Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f33322d3332203d3e20323636373235.roa
File:                     323830333a653563303a3a2f33322d3332203d3e20323636373235.roa (raw, json)
Hash identifier:          bgyvm4FKakIgFReX3I3ifG2IF+vWwntyl9x8BUDeXeg=
Subject key identifier:   92:00:B2:8C:22:98:44:FA:28:9F:B7:68:C3:79:FD:ED:73:F6:AB:71
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       396D9DD35DCE26292F37ABFD4BE7B4859894DDF5
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f33322d3332203d3e20323636373235.roa
Signing time:             Tue 04 Feb 2025 18:28:12 +0000
ROA not before:           Tue 04 Feb 2025 18:23:12 +0000
ROA not after:            Tue 03 Feb 2026 18:28:12 +0000
asID:                     266725
IP address blocks:        2803:e5c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6d:9d:d3:5d:ce:26:29:2f:37:ab:fd:4b:e7:b4:85:98:94:dd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Feb  4 18:23:12 2025 GMT
            Not After : Feb  3 18:28:12 2026 GMT
        Subject: CN=9200B28C229844FA289FB768C379FDED73F6AB71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:d0:e1:df:d1:f4:bb:15:5a:f4:0e:81:c5:
                    13:fd:66:e6:d9:79:32:cc:de:42:0e:c4:7d:ff:62:
                    ea:db:0b:26:c8:ec:77:7c:8b:56:38:aa:ab:d2:d1:
                    f9:58:b0:81:91:69:d4:54:b5:1d:ec:da:67:9a:ff:
                    2b:d9:5e:a7:1e:ea:b6:1d:e5:6f:65:6b:b6:20:fe:
                    5f:b4:ef:d9:2a:44:34:88:30:48:21:7f:76:11:7b:
                    81:00:d1:4e:2c:47:1c:21:fb:fe:f8:ce:b3:fb:4d:
                    9b:1d:34:f2:17:0a:af:5d:4d:75:39:fc:cc:5f:59:
                    a6:59:c7:62:82:d8:3c:49:e2:f3:4a:6c:ef:bb:a5:
                    0a:cc:0c:b4:de:27:1b:79:98:c3:21:a2:d1:42:6e:
                    e8:4e:24:d6:be:ab:22:56:95:de:e8:62:80:d3:9d:
                    c5:88:d9:f0:53:89:c1:42:8b:e2:cf:c9:95:17:ae:
                    29:12:1f:df:a1:a2:be:19:96:73:5f:e6:a0:f9:54:
                    fb:3f:ca:39:47:94:64:c5:54:bb:fb:5b:23:32:b1:
                    5b:d1:aa:5a:c8:9d:d0:ff:12:b1:23:59:66:97:74:
                    3a:9c:bb:59:66:09:74:15:21:b9:f9:88:9e:8b:99:
                    ec:e9:03:b8:03:8b:aa:cc:2e:bf:dd:40:09:e6:6c:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:00:B2:8C:22:98:44:FA:28:9F:B7:68:C3:79:FD:ED:73:F6:AB:71
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/323830333a653563303a3a2f33322d3332203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         df:f6:e0:cb:bc:73:34:fb:fb:4e:c0:e4:fa:b8:68:3e:77:de:
         05:0a:14:d1:c6:03:1e:e7:c3:47:3c:c6:7f:59:d6:1e:70:c0:
         57:7f:dd:fc:67:34:74:4d:0f:d8:40:c7:b2:b2:62:ff:de:54:
         57:c5:0a:f9:85:69:49:8b:b6:35:af:ec:3f:f6:ae:39:ec:43:
         c0:e2:6e:5c:f2:f7:ae:94:83:ad:80:08:ec:bf:2d:39:73:84:
         ea:56:33:3b:6a:d9:fd:60:d9:1e:7c:1d:bd:0d:3d:a8:12:e9:
         a5:d1:53:3c:4c:95:df:8b:b3:b5:51:f2:71:e5:aa:2d:83:3d:
         09:0b:37:97:a0:b0:e0:fa:1f:c7:f9:82:be:15:1b:88:94:b9:
         b2:af:b7:3c:fa:05:d4:cc:43:94:47:ea:05:0d:13:c3:3c:0d:
         f6:67:d6:0a:19:76:12:21:c3:fc:ef:07:41:07:2f:eb:fa:59:
         63:ae:9c:9c:e7:fc:a3:6f:d0:93:b9:ed:46:0b:84:ab:b5:25:
         a4:6e:9d:48:04:89:14:cf:fc:8c:c5:da:1c:58:48:ca:27:81:
         23:76:d7:79:1d:66:0e:01:53:5b:d0:08:bb:f6:ff:0f:74:13:
         8c:42:68:40:12:89:b4:97:aa:a2:8b:2c:b0:a7:6c:10:54:5f:
         e8:12:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:08:20 2025 by rpki-client