Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323637373230.roa
File:                     323830333a636638303a3a2f33322d3438203d3e20323637373230.roa (raw, json)
Hash identifier:          OeaP8wjoORMo3gfpLSKBwQ+adimhd5hELuJLCkDWj9g=
Subject key identifier:   67:FE:80:BB:72:50:FA:26:52:E1:54:F4:A9:39:66:0B:6B:5D:E9:55
Certificate issuer:       /CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
Certificate serial:       0F6CEBF97E2A1FE8E824BEFB4121B4D7593FC39B
Authority key identifier: 79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323637373230.roa
Signing time:             Tue 04 Feb 2025 20:00:10 +0000
ROA not before:           Tue 04 Feb 2025 19:55:10 +0000
ROA not after:            Tue 03 Feb 2026 20:00:10 +0000
asID:                     267720
IP address blocks:        2803:cf80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6c:eb:f9:7e:2a:1f:e8:e8:24:be:fb:41:21:b4:d7:59:3f:c3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
        Validity
            Not Before: Feb  4 19:55:10 2025 GMT
            Not After : Feb  3 20:00:10 2026 GMT
        Subject: CN=67FE80BB7250FA2652E154F4A939660B6B5DE955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:5d:4f:a7:ff:a2:29:31:bb:fc:1c:74:a4:
                    fe:eb:c6:7f:8d:0d:a3:ba:78:7e:38:d6:8f:0b:fe:
                    1c:35:9b:86:08:50:18:3f:86:01:d8:c3:d7:d9:84:
                    26:43:49:28:69:21:95:ad:23:ec:08:15:b4:5b:62:
                    3b:7c:45:cf:ac:5a:e2:9d:7c:f0:23:07:b7:03:0f:
                    c1:29:7a:48:b0:71:79:e8:64:eb:96:c2:c5:c1:a2:
                    1f:bd:a7:41:18:cd:87:16:28:9d:ca:3b:26:f4:ed:
                    18:d4:7b:15:2a:38:44:81:83:65:c9:96:66:35:bb:
                    76:c6:64:dd:4c:62:d9:26:c0:31:f8:14:4f:b9:a9:
                    c6:f6:ce:0d:90:18:2f:87:8d:c7:c5:13:5c:29:d7:
                    db:d3:ea:e8:0b:73:b3:52:a1:1e:65:13:23:72:dc:
                    06:c4:02:13:1c:21:df:64:c0:c6:45:6c:c7:31:97:
                    48:59:23:8c:3a:bd:2c:bc:40:99:f0:cd:f9:fe:b0:
                    1c:96:63:bf:cf:5a:0d:87:8b:83:b4:c9:b0:d3:33:
                    7b:86:06:01:ee:8d:8a:3f:d7:45:f0:08:f2:72:87:
                    bc:65:39:5c:bc:4a:9b:c1:8b:51:f0:7c:04:de:ca:
                    de:cc:4f:a4:ec:f2:df:66:2e:7c:5f:ab:49:76:04:
                    37:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FE:80:BB:72:50:FA:26:52:E1:54:F4:A9:39:66:0B:6B:5D:E9:55
            X509v3 Authority Key Identifier:
                keyid:79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/323830333a636638303a3a2f33322d3438203d3e20323637373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:ae:6f:90:ff:1d:62:fc:49:45:4a:2f:1d:fa:7c:bb:74:1b:
         19:1a:e6:e0:47:36:88:c4:8a:39:30:df:80:c7:cc:b0:4f:4f:
         17:05:fd:3d:49:62:e4:9a:92:0f:75:e9:c2:f7:89:dd:8e:57:
         7f:61:ad:cf:d3:9f:56:75:72:b7:ae:9e:ae:bc:c9:fe:57:9e:
         59:34:22:3f:ba:ad:2c:be:89:bf:ab:d8:df:3a:d1:ba:44:67:
         2d:33:5e:e9:a7:be:06:21:a2:5f:f2:07:94:df:95:0e:b1:90:
         2b:75:c6:5d:41:ed:07:04:f8:b3:a3:44:20:4b:d7:b3:ae:5d:
         65:fd:9d:a4:c5:16:25:b7:e0:14:84:66:80:71:25:90:a4:8b:
         7e:c3:35:1d:ad:88:65:a7:ad:5a:58:3c:cc:b4:60:b5:86:72:
         e5:44:d4:59:ed:fb:22:7a:bf:63:bf:59:f3:58:6e:f7:87:66:
         df:f2:af:db:09:53:7a:96:48:38:7f:59:32:7c:92:8f:55:eb:
         b1:ab:07:e8:23:87:de:45:ec:3f:2d:93:b1:cd:d8:6b:c8:a8:
         2b:fa:27:0a:b1:07:26:7a:4b:1c:6d:fc:55:9a:75:48:47:1b:
         67:4e:94:c4:5c:3a:cc:f8:02:58:dd:78:82:71:6e:b1:1b:28:
         24:b3:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:36:47 2025 by rpki-client