Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3930303a3a2f34302d3430203d3e20323639373330.roa
File:                     323830333a353136303a3930303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier:          BrMtaGYKwI700ZL8J/8bKTtqbCtWh+iBnZa97o/3GqE=
Subject key identifier:   E1:0E:55:92:E5:9C:12:70:25:25:6A:3F:4F:EB:F8:36:36:AA:D0:C0
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       50FC393B7C33A4CEC0C23995B29D39B70F050A73
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3930303a3a2f34302d3430203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:07 +0000
ROA not before:           Fri 17 Jan 2025 14:40:07 +0000
ROA not after:            Fri 16 Jan 2026 14:45:07 +0000
asID:                     269730
IP address blocks:        2803:5160:900::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fc:39:3b:7c:33:a4:ce:c0:c2:39:95:b2:9d:39:b7:0f:05:0a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:07 2025 GMT
            Not After : Jan 16 14:45:07 2026 GMT
        Subject: CN=E10E5592E59C127025256A3F4FEBF83636AAD0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:b2:44:13:10:5f:05:23:59:b5:5b:82:a2:
                    d8:49:24:a9:36:cf:29:86:13:18:39:b8:07:d6:fb:
                    49:2f:c3:0a:f8:2d:3d:31:58:61:8c:3d:2c:84:84:
                    28:c2:f7:79:df:89:49:60:b7:a5:d1:1b:f1:ed:33:
                    81:83:c9:5f:eb:f7:0e:52:fd:1b:e2:50:21:7b:b7:
                    a4:7d:ab:49:69:35:bb:ad:d2:77:a1:20:b2:e1:db:
                    11:79:0f:c2:0b:98:90:4a:2c:a8:36:b3:ef:19:05:
                    7d:2a:65:56:16:90:24:a9:69:25:0b:87:71:c2:66:
                    b6:db:6e:82:4a:ab:d6:a5:7f:3a:40:24:69:cb:04:
                    b0:64:79:79:ae:e9:bc:40:5f:f9:6a:5d:f2:65:b7:
                    a4:fd:02:46:c4:8c:2d:0b:e6:30:a6:61:38:33:6b:
                    c5:d4:3d:69:8c:00:e6:f3:6f:2b:bd:4a:4f:1f:b3:
                    b9:ee:e9:60:83:af:41:72:8f:12:76:29:b4:57:fa:
                    fd:5d:d7:57:6f:79:1b:92:7e:a7:48:f4:0f:de:c3:
                    8a:ba:d3:37:f4:2d:eb:aa:60:ce:e9:9b:21:cf:73:
                    57:a1:dc:c4:6a:f1:97:18:93:84:a9:26:eb:f3:1f:
                    e5:96:12:4d:dd:5f:b6:a2:ee:f6:d2:06:85:7b:f7:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0E:55:92:E5:9C:12:70:25:25:6A:3F:4F:EB:F8:36:36:AA:D0:C0
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3930303a3a2f34302d3430203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:0c:bb:44:ec:8c:3f:1e:22:be:e3:15:ae:36:9a:bc:79:30:
         0c:80:c4:1d:a9:4e:bc:23:51:5f:fe:14:5f:c4:62:5b:d1:25:
         77:6b:d3:fb:e0:fa:0e:fb:48:99:bc:9d:5e:89:7e:d7:ab:30:
         a9:56:48:6e:df:16:f5:82:13:a0:99:85:d3:cd:13:9e:95:e2:
         be:e6:be:8c:5d:eb:d8:fc:55:0d:15:54:22:7f:c3:79:09:5c:
         a2:2a:8a:cd:15:9e:3e:a1:3b:be:b8:24:55:21:5f:ea:f5:98:
         42:33:ac:b2:42:e0:50:9d:6b:b5:ac:1d:75:37:c8:54:e9:4d:
         5d:ac:8d:84:73:f0:9c:20:eb:75:8b:05:ca:c7:79:83:a8:4d:
         af:63:6a:13:e4:8d:d7:62:02:b1:5e:9a:4e:4f:28:5d:a0:75:
         31:7a:ad:0c:3d:6b:c5:16:b9:ec:77:d6:0c:95:da:ff:36:44:
         5c:3a:29:cf:23:56:69:50:cd:29:09:9c:b4:f2:12:c9:13:02:
         b0:33:22:10:a2:22:31:3a:48:a1:8d:b8:1d:4a:0a:7e:a8:d7:
         fa:fb:20:16:29:4d:3d:11:41:4d:8d:55:d4:7a:06:94:42:dc:
         f3:e7:42:fc:50:88:c2:59:cc:57:07:27:52:0e:c7:e0:fc:cc:
         1a:dc:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:43 2025 by rpki-client