Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/323830333a616263303a3a2f34382d3438203d3e20323635363332.roa
File:                     323830333a616263303a3a2f34382d3438203d3e20323635363332.roa (raw, json)
Hash identifier:          DKPvcPkIK1cReKOmWvBIebFAV9lQ/+Pf5TYy4UEl07c=
Subject key identifier:   1F:4E:CF:16:4D:FB:1B:DC:8B:45:5F:73:D0:06:85:4E:56:E6:40:22
Certificate issuer:       /CN=F0F37A34F33318012581A719E771F871552D0509
Certificate serial:       4B0C6E0C48B62F7347FB31738A3C81ACE5CB03E2
Authority key identifier: F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/323830333a616263303a3a2f34382d3438203d3e20323635363332.roa
Signing time:             Tue 04 Feb 2025 18:54:28 +0000
ROA not before:           Tue 04 Feb 2025 18:49:28 +0000
ROA not after:            Tue 03 Feb 2026 18:54:28 +0000
asID:                     265632
IP address blocks:        2803:abc0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0c:6e:0c:48:b6:2f:73:47:fb:31:73:8a:3c:81:ac:e5:cb:03:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F37A34F33318012581A719E771F871552D0509
        Validity
            Not Before: Feb  4 18:49:28 2025 GMT
            Not After : Feb  3 18:54:28 2026 GMT
        Subject: CN=1F4ECF164DFB1BDC8B455F73D006854E56E64022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:37:79:2f:52:1b:f3:9a:75:de:2a:56:82:
                    b8:c6:5c:62:6a:ee:7c:3f:0e:a9:44:ed:0a:65:28:
                    cc:61:75:36:3a:d9:e6:f0:d0:6c:15:90:17:83:9e:
                    2d:55:7a:59:44:c4:80:11:54:cf:c9:9e:65:58:f7:
                    49:95:1d:24:27:29:62:90:22:92:fd:dd:bb:0b:f5:
                    db:73:98:28:5a:96:d7:3f:79:62:c8:5a:bc:16:06:
                    0e:e6:43:c3:44:01:58:f6:13:73:22:b5:15:42:4a:
                    83:75:23:59:ab:68:44:f2:2e:50:af:52:18:7d:24:
                    42:9e:3e:4b:16:d3:f3:60:e8:cb:a8:f5:22:a5:9e:
                    e2:ed:97:6e:d9:79:ab:33:a4:94:cb:72:81:ef:b7:
                    df:65:8c:32:b1:30:14:ec:7d:a4:91:eb:8a:5b:52:
                    2f:1d:2d:09:78:f7:eb:d2:0a:75:62:04:e2:1c:77:
                    17:a9:0c:57:cb:03:33:8c:77:c2:8b:da:34:33:19:
                    de:ea:2c:89:12:c5:44:fe:06:53:7e:15:93:57:72:
                    06:67:24:03:d8:f1:94:93:d4:12:b5:ce:c9:39:e5:
                    5c:c7:39:50:76:0a:59:e3:ea:a1:c4:b9:a1:72:da:
                    35:cd:1f:05:fd:d3:c5:6b:2d:f5:5b:53:fe:72:18:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:CF:16:4D:FB:1B:DC:8B:45:5F:73:D0:06:85:4E:56:E6:40:22
            X509v3 Authority Key Identifier:
                keyid:F0:F3:7A:34:F3:33:18:01:25:81:A7:19:E7:71:F8:71:55:2D:05:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/F0F37A34F33318012581A719E771F871552D0509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0F37A34F33318012581A719E771F871552D0509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA0A9C723385F61A659B6E7B07083079A51AEE4F85230593BE9634B5976BC539/0/323830333a616263303a3a2f34382d3438203d3e20323635363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:abc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:d6:0b:02:d6:28:69:d9:50:de:f4:15:41:b9:6c:72:d1:01:
         38:a3:c2:43:55:6b:c4:37:51:81:eb:22:99:d5:bc:f0:8b:15:
         65:35:e7:da:e1:4b:97:e8:fa:c1:b9:13:eb:ee:27:aa:ed:dc:
         2a:c3:aa:be:c3:ea:26:ae:a6:26:71:4b:44:87:74:06:88:e0:
         96:a3:e8:d8:34:78:bf:5f:ec:48:1e:77:22:dd:77:9b:d4:37:
         d0:28:da:02:11:d0:d2:1f:e3:3b:b6:d4:80:6d:f0:79:5a:bf:
         fd:0e:91:b9:a5:37:ed:aa:0d:d3:37:78:7d:0c:ab:e5:8d:b2:
         ec:bf:c4:3e:29:77:7a:d3:9e:92:d7:c9:1d:86:cc:ad:15:d2:
         6f:88:3a:eb:fe:84:52:a3:ed:9e:91:39:9c:ad:d1:56:66:90:
         13:11:cd:c5:38:76:21:93:5b:b7:18:22:ea:f8:4d:11:cc:70:
         db:87:64:48:c2:21:7b:49:de:12:35:d2:b3:52:d5:2d:07:db:
         9b:04:a4:a4:94:44:b0:ea:7d:2b:73:21:d1:e3:2a:95:bd:26:
         4b:45:05:a0:8c:0d:29:cb:5c:03:25:0a:02:df:e1:50:53:70:
         24:1f:93:b3:d2:39:3a:53:0d:e5:2c:30:61:6c:87:13:73:25:
         2b:e8:61:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----