Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/323830333a383739303a3a2f33322d3438203d3e20323733303534.roa
File:                     323830333a383739303a3a2f33322d3438203d3e20323733303534.roa (raw, json)
Hash identifier:          5pSpOVVKbvL6m0Avj4cqsP+TRXnALAoAdhpCoxOQv7g=
Subject key identifier:   E6:13:D2:11:49:0B:08:19:B7:DB:84:C1:E9:E7:EC:96:0E:2D:3F:07
Certificate issuer:       /CN=E3D48E982179932A4BA72297BCB253B7BBA0BCA3
Certificate serial:       41BBE43603E91E4EEAAC9C33E0A639814A0464F5
Authority key identifier: E3:D4:8E:98:21:79:93:2A:4B:A7:22:97:BC:B2:53:B7:BB:A0:BC:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/323830333a383739303a3a2f33322d3438203d3e20323733303534.roa
Signing time:             Tue 04 Feb 2025 17:59:56 +0000
ROA not before:           Tue 04 Feb 2025 17:54:56 +0000
ROA not after:            Tue 03 Feb 2026 17:59:56 +0000
asID:                     273054
IP address blocks:        2803:8790::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bb:e4:36:03:e9:1e:4e:ea:ac:9c:33:e0:a6:39:81:4a:04:64:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D48E982179932A4BA72297BCB253B7BBA0BCA3
        Validity
            Not Before: Feb  4 17:54:56 2025 GMT
            Not After : Feb  3 17:59:56 2026 GMT
        Subject: CN=E613D211490B0819B7DB84C1E9E7EC960E2D3F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:a5:9e:d1:eb:5a:6a:18:3d:c9:90:97:b6:
                    bd:ea:be:04:f8:e9:a4:a6:d2:f4:7f:31:d0:8a:f3:
                    ef:7b:e3:14:4f:83:2c:6f:01:c7:d3:cb:22:42:81:
                    56:57:7d:4d:26:7e:99:3e:e3:89:8a:55:aa:ef:74:
                    74:da:44:e1:4e:f8:5e:09:bc:12:05:b5:c3:e9:36:
                    4a:ae:f4:96:e4:92:e6:34:10:b7:3b:10:80:4d:55:
                    05:8b:57:4a:f9:91:bd:da:71:8a:b5:78:0c:c0:64:
                    6c:6c:e2:f8:55:e6:2d:58:d3:29:18:9b:03:6e:3a:
                    29:63:10:cf:14:0a:59:43:2c:53:83:e5:82:63:d3:
                    aa:ab:ef:32:07:f6:a7:74:9c:e8:97:9f:b1:d3:2f:
                    82:75:16:1d:9a:bf:27:b1:5d:d5:49:30:d6:e0:58:
                    cb:d4:59:e1:e3:66:b2:a8:73:56:11:c9:c4:21:3d:
                    64:f2:ed:86:71:54:44:80:79:fe:d0:3e:88:3d:51:
                    b9:63:b1:51:3e:8e:43:0e:c7:43:b6:96:b5:1e:5c:
                    0e:56:3d:17:04:9a:e6:b3:4f:ae:4f:ab:9b:a0:a9:
                    bc:15:48:ef:6f:1e:35:f3:8d:24:45:ce:6c:75:a7:
                    e2:5c:e7:ff:69:4a:31:5b:a7:31:d0:55:35:b2:97:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:D2:11:49:0B:08:19:B7:DB:84:C1:E9:E7:EC:96:0E:2D:3F:07
            X509v3 Authority Key Identifier:
                keyid:E3:D4:8E:98:21:79:93:2A:4B:A7:22:97:BC:B2:53:B7:BB:A0:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E3D48E982179932A4BA72297BCB253B7BBA0BCA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3C82F37DCD8A6335F1CFFC61A211EFA63BCC5D86F87425C40B4282BD1311C0C/0/323830333a383739303a3a2f33322d3438203d3e20323733303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8790::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:50:c5:ea:7a:f1:f0:f5:75:4a:54:c5:8a:c4:b9:3e:75:d5:
         42:8f:0e:4d:b9:c4:fd:ca:8e:9f:1f:10:04:20:d7:44:85:d9:
         51:7f:0b:00:e7:9f:6e:86:da:bb:36:b4:4f:ea:5a:38:17:eb:
         53:e0:71:19:aa:d8:e7:74:9c:ee:2f:e2:16:99:39:2d:4e:0a:
         a0:88:68:55:9c:5a:48:48:44:a6:81:df:7c:1d:3c:a8:16:9d:
         74:1d:68:36:4f:0e:3a:64:f4:af:85:41:f2:7b:6b:c6:1b:04:
         88:a9:e6:38:b0:49:bf:f7:a7:0f:4a:03:12:0b:a8:78:1a:18:
         a1:e5:79:30:88:5e:64:80:b2:29:60:61:6a:d4:28:3e:72:d4:
         dd:0a:7c:1c:11:2d:e6:97:8f:3a:26:88:d0:de:cb:6c:90:44:
         7e:6f:92:21:05:8e:3d:a9:fa:0d:ea:8e:e2:46:6d:e4:50:d7:
         12:04:c2:e4:9f:43:3b:57:ec:38:3a:19:e2:cf:25:c3:f9:0b:
         07:38:5c:50:e6:f1:db:36:ee:f0:d6:5e:29:4b:f4:15:20:e7:
         78:ac:58:4e:5f:0e:5a:af:a9:4f:4e:93:49:ce:d6:e3:bd:15:
         6f:f2:09:89:4e:7b:fc:4c:f2:21:a5:21:54:e0:7e:26:30:f5:
         95:c1:a7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----