Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3366633a3a2f34372d3437203d3e20323639373330.roa
File:                     323830333a353136303a3366633a3a2f34372d3437203d3e20323639373330.roa (raw, json)
Hash identifier:          YIEZryZlvf2NSITO/3T2rYycyg1BL+8bPnG8IJN6PT4=
Subject key identifier:   F4:97:7D:45:4B:23:47:93:46:78:C8:3E:B8:F4:92:28:82:B3:6A:01
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       621D4556A915F289F4394EA207DE90213DBB0E53
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3366633a3a2f34372d3437203d3e20323639373330.roa
Signing time:             Tue 18 Feb 2025 20:55:00 +0000
ROA not before:           Tue 18 Feb 2025 20:50:00 +0000
ROA not after:            Tue 17 Feb 2026 20:55:00 +0000
asID:                     269730
IP address blocks:        2803:5160:3fc::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1d:45:56:a9:15:f2:89:f4:39:4e:a2:07:de:90:21:3d:bb:0e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Feb 18 20:50:00 2025 GMT
            Not After : Feb 17 20:55:00 2026 GMT
        Subject: CN=F4977D454B2347934678C83EB8F4922882B36A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:2b:1d:e1:f6:ea:4b:29:ee:32:3d:44:72:
                    10:57:91:08:99:ef:18:46:52:5a:f3:88:ea:d4:6f:
                    b2:a6:db:8a:70:46:d4:6b:15:f1:1b:26:0d:15:d8:
                    07:dc:34:b9:00:af:4a:2c:0c:4e:08:a6:31:d2:0b:
                    c5:cb:94:57:a5:51:aa:eb:f4:fb:84:e5:0a:08:25:
                    c0:4d:c4:1b:a2:a2:f2:df:d6:3d:a9:46:d9:da:64:
                    d6:c8:fb:78:3a:dd:47:58:71:d8:a3:fd:13:ae:d4:
                    92:a6:01:48:4a:ea:be:72:7a:8f:ba:bf:04:80:2b:
                    1c:b0:d2:d2:73:1e:d2:67:64:38:4f:08:95:f7:fa:
                    0b:b6:48:a4:8a:c7:ee:49:0c:43:a8:b8:fe:18:17:
                    eb:b1:e3:1e:ae:37:46:cd:07:e3:6d:d4:16:83:4f:
                    0d:10:49:7d:e6:64:a2:c1:10:b6:70:17:b3:31:99:
                    e6:02:3d:6e:41:ce:56:9f:bb:d1:b7:e3:8f:a7:17:
                    c0:19:70:49:cf:b2:a8:a8:2d:c7:f3:f6:1e:af:18:
                    4d:1a:dc:95:41:a1:46:ea:cc:56:cc:d3:d4:1d:70:
                    dd:63:86:64:e1:66:9c:5f:3b:53:f7:9e:c4:b3:8c:
                    9a:69:3d:64:18:ff:29:76:27:ef:fd:43:35:8f:b8:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:97:7D:45:4B:23:47:93:46:78:C8:3E:B8:F4:92:28:82:B3:6A:01
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3366633a3a2f34372d3437203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:3fc::/47

    Signature Algorithm: sha256WithRSAEncryption
         61:be:4f:3a:43:f7:07:28:f4:55:19:a3:12:a6:ab:42:b5:04:
         01:db:49:49:04:da:67:2f:c1:84:b9:b6:22:63:80:e7:d3:4a:
         2c:30:87:73:09:82:59:da:09:80:de:9e:ae:98:0c:ff:41:18:
         48:03:89:6a:fe:d6:41:7c:b2:67:e6:d5:79:3e:26:50:1a:85:
         c9:b1:47:54:b4:e2:eb:48:dd:97:c1:d4:d9:6e:de:8c:c2:05:
         6c:1d:9a:2d:ef:66:bc:bd:6d:0b:93:bb:d4:ce:4e:8a:36:9e:
         8e:61:14:ab:ef:71:5f:2b:6f:45:ea:6e:73:0b:66:67:10:30:
         6a:12:ec:51:41:e8:7c:75:a3:98:ba:66:a2:1a:33:45:bc:85:
         4c:fc:b0:be:6d:da:17:fc:4d:8a:f0:d7:db:2d:45:92:c5:3d:
         ab:41:34:c4:9a:41:21:8f:a7:3a:34:fa:f8:31:6a:62:bd:02:
         8a:87:0a:4a:3d:e9:83:47:72:07:37:c6:0a:12:5e:94:ea:d7:
         c0:93:05:21:86:0c:a5:bf:35:45:85:a7:ec:3f:cb:4f:57:5c:
         a0:75:4c:41:07:64:a9:4f:2a:2f:44:e7:35:7a:56:c8:f0:26:
         61:0f:6c:ae:c7:05:04:11:00:94:8a:bd:ea:eb:60:c6:37:70:
         7d:47:57:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:47:37 2025 by rpki-client