Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a623030303a3a2f33362d3336203d3e20323639373330.roa
File:                     323830333a353136303a623030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier:          fMTDmXrPgnfUIcWyJkWcmFuf1onW3FoDqGCBED9OLRA=
Subject key identifier:   2F:A6:A6:B9:2E:72:50:D7:C0:78:38:1F:D7:CB:54:AD:42:06:8E:DB
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       66108222D6B7198B7689EA55D5EA806C467D361F
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a623030303a3a2f33362d3336203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:04 +0000
ROA not before:           Fri 17 Jan 2025 14:40:04 +0000
ROA not after:            Fri 16 Jan 2026 14:45:04 +0000
asID:                     269730
IP address blocks:        2803:5160:b000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:10:82:22:d6:b7:19:8b:76:89:ea:55:d5:ea:80:6c:46:7d:36:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:04 2025 GMT
            Not After : Jan 16 14:45:04 2026 GMT
        Subject: CN=2FA6A6B92E7250D7C078381FD7CB54AD42068EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:c3:70:eb:e5:8d:b0:aa:85:f4:2f:96:b4:
                    70:ab:1e:a5:68:ae:ae:35:aa:76:d8:4e:95:0f:0c:
                    71:d7:c9:22:89:c7:92:07:52:e0:2a:80:af:3f:95:
                    1d:9a:c0:98:44:8d:55:03:1f:b3:8f:f0:27:24:6a:
                    ff:b3:3a:0f:24:17:f3:08:15:ae:3b:7a:60:ee:b2:
                    72:e7:5b:06:1e:8c:0d:92:bb:b8:5a:14:43:29:ce:
                    12:a4:ff:07:75:d5:37:d9:43:69:84:66:26:48:0f:
                    1c:e7:af:b0:b5:54:18:2c:4b:a3:49:19:f7:5c:71:
                    ee:2a:21:90:01:c5:19:11:1b:9d:e8:0d:36:f0:3f:
                    a7:43:6d:a7:6b:9a:c2:fd:f9:a0:d3:d6:21:7e:4c:
                    ad:f8:da:d0:79:9d:b7:3f:f3:9a:e2:c0:dd:76:07:
                    a3:93:3e:06:61:1b:77:a3:ca:2f:82:b5:85:36:90:
                    42:08:12:bd:33:82:96:09:cd:5e:41:0b:3a:d2:78:
                    f5:67:1c:70:7f:3f:a0:1f:d1:c9:2e:5e:21:87:b6:
                    46:da:42:7b:d6:b7:80:f8:44:4b:53:44:2a:7d:f4:
                    04:d2:2c:58:49:10:7e:6b:cb:1f:b3:62:12:57:43:
                    ef:ae:30:58:ce:5d:e6:5a:a0:e2:13:b0:d1:07:a3:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A6:A6:B9:2E:72:50:D7:C0:78:38:1F:D7:CB:54:AD:42:06:8E:DB
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a623030303a3a2f33362d3336203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7e:2a:7f:06:54:e1:bf:c8:3b:77:2e:c5:bb:97:3e:5b:7e:60:
         79:01:4b:2c:92:9c:d1:73:3d:a1:1d:53:77:f8:89:34:3c:7c:
         54:70:ed:29:4e:04:2a:88:66:e4:7c:75:93:5b:21:7a:4f:92:
         75:47:18:90:31:0b:d1:a9:21:87:17:f4:72:df:b6:7d:e0:d8:
         bb:3e:29:bd:a0:99:61:32:ee:7f:11:98:6a:9b:1f:94:35:24:
         ba:a0:a7:d1:83:d8:77:ad:25:ae:dc:d3:a8:d5:22:e3:d3:3a:
         35:38:6e:50:6f:87:92:32:52:ca:a0:a2:f1:22:b3:73:af:a7:
         d4:e9:06:17:20:30:ca:64:6d:ce:d3:e4:e2:2f:1a:d6:58:62:
         00:51:2b:21:1c:fd:b9:86:57:f1:94:5c:46:cd:b1:9e:b6:84:
         d6:b6:e0:54:08:8d:da:18:59:54:5d:44:ed:e7:ee:6d:b1:af:
         d7:f1:08:86:91:70:f4:8c:8e:5b:12:e7:d2:fb:fb:d5:70:10:
         4a:36:dd:f2:74:4c:85:68:3a:a4:e7:a5:4f:63:aa:a9:33:2c:
         8a:2e:4b:ee:82:48:3e:29:14:a1:4b:8a:64:36:b5:a6:0b:54:
         ec:03:4a:1c:3f:0d:1b:ef:0f:d6:14:bf:a7:91:5b:46:83:cf:
         c5:18:5f:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:43 2025 by rpki-client