Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3530303a3a2f34302d3430203d3e20323733313237.roa
File:                     323830333a323435303a3530303a3a2f34302d3430203d3e20323733313237.roa (raw, json)
Hash identifier:          YuychsmR7smBzJFtPA34pJpJqDrS5r58R3RqDeA6k08=
Subject key identifier:   09:78:A6:59:10:AB:C2:10:0D:EE:6D:C9:8F:79:F5:6D:CE:76:EF:E9
Certificate issuer:       /CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
Certificate serial:       4960582B338F908E692B0D625C2FD9DAF67715F5
Authority key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3530303a3a2f34302d3430203d3e20323733313237.roa
Signing time:             Tue 04 Feb 2025 18:38:09 +0000
ROA not before:           Tue 04 Feb 2025 18:33:09 +0000
ROA not after:            Tue 03 Feb 2026 18:38:09 +0000
asID:                     273127
IP address blocks:        2803:2450:500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:60:58:2b:33:8f:90:8e:69:2b:0d:62:5c:2f:d9:da:f6:77:15:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
        Validity
            Not Before: Feb  4 18:33:09 2025 GMT
            Not After : Feb  3 18:38:09 2026 GMT
        Subject: CN=0978A65910ABC2100DEE6DC98F79F56DCE76EFE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:3a:cf:db:84:dc:3d:76:7d:b4:c8:d8:20:
                    83:ef:ff:b2:5e:3f:d2:3e:0b:02:1d:0b:49:0c:c7:
                    e8:30:90:77:bb:c3:5f:a0:7d:c1:37:8a:cd:7a:23:
                    a8:28:ab:3e:59:af:58:c4:42:bb:c0:71:e4:8b:00:
                    c4:0c:24:c1:9b:cb:03:1e:19:ef:30:0b:cd:5e:d5:
                    f1:2d:77:9c:71:14:b8:e5:3d:db:18:85:8d:a6:f1:
                    40:30:e9:b0:c8:04:9c:28:ba:a8:94:4a:b2:77:dc:
                    73:17:fc:f9:a0:60:8d:bf:81:26:26:2f:9f:4d:b8:
                    c2:56:c5:8d:7b:0b:64:72:ce:0c:7f:ad:67:61:09:
                    60:4f:c2:ad:2a:5b:8c:b9:80:e6:e3:2b:ed:6e:be:
                    ed:4a:b4:1e:a5:a8:de:2d:45:56:b7:a3:d8:9d:55:
                    c3:77:f4:c3:fc:04:1e:a6:4e:0f:3b:25:e9:c1:db:
                    84:e5:eb:6f:c9:bd:e9:cf:9f:9c:59:df:bf:ee:45:
                    92:cc:dd:7e:b6:66:0a:f0:b5:bc:dc:89:50:09:0b:
                    9b:72:bf:4a:8b:94:10:26:1f:7f:88:a3:bd:fb:fe:
                    2f:3e:78:df:ca:85:8b:11:e1:d1:6c:e9:d9:0c:df:
                    5e:a7:ea:14:87:03:f0:9b:b1:f2:76:bb:52:a2:51:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:78:A6:59:10:AB:C2:10:0D:EE:6D:C9:8F:79:F5:6D:CE:76:EF:E9
            X509v3 Authority Key Identifier:
                keyid:DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3530303a3a2f34302d3430203d3e20323733313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:6d:f0:2d:44:6f:3b:c1:6d:cb:86:bd:d8:6b:46:59:64:b7:
         17:ba:57:c7:23:95:e6:e9:ba:83:c5:58:fb:85:80:d0:2d:4e:
         51:52:20:b1:51:11:73:fa:8a:68:15:c2:42:84:cc:3a:bd:a0:
         b4:6c:49:c4:0a:5c:49:3b:cc:de:19:54:f3:66:e2:18:69:34:
         d1:4e:29:9a:fa:8a:e5:fc:aa:71:5e:07:45:39:22:cc:f9:1f:
         0a:f9:92:e9:c6:7e:af:5c:76:09:c2:27:5a:94:ea:fc:cd:64:
         16:08:45:53:ad:d4:fa:2a:fa:b6:3c:bb:96:09:37:54:a5:c0:
         b4:4c:12:4e:5c:fd:97:b0:3e:e8:cc:76:26:a3:ab:24:6c:2a:
         ac:a8:2a:b9:53:1d:23:4b:bf:14:fa:27:86:86:0c:0c:55:14:
         ea:27:c6:2f:4c:a3:74:af:9f:2e:8c:e7:9a:56:11:05:f1:8c:
         04:a8:5f:51:f0:35:86:68:2b:4c:29:61:8a:28:c0:3f:0d:90:
         9b:16:e3:80:07:58:b3:da:73:6d:54:c0:af:e3:d5:e6:5e:74:
         9a:6b:c2:f7:37:74:f8:d4:37:2d:5b:74:2a:ed:d5:ca:f8:47:
         b0:a8:18:63:ae:3d:7e:45:16:14:70:10:2d:2e:e9:f6:9b:6e:
         93:d0:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:11 2025 by rpki-client