Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/323830333a353634303a3a2f33322d3332203d3e20323633383336.roa
File:                     323830333a353634303a3a2f33322d3332203d3e20323633383336.roa (raw, json)
Hash identifier:          elMcZ1AiOYfPBk6jaSaOLkOY3wjBcBbck4gNKB4t+vE=
Subject key identifier:   6D:6F:05:29:D5:7D:8D:72:8D:A2:90:39:C7:EB:36:18:76:F3:D4:19
Certificate issuer:       /CN=B6E578CA8449954DBBC23584F2AFE7DA2B7676FB
Certificate serial:       3F878FC5A205D242AF4111A715B1501F097C6A98
Authority key identifier: B6:E5:78:CA:84:49:95:4D:BB:C2:35:84:F2:AF:E7:DA:2B:76:76:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/323830333a353634303a3a2f33322d3332203d3e20323633383336.roa
Signing time:             Tue 04 Feb 2025 18:01:30 +0000
ROA not before:           Tue 04 Feb 2025 17:56:30 +0000
ROA not after:            Tue 03 Feb 2026 18:01:30 +0000
asID:                     263836
IP address blocks:        2803:5640::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:87:8f:c5:a2:05:d2:42:af:41:11:a7:15:b1:50:1f:09:7c:6a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6E578CA8449954DBBC23584F2AFE7DA2B7676FB
        Validity
            Not Before: Feb  4 17:56:30 2025 GMT
            Not After : Feb  3 18:01:30 2026 GMT
        Subject: CN=6D6F0529D57D8D728DA29039C7EB361876F3D419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:49:81:ec:c9:1c:54:f3:d3:3f:ac:19:88:
                    7c:95:62:8f:22:36:f0:12:66:41:62:90:70:38:cd:
                    0d:7b:30:28:2c:f3:7a:a9:7d:47:73:79:57:2f:eb:
                    7a:64:12:35:5c:cf:96:20:6f:2c:7f:55:e1:03:4a:
                    52:2f:0e:22:b6:0b:66:3b:8c:1b:d5:12:4d:ea:da:
                    63:72:fe:73:0d:75:da:fe:6b:bd:cf:7e:25:1d:50:
                    06:dc:a6:0e:f1:c9:5d:8c:14:9e:4d:78:1e:b5:19:
                    02:47:f6:0e:d5:39:35:ea:a1:3e:fa:54:78:a4:d7:
                    16:df:00:43:ee:9a:4b:ff:11:8a:97:82:1d:92:61:
                    0c:a7:a9:a9:9c:04:46:7f:ec:2d:0b:e4:9f:db:b7:
                    0e:1a:14:0a:94:01:97:be:f1:1d:dc:d2:27:68:95:
                    d3:e1:9d:03:94:34:e1:48:1d:5c:b8:89:de:c2:ee:
                    fc:aa:68:ba:8b:44:e0:8b:01:9b:54:ed:c0:1b:79:
                    dd:ce:e6:e0:87:61:fe:90:6a:93:e0:d6:a7:39:62:
                    a4:fe:fb:69:cc:a3:e4:67:a7:c2:e1:f8:d0:e8:e2:
                    8a:26:ad:a9:67:67:ad:7e:4e:5d:55:a4:6e:52:6c:
                    14:a8:7e:f7:92:75:33:d7:9c:29:24:92:bd:f4:24:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6F:05:29:D5:7D:8D:72:8D:A2:90:39:C7:EB:36:18:76:F3:D4:19
            X509v3 Authority Key Identifier:
                keyid:B6:E5:78:CA:84:49:95:4D:BB:C2:35:84:F2:AF:E7:DA:2B:76:76:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6E578CA8449954DBBC23584F2AFE7DA2B7676FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E295F19CE929CCC1C33E5CE3CB8DD17BCB6FB795965DA37AB89BF27F163EC5D4/0/323830333a353634303a3a2f33322d3332203d3e20323633383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5640::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:7a:b9:88:17:f4:f1:db:04:f0:14:8d:eb:fd:7c:c0:15:
         b4:8e:d8:f5:f3:b7:09:b3:0b:56:51:74:cf:b5:65:ca:f3:79:
         01:4f:fa:1e:a2:77:2b:41:d3:c4:44:13:f2:22:95:75:96:90:
         61:8b:93:2d:84:e2:0d:ce:a1:af:bb:15:6e:3a:4a:35:12:c1:
         65:3e:da:76:68:ec:0b:0f:5b:71:21:19:c8:9a:dc:3e:87:e1:
         17:41:82:71:01:06:05:63:dd:4e:4c:cf:00:3b:c6:63:63:ea:
         df:70:ac:4c:f6:7c:10:85:52:af:01:f4:b2:57:12:a5:5b:9c:
         21:e2:e1:00:22:5e:76:80:f9:73:db:33:60:67:8a:7b:60:20:
         c5:5c:fc:4c:40:cf:28:fd:2e:41:ee:a9:c8:13:4e:3a:7d:a8:
         96:c0:fa:46:74:22:6e:e8:fa:ab:96:69:c2:c0:b9:d4:2f:85:
         5f:54:fa:25:0f:4c:41:62:b2:0f:16:d4:bd:66:94:30:a7:2a:
         ae:dc:a5:e3:3c:b1:0b:8c:fd:31:76:9b:24:69:28:2d:4f:ba:
         49:e4:f0:bc:67:6a:79:85:72:04:fe:7c:68:e9:9b:a4:a5:ef:
         84:1c:de:01:3a:9f:4e:75:d5:10:f3:5a:2a:4e:97:03:80:2b:
         13:af:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----