Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a383030303a3a2f33362d3336203d3e20323639373330.roa
File:                     323830333a353136303a383030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier:          1Duw7ikLJorOZHxKYjznTsrPZP9iFPw7qUQKqWI7iYU=
Subject key identifier:   5B:D2:B0:50:7B:5E:A8:ED:CC:FC:6A:73:57:4D:F7:AB:DE:4C:16:3B
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       6F66C7397E46794FA8AE60629F46512A80605803
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a383030303a3a2f33362d3336203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:06 +0000
ROA not before:           Fri 17 Jan 2025 14:40:06 +0000
ROA not after:            Fri 16 Jan 2026 14:45:06 +0000
asID:                     269730
IP address blocks:        2803:5160:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:66:c7:39:7e:46:79:4f:a8:ae:60:62:9f:46:51:2a:80:60:58:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:06 2025 GMT
            Not After : Jan 16 14:45:06 2026 GMT
        Subject: CN=5BD2B0507B5EA8EDCCFC6A73574DF7ABDE4C163B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f2:89:d0:69:c6:2e:7c:2e:46:44:f9:e3:b3:
                    ea:02:ce:d1:31:a7:5d:21:65:ab:e2:28:d8:b2:cd:
                    22:b8:e6:49:20:9c:96:56:d0:46:f6:35:4d:c2:d2:
                    27:7b:70:ea:11:3c:b6:b3:02:f2:e7:98:21:46:a1:
                    9d:ff:bd:6b:06:4e:9e:ed:b8:de:61:92:d3:c1:1b:
                    9d:10:8b:24:d6:25:93:9b:2f:b4:de:6a:c8:75:0c:
                    c4:e0:ad:a9:00:a2:0e:f2:88:dc:c2:80:05:01:5b:
                    a2:7e:1a:10:e6:04:0f:ce:e9:3a:a0:16:8f:cb:06:
                    01:e7:4d:69:c8:55:b7:ef:a4:0d:42:c7:07:b4:df:
                    44:54:54:cf:ac:fd:e4:1a:44:d6:ff:2b:f2:d2:fc:
                    14:c0:0b:b0:48:c1:39:9e:de:96:10:1d:9a:98:58:
                    11:ff:c4:ef:c5:1a:5f:ad:cb:1d:ab:84:f7:d2:af:
                    e7:0e:64:f2:a8:2e:bb:fc:a6:11:23:2e:36:fc:fc:
                    17:6e:7a:f8:8b:df:2e:e1:6b:e1:0b:e9:eb:c4:b1:
                    d2:34:d4:42:3b:96:ee:4d:06:3d:8f:b4:47:96:d2:
                    fa:c9:8c:7c:69:09:59:89:a6:fd:7c:48:a5:4e:38:
                    bf:ca:d7:52:82:bb:fe:be:75:90:78:a8:06:16:36:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D2:B0:50:7B:5E:A8:ED:CC:FC:6A:73:57:4D:F7:AB:DE:4C:16:3B
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a383030303a3a2f33362d3336203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:59:9e:eb:0b:4c:22:5f:d5:1b:eb:c5:42:d1:50:1d:71:86:
         b0:59:8b:35:f2:94:12:1d:da:c9:4e:76:e2:d5:76:2b:9d:15:
         82:c0:d3:a2:a2:1f:01:fc:7c:e1:ea:56:38:b8:22:f6:0f:26:
         2b:3e:07:ff:30:8a:50:c6:17:80:e9:14:7b:07:1b:51:78:94:
         5d:59:f1:13:95:27:f9:eb:63:59:d8:09:8e:4d:62:37:ef:a7:
         87:c7:b3:b9:8a:76:c4:d5:e8:0b:06:a7:8d:fd:63:c7:40:de:
         23:0a:1e:59:dd:f2:f8:d4:f0:c2:22:f6:43:46:01:2d:90:ac:
         8f:b7:3f:85:2b:7d:44:bc:12:e5:cf:ee:b6:06:ce:ba:14:dc:
         b3:8d:9a:44:cc:3e:67:b5:13:a7:d5:a7:6c:f8:3f:79:5d:b5:
         d5:1f:f5:11:3a:81:71:b0:ac:cd:7f:c3:57:6e:f2:5d:50:ff:
         67:e9:45:11:2a:2e:a3:16:24:14:f2:ae:21:89:7b:56:04:ed:
         74:44:6e:25:56:0a:3b:52:0e:16:c4:db:f9:50:56:9e:91:c0:
         6b:34:8b:a2:ae:87:33:79:8a:55:38:1a:4e:6c:7b:20:c7:e0:
         61:59:37:a6:1d:96:04:5f:3c:39:75:20:1f:9e:13:3a:5c:41:
         64:c5:5f:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:52:42 2025 by rpki-client