Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3430343a3a2f34362d3438203d3e203237383832.roa
File:                     323830303a3332303a3430343a3a2f34362d3438203d3e203237383832.roa (raw, json)
Hash identifier:          ULSX6H62y07gVFfGvjG0qSXDbV18R2KibFzouOBImTY=
Subject key identifier:   18:13:13:50:40:A4:C8:7E:E9:E3:09:24:DE:05:E1:7E:25:98:4E:6B
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       3AD26DBB91EBB9E3C158B542F28205B150DE9346
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3430343a3a2f34362d3438203d3e203237383832.roa
Signing time:             Tue 04 Feb 2025 20:05:43 +0000
ROA not before:           Tue 04 Feb 2025 20:00:43 +0000
ROA not after:            Tue 03 Feb 2026 20:05:43 +0000
asID:                     27882
IP address blocks:        2800:320:404::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d2:6d:bb:91:eb:b9:e3:c1:58:b5:42:f2:82:05:b1:50:de:93:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Feb  4 20:00:43 2025 GMT
            Not After : Feb  3 20:05:43 2026 GMT
        Subject: CN=1813135040A4C87EE9E30924DE05E17E25984E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:2b:af:30:fd:53:40:39:fd:d0:89:f9:ec:
                    c0:5b:04:32:00:a2:fe:e2:0e:c3:08:5c:9d:e3:df:
                    f4:6d:f7:0c:56:2b:17:a2:e9:de:c0:a9:19:12:72:
                    1a:e6:42:bb:44:1a:4a:d5:01:4a:18:82:2e:eb:af:
                    7a:08:2d:64:13:d0:ef:ff:bf:c0:0b:bd:a5:3c:3b:
                    c8:dc:11:23:55:c7:6d:08:1a:26:bb:56:ac:d5:cd:
                    0e:1b:8e:c4:1e:8f:11:28:83:86:f3:bb:ec:5b:10:
                    70:0b:ec:8f:d0:55:95:d4:e0:32:bb:b4:e4:54:91:
                    2b:52:f8:51:03:28:60:f0:38:ce:65:3a:f9:d0:c3:
                    93:1e:c3:16:ab:1b:3d:0d:32:76:5f:ab:23:4b:2e:
                    7d:56:91:87:25:2f:7d:d0:4b:d1:aa:77:7f:dc:50:
                    3f:d7:01:da:b6:36:75:68:ad:12:26:cb:8b:b5:72:
                    b4:63:5f:b5:98:58:14:50:b9:67:0c:45:2d:97:f0:
                    e3:3b:d8:85:49:90:25:8a:73:97:b6:11:9f:f3:a6:
                    f0:37:30:30:8e:47:c8:3c:d6:a1:2f:a1:30:e1:a4:
                    1b:43:9d:e6:29:45:14:d8:41:cf:ec:73:26:f6:d3:
                    23:b4:46:ac:dd:59:3a:40:b2:3c:08:42:9f:0f:59:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:13:13:50:40:A4:C8:7E:E9:E3:09:24:DE:05:E1:7E:25:98:4E:6B
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3430343a3a2f34362d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:404::/46

    Signature Algorithm: sha256WithRSAEncryption
         9f:db:af:ad:61:ce:50:74:07:2c:da:1c:0d:2a:6a:13:71:b5:
         de:cb:bc:e1:f6:1e:1b:d5:f0:a0:d1:45:64:be:e8:50:ef:d5:
         97:7d:51:2a:bd:cc:c5:4e:01:fe:c2:1c:3d:61:c8:e1:78:81:
         f5:08:b9:10:5e:80:86:3b:2c:d1:ab:57:bb:16:df:22:81:94:
         3e:ff:4b:5f:18:98:87:81:a4:58:4a:9a:77:b2:2e:49:f8:5c:
         dc:24:31:d5:c8:50:21:e6:7e:f7:9e:3e:a8:d7:22:8e:2c:cb:
         29:78:d6:11:f6:51:a5:b3:00:1d:0e:0b:6a:d2:f9:e7:00:07:
         94:0e:dc:5c:6e:58:11:4e:b8:e3:08:06:cc:ad:83:17:dc:fb:
         c5:c7:a3:94:60:29:df:e6:50:8e:eb:88:be:14:05:38:e0:77:
         e4:14:0d:71:c7:fb:d0:ae:7a:b4:05:90:e5:69:60:1b:de:f0:
         cf:c7:c6:56:b5:ef:47:d2:a5:84:53:df:ce:c2:cf:54:6c:b9:
         e9:9f:a6:ae:d9:18:e1:de:74:89:4e:ec:78:26:c6:32:86:5d:
         44:0d:28:4d:b5:06:1f:e5:31:3d:6a:71:61:76:07:71:fa:27:
         43:28:44:1a:3a:ac:5d:c2:d0:1a:e7:0e:50:f5:5c:d7:c1:7c:
         8b:e4:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:35:33 2025 by rpki-client