Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/323830333a643230303a3a2f33322d3332203d3e203133383035.roa
File:                     323830333a643230303a3a2f33322d3332203d3e203133383035.roa (raw, json)
Hash identifier:          NFRYFX/Ut4m+ECzIJBqhh/fKT79Ev1UM45Je5TubDf8=
Subject key identifier:   54:F4:EE:73:3D:78:5A:41:5B:90:8C:F6:13:EE:00:DE:A7:00:69:27
Certificate issuer:       /CN=7576B30485208191B54BA2BD59339967753E0699
Certificate serial:       632C1D5A3F9FA51AA9D64ECF34FBDF1561FE4D53
Authority key identifier: 75:76:B3:04:85:20:81:91:B5:4B:A2:BD:59:33:99:67:75:3E:06:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/323830333a643230303a3a2f33322d3332203d3e203133383035.roa
Signing time:             Tue 04 Feb 2025 18:55:01 +0000
ROA not before:           Tue 04 Feb 2025 18:50:01 +0000
ROA not after:            Tue 03 Feb 2026 18:55:01 +0000
asID:                     13805
IP address blocks:        2803:d200::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2c:1d:5a:3f:9f:a5:1a:a9:d6:4e:cf:34:fb:df:15:61:fe:4d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7576B30485208191B54BA2BD59339967753E0699
        Validity
            Not Before: Feb  4 18:50:01 2025 GMT
            Not After : Feb  3 18:55:01 2026 GMT
        Subject: CN=54F4EE733D785A415B908CF613EE00DEA7006927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b3:aa:f6:90:ac:1a:fa:c7:ac:e0:53:27:a7:
                    a0:86:e0:fd:32:38:da:cd:dd:a1:98:a5:9b:45:ba:
                    71:61:5c:b5:41:f0:f5:c9:b5:41:b1:68:25:d2:1f:
                    15:30:7e:3f:72:3a:49:4a:36:09:6f:ec:76:ad:c9:
                    7a:46:78:75:d9:ce:05:a2:41:aa:75:2e:38:b1:27:
                    5f:01:e8:5f:d2:f3:b6:23:6c:13:66:70:8b:e9:fb:
                    78:a6:61:7c:85:c5:cf:06:51:2e:74:e9:f0:85:cb:
                    88:70:58:58:16:41:da:9e:7f:86:36:92:c4:2f:51:
                    77:23:ac:37:2f:ab:d6:0f:88:cf:dd:39:70:54:31:
                    e4:96:ad:f0:ca:88:5f:4a:e3:eb:65:25:97:d9:b3:
                    2e:1f:2e:90:7c:0c:95:b5:22:ce:ef:c0:d8:2e:9f:
                    ea:d8:c1:53:c8:df:68:1f:9c:10:64:77:55:5d:ce:
                    10:a7:1a:8a:a7:86:7d:9d:1a:38:8e:7e:e9:09:0a:
                    38:8f:86:57:c4:cc:0c:01:36:5a:1e:8f:95:2c:9a:
                    2e:4a:0e:54:1d:e3:8b:31:0f:c4:81:97:91:2f:11:
                    0c:62:ee:d6:cb:93:cb:a1:e0:c2:55:aa:60:69:c0:
                    5d:07:e7:9c:db:b6:70:05:dd:ce:7a:5e:81:2b:48:
                    ad:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:EE:73:3D:78:5A:41:5B:90:8C:F6:13:EE:00:DE:A7:00:69:27
            X509v3 Authority Key Identifier:
                keyid:75:76:B3:04:85:20:81:91:B5:4B:A2:BD:59:33:99:67:75:3E:06:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/323830333a643230303a3a2f33322d3332203d3e203133383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d200::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:4a:69:84:d5:41:b1:c4:94:14:c6:b3:2a:75:23:e3:3c:27:
         66:97:96:6c:b1:4f:a0:39:48:23:71:e3:2d:e6:ac:e5:84:0d:
         45:99:55:41:1e:4f:55:7a:f9:cf:1d:9e:f0:d3:84:a5:6a:e5:
         4e:a1:79:93:77:64:0f:ba:93:46:a2:16:b6:a7:5d:01:02:6f:
         1e:49:58:75:e0:d4:f7:be:5c:7a:c5:86:22:2c:ee:33:7c:1e:
         ef:79:1b:2b:58:d2:5b:70:ab:bb:06:04:f8:c0:26:61:72:67:
         84:12:3a:22:0e:c9:d5:78:a7:06:3e:15:42:0a:98:11:87:f6:
         0c:0c:d9:8d:eb:bf:75:7b:92:f0:37:8f:da:be:2d:59:46:86:
         e0:e5:74:a0:19:4e:f7:c6:79:a6:81:07:5e:2c:4f:f8:4d:57:
         66:f3:8f:e3:a8:6a:c5:55:d9:2a:c2:8e:b5:83:13:df:62:8d:
         ae:94:43:e3:a7:03:cb:de:51:a0:38:13:07:38:19:6d:19:8f:
         7b:1d:ef:ff:5f:f0:dc:f3:15:e2:ff:9a:e4:bd:8c:9e:96:11:
         7f:f2:d2:85:41:39:cb:db:f5:8f:79:e1:e1:de:7a:46:7a:50:
         3c:b0:45:f4:1f:3c:01:c9:aa:c4:74:c0:c6:26:a1:03:d8:dd:
         f9:16:b6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----