Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/323830333a356236303a3a2f33322d3333203d3e20323639383038.roa
File:                     323830333a356236303a3a2f33322d3333203d3e20323639383038.roa (raw, json)
Hash identifier:          w1HerseulyRMQPIEKDGiozTvj5Nkc39O7b1FLuyoOBc=
Subject key identifier:   BB:21:7A:D1:39:EC:04:35:E0:5F:09:CC:75:DD:8F:18:DA:AE:E2:B4
Certificate issuer:       /CN=EC1C2A938F2643280F8BA752CD45833244CBC4CB
Certificate serial:       238B369B1820F9F27FCD4A12093FFDFE18E348F5
Authority key identifier: EC:1C:2A:93:8F:26:43:28:0F:8B:A7:52:CD:45:83:32:44:CB:C4:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/323830333a356236303a3a2f33322d3333203d3e20323639383038.roa
Signing time:             Tue 04 Feb 2025 18:21:01 +0000
ROA not before:           Tue 04 Feb 2025 18:16:01 +0000
ROA not after:            Tue 03 Feb 2026 18:21:01 +0000
asID:                     269808
IP address blocks:        2803:5b60::/32 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8b:36:9b:18:20:f9:f2:7f:cd:4a:12:09:3f:fd:fe:18:e3:48:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1C2A938F2643280F8BA752CD45833244CBC4CB
        Validity
            Not Before: Feb  4 18:16:01 2025 GMT
            Not After : Feb  3 18:21:01 2026 GMT
        Subject: CN=BB217AD139EC0435E05F09CC75DD8F18DAAEE2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:26:d1:61:cd:98:33:0c:60:c0:d2:11:6e:
                    90:00:2f:73:59:a3:be:4a:3e:17:5a:f2:5f:56:92:
                    82:b9:99:cb:36:8e:43:8b:35:2b:43:23:17:52:3a:
                    16:8b:8c:c5:15:51:ca:92:2a:03:f8:18:fb:52:e5:
                    37:8c:bf:5f:bf:2c:06:59:f0:30:3d:6a:e1:20:9b:
                    e1:6f:f6:db:76:c4:13:51:e2:85:2b:84:83:1d:97:
                    01:2f:7f:40:8b:62:e5:c4:ac:71:1b:18:34:78:18:
                    b9:bd:2e:17:e2:e1:0d:da:b7:33:df:37:c0:3e:0a:
                    2f:6f:32:9a:f1:47:53:23:a8:eb:24:90:68:26:2e:
                    91:5d:35:c2:8d:3b:f4:b2:4c:d5:b6:b8:3d:97:7f:
                    0d:21:97:17:93:d4:22:61:30:ad:82:e9:e7:bb:63:
                    ae:ab:27:68:94:dd:61:cf:1d:9a:58:66:c0:9d:70:
                    59:f1:39:12:7c:aa:a2:aa:fb:0a:61:e1:6b:50:48:
                    b2:74:d7:d9:0e:fa:5e:ee:d6:91:95:c7:e8:9b:04:
                    52:da:45:a7:7c:74:1b:c2:a6:d6:00:b6:3b:a3:39:
                    3d:ab:c9:e6:84:a5:2e:5b:21:3a:ce:49:76:ae:94:
                    c0:53:6f:77:e1:43:86:6c:c5:7b:95:65:38:7d:25:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:21:7A:D1:39:EC:04:35:E0:5F:09:CC:75:DD:8F:18:DA:AE:E2:B4
            X509v3 Authority Key Identifier:
                keyid:EC:1C:2A:93:8F:26:43:28:0F:8B:A7:52:CD:45:83:32:44:CB:C4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1C2A938F2643280F8BA752CD45833244CBC4CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE0DDE60EB8F649C90E1066A03BF1385487D1C6123A71F5BA57A096866A2D0A7/0/323830333a356236303a3a2f33322d3333203d3e20323639383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:b7:b8:d4:e0:b8:6c:59:07:19:39:34:fd:3f:a8:4f:d2:5d:
         e2:bb:cf:46:81:e0:92:37:d6:b9:9e:d2:e7:f3:60:97:42:2d:
         03:31:49:a6:4e:74:2c:e4:39:01:82:7f:38:ee:48:0c:29:e5:
         df:f7:d7:da:6b:8a:d3:c1:45:8a:a5:9c:71:03:1e:9f:f4:32:
         eb:9d:34:2a:68:e1:33:68:1c:4f:63:49:4e:5e:da:d1:97:ff:
         e7:4d:b4:6c:f6:5d:d2:07:b6:19:b9:20:61:34:75:a7:0b:ed:
         d9:58:ca:16:82:a6:e9:b9:57:6d:96:3f:87:b4:12:5e:1d:53:
         0c:c1:e2:e9:bb:15:b3:83:2c:60:33:9f:2e:74:85:1d:d8:de:
         a3:40:f4:2b:21:20:8e:e3:95:d7:2e:a4:b2:d3:0a:f8:22:62:
         b5:34:f5:4b:b3:e8:93:cc:78:7a:78:2c:74:e4:5e:c9:3e:e0:
         cb:48:7b:c9:82:81:85:e8:2a:74:22:08:a4:39:3d:d8:5d:ec:
         f4:21:31:91:b3:94:d7:c4:78:3c:fc:6b:30:aa:c6:ef:d8:16:
         8a:8d:a2:f9:35:f6:28:d4:e6:0a:3f:4a:e3:7a:0d:df:26:6b:
         1d:8a:6d:9b:fb:7d:ac:83:a7:30:a4:95:50:ae:8d:51:09:c3:
         6e:dd:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----