29:
         e3:88:a7:97:0a:9f:29:42:f0:51:05:f4:32:fb:6d:f0:9b:40:
         5f:f5:d8:fe:aa:cb:c6:d6:a7:d5:bd:49:86:a6:50:aa:79:95:
         71:b0:a3:2b:46:ce:59:db:cf:37:07:ae:2f:47:55:52:f2:20:
         d5:bd:ea:be:e8:7d:33:7e:a1:99:00:6e:ad:b1:d8:a0:9d:3d:
         1a:48:6d:bc:2e:71:01:a7:42:53:fe:03:0f:64:e0:51:96:c9:
         28:12:2b:58:06:ad:f0:e3:2e:51:1e:0b:2a:bc:fc:42:d4:be:
         81:79:14:46:ca:dd:ae:d6:98:7e:b6:90:3d:5d:a8:0a:4e:5f:
         77:59:36:68:c6:69:8f:b3:cf:71:0d:55:d8:32:21:b5:c0:69:
         34:f7:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----