Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3230303a3a2f34302d3430203d3e20323733313237.roa
File:                     323830333a323435303a3230303a3a2f34302d3430203d3e20323733313237.roa (raw, json)
Hash identifier:          TxOmO5dZECf2yHKfooltvRQgSxkdr4LLEuWw1mWvJMA=
Subject key identifier:   CA:FB:4C:62:BB:34:38:B1:4B:42:EB:DE:07:61:7C:4E:C8:29:3D:F9
Certificate issuer:       /CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
Certificate serial:       773A87FCD014BA74C6F7C581DC4AB56AB7FF5AD2
Authority key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3230303a3a2f34302d3430203d3e20323733313237.roa
Signing time:             Tue 04 Feb 2025 18:38:07 +0000
ROA not before:           Tue 04 Feb 2025 18:33:07 +0000
ROA not after:            Tue 03 Feb 2026 18:38:07 +0000
asID:                     273127
IP address blocks:        2803:2450:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3a:87:fc:d0:14:ba:74:c6:f7:c5:81:dc:4a:b5:6a:b7:ff:5a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
        Validity
            Not Before: Feb  4 18:33:07 2025 GMT
            Not After : Feb  3 18:38:07 2026 GMT
        Subject: CN=CAFB4C62BB3438B14B42EBDE07617C4EC8293DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:6b:92:e6:1e:2e:ff:ec:f8:94:cd:91:31:
                    f0:16:56:09:f8:0d:11:c6:07:e7:83:0e:a0:77:6c:
                    c7:32:3f:c0:b8:11:4e:5b:07:2f:02:ea:a8:c2:2c:
                    2f:42:e5:48:d0:37:72:b8:ce:2a:df:16:f8:07:ae:
                    6b:d9:46:14:ae:55:2f:55:46:cf:91:4b:22:5c:5d:
                    7b:d3:9f:5b:fb:fa:ea:51:aa:4f:48:e9:ba:6d:c2:
                    6a:d8:3f:7d:d5:86:a2:14:ec:46:13:d1:ea:36:ef:
                    a5:b5:2d:2b:01:36:ca:90:84:a6:67:58:f8:01:e9:
                    38:bb:3f:aa:7a:9b:0b:8c:14:b0:94:2d:d8:3e:4f:
                    7e:97:d2:08:24:60:51:09:a3:f9:42:78:80:4d:47:
                    75:05:8d:81:db:2d:ce:c8:de:31:b3:7a:97:dc:3a:
                    c6:73:38:79:22:1a:5d:2c:b6:94:0e:11:2a:e7:ca:
                    98:27:36:2c:e1:91:8f:9a:6c:06:e4:5d:aa:18:1f:
                    40:fb:0d:4e:c5:35:70:76:6a:e0:e2:c2:f9:a4:30:
                    dc:00:48:f3:18:72:55:dc:cf:42:7c:5a:67:ec:6f:
                    2b:0e:5c:05:86:ae:42:4f:a8:3d:73:e7:12:4c:6d:
                    e5:92:09:32:3f:b5:80:e1:10:1e:62:54:41:01:d8:
                    29:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FB:4C:62:BB:34:38:B1:4B:42:EB:DE:07:61:7C:4E:C8:29:3D:F9
            X509v3 Authority Key Identifier:
                keyid:DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3230303a3a2f34302d3430203d3e20323733313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:aa:10:1a:05:ce:3f:a1:39:42:3e:58:69:fe:21:09:80:47:
         86:13:50:41:3d:08:71:e7:05:0b:a3:a6:44:2e:4c:3f:aa:35:
         2a:d3:1b:24:27:ae:0e:c5:62:2b:76:a7:cf:60:84:58:7a:6b:
         81:c8:9a:2e:9d:7c:da:1e:7c:cd:c7:08:c2:dd:19:c6:c4:59:
         64:a8:0d:72:c6:27:22:32:20:2c:e2:06:fa:5e:ce:f6:18:11:
         a0:17:18:b9:14:bb:ed:c0:4b:db:17:94:22:0b:45:cb:45:e2:
         8c:66:f8:db:11:9d:ed:65:49:f6:dd:b3:34:84:af:b7:46:f9:
         b3:d1:02:f9:dd:04:4b:e6:43:93:33:dc:c7:94:bd:60:3f:b0:
         42:c7:d2:cc:96:7c:2c:1d:a0:b6:08:78:c2:42:9b:b3:10:e4:
         ba:45:1c:10:a6:ee:ac:eb:19:ad:3f:7e:02:74:e2:ef:77:74:
         b9:03:a0:6e:85:22:c1:ab:f9:a6:b4:b7:5b:bd:f3:12:3c:c0:
         7d:7f:a8:f4:b7:bf:dc:bf:04:10:38:90:ff:4f:cc:83:e9:9b:
         46:60:01:ef:90:b4:fd:9e:af:71:06:38:3e:74:ba:c5:cf:38:
         4f:d2:fa:00:6c:e3:08:9a:9a:99:a6:b8:58:41:bb:13:66:10:
         3e:48:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:47 2025 by rpki-client