Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE4C5B54AEEDF46E24975C199FDF24F0734A09AA7183A07A96EB760009701B47/0/323830333a666436303a3a2f33322d3438203d3e20323731383430.roa
File:                     323830333a666436303a3a2f33322d3438203d3e20323731383430.roa (raw, json)
Hash identifier:          TVvLAc+iTbWSu73TUgwGPg6mpn6pjiNacViprJBJQs0=
Subject key identifier:   AE:66:B9:C4:A9:41:A3:E0:44:2D:2B:C1:44:F3:D1:81:BB:8D:95:19
Certificate issuer:       /CN=B7C0A80CD13DAF206A6A9A4F6D736F74323902F6
Certificate serial:       1FCFB4B3280E6CDDDBE95D7C32005E03D83EC920
Authority key identifier: B7:C0:A8:0C:D1:3D:AF:20:6A:6A:9A:4F:6D:73:6F:74:32:39:02:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7C0A80CD13DAF206A6A9A4F6D736F74323902F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE4C5B54AEEDF46E24975C199FDF24F0734A09AA7183A07A96EB760009701B47/0/323830333a666436303a3a2f33322d3438203d3e20323731383430.roa
Signing time:             Tue 04 Feb 2025 18:21:09 +0000
ROA not before:           Tue 04 Feb 2025 18:16:09 +0000
ROA not after:            Tue 03 Feb 2026 18:21:09 +0000
asID:                     271840
IP address blocks:        2803:fd60::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cf:b4:b3:28:0e:6c:dd:db:e9:5d:7c:32:00:5e:03:d8:3e:c9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7C0A80CD13DAF206A6A9A4F6D736F74323902F6
        Validity
            Not Before: Feb  4 18:16:09 2025 GMT
            Not After : Feb  3 18:21:09 2026 GMT
        Subject: CN=AE66B9C4A941A3E0442D2BC144F3D181BB8D9519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:1e:92:e1:06:f1:fb:9d:11:18:28:c4:c4:
                    83:9b:76:5b:7a:41:df:99:18:06:66:11:ab:28:89:
                    e8:ca:d7:4e:81:78:a8:0b:3e:4c:78:04:0c:2d:a3:
                    9b:8b:cd:9f:9a:51:cc:74:3a:90:f1:a2:c6:32:75:
                    ce:d2:4e:fc:95:35:4a:e5:0b:84:9b:88:72:11:de:
                    51:0b:92:c8:85:21:dd:38:c8:5d:00:e7:05:58:79:
                    de:19:99:48:5d:d5:07:75:4a:3b:3b:5c:4e:77:92:
                    3d:8f:7e:4a:73:e0:b9:01:b2:63:0d:bc:ac:9e:1b:
                    db:bc:97:be:55:d0:f9:d4:09:d0:b7:a2:88:8e:9b:
                    d2:87:ba:02:e7:24:ed:19:5d:d7:30:28:50:51:83:
                    f5:f7:50:40:36:e3:f9:10:14:c8:49:a2:29:d3:f6:
                    0a:81:2f:ea:a0:a2:de:65:86:87:0e:b6:4b:32:fe:
                    dd:9d:bd:ac:c9:2e:f8:b8:75:4a:24:c7:a1:e0:4a:
                    a1:3f:64:4f:a0:8b:42:1c:a5:7f:c1:8c:d6:e5:4b:
                    3b:b6:98:df:f7:8a:7e:ba:5d:e1:07:e5:a9:62:9f:
                    ae:e7:53:69:8f:cb:84:27:4c:c2:58:8e:8e:e1:5b:
                    c7:07:8e:ab:79:3b:e4:fc:42:bc:6a:d5:61:f2:c8:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:66:B9:C4:A9:41:A3:E0:44:2D:2B:C1:44:F3:D1:81:BB:8D:95:19
            X509v3 Authority Key Identifier:
                keyid:B7:C0:A8:0C:D1:3D:AF:20:6A:6A:9A:4F:6D:73:6F:74:32:39:02:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE4C5B54AEEDF46E24975C199FDF24F0734A09AA7183A07A96EB760009701B47/0/B7C0A80CD13DAF206A6A9A4F6D736F74323902F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B7C0A80CD13DAF206A6A9A4F6D736F74323902F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE4C5B54AEEDF46E24975C199FDF24F0734A09AA7183A07A96EB760009701B47/0/323830333a666436303a3a2f33322d3438203d3e20323731383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:13:29:e9:22:84:27:df:ec:1a:39:06:74:e9:e4:7f:2a:
         5f:6b:81:53:58:4d:9a:b5:14:84:4a:d1:fb:5b:c6:15:ee:5f:
         bd:e9:cd:35:7d:bb:d7:cb:14:f5:26:8f:e7:1f:8b:da:87:e5:
         7a:8b:49:53:bd:18:5b:e9:fa:a2:dc:9a:63:7b:f2:3d:00:9f:
         e2:61:38:56:e5:af:43:cd:8d:10:4c:7c:9d:8a:6e:63:75:15:
         52:10:03:27:a7:62:73:f8:ab:78:2c:63:47:50:6c:de:07:cd:
         d7:7c:a8:8a:c7:c5:84:8e:53:16:e2:da:79:80:15:4b:74:e6:
         80:44:8a:52:3e:aa:0b:4f:9a:a0:39:3b:2a:c8:75:34:c2:60:
         2d:ad:3b:83:7c:69:c6:2b:20:a3:09:c9:fd:2a:43:83:93:8a:
         f5:3a:ec:8c:b2:04:0f:3d:93:03:a5:cb:ea:7d:c1:3a:c3:1c:
         38:d2:a4:0a:f6:e4:7e:d1:e2:25:dc:f2:63:11:73:bf:87:c7:
         2d:3a:48:41:5f:57:e8:d9:50:7b:23:03:34:51:81:07:06:e4:
         f7:eb:8a:8a:86:f7:4e:7b:9c:e5:94:5e:52:4b:60:9e:3e:61:
         88:97:65:0d:dd:03:66:33:c9:29:04:0f:86:d8:1a:e3:8e:89:
         09:50:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----