Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3336203d3e20323639383232.roa
File:                     323830333a313563303a3a2f33322d3336203d3e20323639383232.roa (raw, json)
Hash identifier:          D/OsOtXwdDvhTwH47kts1ALPwQEbpPpMq3kQa6pmFiY=
Subject key identifier:   49:8E:9B:BB:01:FB:5B:78:05:4F:AE:A7:71:14:6B:79:02:A3:A0:03
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       77239238AB682F4D0AEB413F12EC35B716203A54
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3336203d3e20323639383232.roa
Signing time:             Tue 04 Feb 2025 18:19:22 +0000
ROA not before:           Tue 04 Feb 2025 18:14:22 +0000
ROA not after:            Tue 03 Feb 2026 18:19:22 +0000
asID:                     269822
IP address blocks:        2803:15c0::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:23:92:38:ab:68:2f:4d:0a:eb:41:3f:12:ec:35:b7:16:20:3a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Feb  4 18:14:22 2025 GMT
            Not After : Feb  3 18:19:22 2026 GMT
        Subject: CN=498E9BBB01FB5B78054FAEA771146B7902A3A003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7c:8a:66:69:53:4a:19:96:98:1a:e6:06:a2:
                    54:57:04:2c:2a:00:66:1a:21:52:81:02:50:7c:75:
                    74:97:08:ca:0b:51:dd:a0:d8:f7:ba:9d:f3:e3:a5:
                    37:db:80:2e:94:2d:e3:43:ea:49:80:6a:de:ec:e9:
                    d4:e3:cd:dd:79:3f:cb:9a:4a:0a:66:43:19:c5:d6:
                    f4:e0:6d:18:9a:aa:56:93:82:b7:6c:83:2e:03:54:
                    52:15:b7:30:6d:40:3d:de:e1:f7:b4:d5:f6:70:34:
                    9c:63:30:ed:5a:07:f2:20:80:b5:2d:79:76:9e:84:
                    a4:26:42:5e:32:1b:00:a6:f8:fe:01:b7:20:df:28:
                    03:f6:66:92:17:65:d6:13:d4:17:7e:b2:26:e9:12:
                    e9:ff:ea:30:ed:fa:00:1a:f2:82:33:4e:ed:f2:e4:
                    53:67:93:0a:7a:27:40:0a:4e:68:54:46:f1:5e:33:
                    21:c3:fc:e7:7d:ef:59:e2:09:51:86:e1:34:11:19:
                    64:19:28:d8:b8:59:01:3d:98:71:ad:05:a7:4b:26:
                    d8:92:bd:61:ee:b7:65:64:62:41:42:7a:7f:ef:56:
                    55:88:44:87:d5:36:14:1f:ea:5a:2a:86:d6:0a:07:
                    09:6f:15:59:ae:6d:f2:ee:7a:3c:0a:bc:45:e7:f1:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8E:9B:BB:01:FB:5B:78:05:4F:AE:A7:71:14:6B:79:02:A3:A0:03
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/323830333a313563303a3a2f33322d3336203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:c1:67:10:c8:be:f3:e9:9e:c2:51:db:6d:60:e5:7a:34:54:
         01:35:44:c8:48:ef:07:30:0f:8b:a4:7b:bf:87:54:9a:d5:af:
         2c:6d:90:99:bd:52:d3:1b:36:0e:b5:1f:eb:e5:b3:60:3b:2f:
         d3:0b:a8:33:f8:4d:1f:1d:fd:fb:8e:9a:9b:f0:29:1a:48:d2:
         87:50:ba:0c:4b:f5:fe:9f:44:d2:58:2c:79:13:06:41:51:f7:
         b9:16:f9:7d:71:07:26:dd:29:18:11:fc:c8:a0:07:fb:cf:1f:
         37:2c:02:c6:40:5a:cb:1e:7d:85:4d:8c:ca:a0:91:5e:d3:da:
         22:94:87:73:e9:49:2c:33:4a:1d:ed:4a:77:4d:5e:85:4d:2d:
         83:db:aa:9c:d4:89:f6:d9:1f:78:4e:f7:dd:68:b2:1c:2f:72:
         6c:8c:3d:54:24:41:9b:ca:d8:dd:fb:97:de:d4:8f:d4:f8:71:
         1e:8a:03:cd:b0:be:ec:12:56:4e:32:89:e0:07:c2:af:e5:8b:
         27:6b:99:d1:f9:bc:b8:73:73:33:91:be:27:cd:b0:f8:2a:06:
         aa:68:d5:d7:55:36:e2:29:cf:d3:81:57:49:29:e4:fd:54:b5:
         33:38:7e:09:c4:8f:68:f1:8b:3d:97:f2:c2:16:5a:4f:cd:ac:
         ba:27:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:39 2025 by rpki-client