Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/323830333a333632303a3a2f33322d3332203d3e20323635383637.roa
File:                     323830333a333632303a3a2f33322d3332203d3e20323635383637.roa (raw, json)
Hash identifier:          yVgdHbiwF2bz4pMxYKchEcnsyCxpsUKqKcfnqjWWXvU=
Subject key identifier:   11:84:72:0F:B7:EE:EB:38:84:D1:05:78:E6:95:A1:5C:05:B9:47:C1
Certificate issuer:       /CN=1B90866BEA758352E83C87E07C1DEBF22ABF00AA
Certificate serial:       60001AF94874D5AFEA46C88831B52E9F40D7012B
Authority key identifier: 1B:90:86:6B:EA:75:83:52:E8:3C:87:E0:7C:1D:EB:F2:2A:BF:00:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/323830333a333632303a3a2f33322d3332203d3e20323635383637.roa
Signing time:             Tue 04 Feb 2025 18:17:42 +0000
ROA not before:           Tue 04 Feb 2025 18:12:42 +0000
ROA not after:            Tue 03 Feb 2026 18:17:42 +0000
asID:                     265867
IP address blocks:        2803:3620::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:00:1a:f9:48:74:d5:af:ea:46:c8:88:31:b5:2e:9f:40:d7:01:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B90866BEA758352E83C87E07C1DEBF22ABF00AA
        Validity
            Not Before: Feb  4 18:12:42 2025 GMT
            Not After : Feb  3 18:17:42 2026 GMT
        Subject: CN=1184720FB7EEEB3884D10578E695A15C05B947C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:d7:d6:57:f0:27:08:fb:86:c0:97:90:15:
                    44:1f:e8:28:11:86:66:8c:2e:c9:36:31:af:fa:4c:
                    07:69:04:25:6f:21:2a:a2:13:2a:c3:ed:4b:cc:2f:
                    c7:49:e9:d8:1d:f0:56:d7:a1:1e:9c:de:78:ff:a0:
                    97:b8:ab:c6:58:ae:a6:2b:00:e1:b5:f7:e2:91:c5:
                    60:af:e2:39:8d:f2:ee:f9:83:09:bf:9c:8f:c3:dc:
                    b7:f0:ad:bf:37:7e:2f:67:67:1d:ff:3c:b9:87:b5:
                    ae:15:4a:09:65:51:0a:bc:68:d7:db:3d:d7:ce:62:
                    7a:b1:20:e6:36:af:4a:28:a0:df:a9:ad:17:ca:2e:
                    8f:b5:62:a9:53:68:6b:62:66:07:9a:7d:1f:4c:d7:
                    42:26:37:02:5e:7f:cb:65:7b:03:0e:0f:25:8e:2a:
                    18:d9:40:94:80:bb:1f:4c:f4:98:df:e5:52:ba:dd:
                    21:bd:f4:de:7b:98:a2:b5:cb:32:62:3d:48:fe:03:
                    46:b7:9b:1c:d1:79:59:26:cb:ac:5a:af:ac:31:37:
                    da:d1:e1:9e:77:fa:54:8e:67:a4:56:d4:19:80:ce:
                    f2:80:62:68:8a:22:80:fa:c4:e8:58:18:44:ee:73:
                    ed:30:53:e8:9d:73:2e:b4:92:3a:2e:80:68:02:41:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:84:72:0F:B7:EE:EB:38:84:D1:05:78:E6:95:A1:5C:05:B9:47:C1
            X509v3 Authority Key Identifier:
                keyid:1B:90:86:6B:EA:75:83:52:E8:3C:87:E0:7C:1D:EB:F2:2A:BF:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B90866BEA758352E83C87E07C1DEBF22ABF00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F9793B0100C5B0EC7FCDF36A1D8ED836E3956D84462568F08F45F29BC5B2580F/0/323830333a333632303a3a2f33322d3332203d3e20323635383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3620::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:ed:c8:29:51:1b:09:7f:31:2c:8a:ef:b3:79:1c:68:c8:66:
         e7:13:4d:e1:fc:c1:ac:d6:c2:a1:61:55:0e:c9:5e:6a:19:47:
         1c:20:23:53:eb:d3:96:72:d5:93:3f:00:26:03:49:0b:a4:26:
         56:8c:3a:71:23:45:d6:08:a9:cb:51:6a:bb:1d:11:ed:6d:fc:
         2b:36:a1:cc:e5:bb:b0:a1:e9:55:4d:70:23:a2:88:36:68:98:
         af:28:30:8a:77:c3:7d:62:44:24:9f:4e:81:e5:df:6e:4a:46:
         a3:a5:79:e5:e8:2b:f0:d0:19:11:1c:63:ef:e6:60:12:31:aa:
         26:f9:93:68:f7:f2:d9:41:aa:8d:d7:82:f5:d2:37:a0:4a:f9:
         6a:f3:5c:f0:14:f7:6b:ac:3f:1e:48:d1:f9:dd:a4:7e:f7:06:
         d5:64:8b:e6:1b:a9:75:1c:35:15:e1:75:6a:dd:8b:1c:d4:2e:
         25:c9:52:7b:4b:65:9a:f7:26:21:98:05:04:aa:3c:5a:be:89:
         84:a9:b9:e7:d5:23:e0:f3:ee:c6:0d:70:5c:74:b1:6b:14:c9:
         ea:6b:7c:4c:86:93:af:40:0f:32:1e:1e:ce:7d:5c:80:06:c6:
         fb:81:9b:52:fe:61:d2:29:87:55:3e:c1:e2:97:b1:1e:8c:99:
         3b:11:da:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:29 2025 by rpki-client