Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/323830333a326138303a3830363a3a2f34372d3634203d3e20323730303537.roa
File:                     323830333a326138303a3830363a3a2f34372d3634203d3e20323730303537.roa (raw, json)
Hash identifier:          exmwln0psmRIdaA8a7C323FGdRX85vZySsMGNRHtG8o=
Subject key identifier:   CB:EE:FA:EE:DA:94:27:41:DA:7F:95:9A:1A:D2:35:19:E4:C7:EB:4C
Certificate issuer:       /CN=076991290F5B947E0E07A8223FE219EC05478D0F
Certificate serial:       49E188EC8120348CDEDF27083E51D905700E531E
Authority key identifier: 07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/323830333a326138303a3830363a3a2f34372d3634203d3e20323730303537.roa
Signing time:             Tue 04 Feb 2025 18:46:33 +0000
ROA not before:           Tue 04 Feb 2025 18:41:33 +0000
ROA not after:            Tue 03 Feb 2026 18:46:33 +0000
asID:                     270057
IP address blocks:        2803:2a80:806::/47 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e1:88:ec:81:20:34:8c:de:df:27:08:3e:51:d9:05:70:0e:53:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076991290F5B947E0E07A8223FE219EC05478D0F
        Validity
            Not Before: Feb  4 18:41:33 2025 GMT
            Not After : Feb  3 18:46:33 2026 GMT
        Subject: CN=CBEEFAEEDA942741DA7F959A1AD23519E4C7EB4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:a7:d6:c1:5d:8f:a3:ee:26:8e:9f:82:17:
                    da:61:75:e4:98:14:aa:2b:22:58:56:c1:ce:6e:42:
                    ae:1f:b3:35:6a:19:87:30:71:09:09:b5:58:7a:bd:
                    58:22:53:90:e8:b6:05:e2:12:b5:32:ed:7f:de:f7:
                    f2:c4:9a:fa:c8:0b:47:86:77:49:e8:60:fe:08:86:
                    17:43:ea:11:f8:9a:ce:35:e8:8c:04:fd:cd:0f:29:
                    97:7b:bc:b4:ea:2c:e8:34:72:21:78:07:72:45:57:
                    60:15:ed:60:d3:18:f9:d1:93:21:b2:48:a6:5d:41:
                    7b:7e:11:fc:60:62:d5:7f:e1:32:65:b4:89:89:f1:
                    2a:1e:b1:70:4f:5e:8a:2b:c3:72:4e:dc:72:41:76:
                    5d:27:51:0b:cc:06:99:41:87:ff:5d:cc:33:f8:c8:
                    f6:7e:91:dc:63:f1:d0:3e:0d:aa:64:17:d1:a7:5a:
                    77:67:75:34:e7:82:27:80:3d:d4:10:43:c2:f7:60:
                    7d:fb:9e:0b:0f:3b:b4:d7:ac:2e:52:4e:91:1c:00:
                    23:5a:82:87:1f:24:6a:f4:e9:b1:1c:88:31:1b:c8:
                    66:16:81:75:5e:5d:85:91:f6:c0:86:3c:7e:a3:1f:
                    f0:f7:25:d3:aa:90:cd:fd:2d:80:85:9d:4e:0d:26:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EE:FA:EE:DA:94:27:41:DA:7F:95:9A:1A:D2:35:19:E4:C7:EB:4C
            X509v3 Authority Key Identifier:
                keyid:07:69:91:29:0F:5B:94:7E:0E:07:A8:22:3F:E2:19:EC:05:47:8D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/076991290F5B947E0E07A8223FE219EC05478D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/076991290F5B947E0E07A8223FE219EC05478D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA25BBBAA8D21295B831FB8B5E2F6823069D1B1D89B74619D7445222985CB189/0/323830333a326138303a3830363a3a2f34372d3634203d3e20323730303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a80:806::/47

    Signature Algorithm: sha256WithRSAEncryption
         43:b3:9a:18:1b:a0:90:b9:50:6c:2f:a9:ff:58:51:c1:ca:dc:
         28:d4:14:68:4c:fe:0f:40:c8:07:58:71:ac:74:10:1c:d0:fe:
         cc:c9:90:1d:e9:f1:5a:45:cd:8c:a6:34:7b:1a:4d:25:3b:a7:
         5d:7c:d2:a2:8a:f5:82:6d:10:96:5c:ec:ba:0b:e4:cb:ba:42:
         91:0e:f0:49:02:3a:85:13:9e:58:f2:9f:7c:62:06:8b:14:46:
         f5:7f:05:38:00:a2:74:02:a9:bb:20:b4:78:d3:98:11:b1:c3:
         f0:04:e0:97:e3:b3:66:8f:cf:44:b5:84:a9:7a:b6:19:ac:48:
         65:1f:dd:e6:ad:f6:27:a1:15:f5:62:64:b3:7e:95:2b:5a:5e:
         26:fd:99:4e:c6:22:55:4c:a9:1e:d0:47:a3:a5:79:2b:6e:cf:
         29:d8:73:d4:56:29:d0:e0:06:4f:f4:69:a2:9a:b4:f3:0f:fe:
         f3:0d:2d:f1:f4:e1:a2:15:22:20:74:ab:ce:56:b8:25:74:d6:
         6d:80:f2:4e:4a:34:2b:ad:1d:0d:04:74:85:d0:82:a7:f3:d3:
         10:07:ce:5b:6e:5b:85:93:37:e7:78:a5:ed:79:fb:41:2d:09:
         db:d7:3b:49:7b:40:21:05:22:c1:0e:33:e1:a4:e9:18:0b:d7:
         41:19:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----