Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a313030303a3a2f33362d3336203d3e20323636383332.roa
File:                     323830333a386361303a313030303a3a2f33362d3336203d3e20323636383332.roa (raw, json)
Hash identifier:          UfS+FrslH9fQ7aAjzjtIbP8D60DezRrViiSBjEnDGcA=
Subject key identifier:   21:6B:5E:30:D6:7E:F4:A9:D2:E1:43:7E:94:D5:EE:34:19:A0:C8:2F
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       1B2DA072095CD2A2407F568B674ECBB3B3C13D0B
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a313030303a3a2f33362d3336203d3e20323636383332.roa
Signing time:             Fri 24 Jan 2025 17:00:00 +0000
ROA not before:           Fri 24 Jan 2025 16:55:00 +0000
ROA not after:            Fri 23 Jan 2026 17:00:00 +0000
asID:                     266832
IP address blocks:        2803:8ca0:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2d:a0:72:09:5c:d2:a2:40:7f:56:8b:67:4e:cb:b3:b3:c1:3d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Jan 24 16:55:00 2025 GMT
            Not After : Jan 23 17:00:00 2026 GMT
        Subject: CN=216B5E30D67EF4A9D2E1437E94D5EE3419A0C82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:d2:c5:b6:53:5e:9f:2d:62:ab:a8:e2:e4:
                    34:93:8c:1e:e9:fd:f4:8b:ca:14:9d:67:83:74:6a:
                    f2:99:3f:d4:b4:8f:fa:9b:e1:c2:53:78:0a:03:60:
                    60:45:10:a4:5f:2c:65:9e:cb:21:4b:09:e0:e4:aa:
                    71:b1:38:74:66:9d:f2:e6:c0:d3:89:75:d6:e1:5a:
                    d9:10:25:ab:55:d0:fd:da:a7:81:38:76:b5:1c:f7:
                    4d:03:c8:cb:66:f5:98:dd:16:77:11:08:28:9a:66:
                    51:60:62:97:9d:16:9a:0d:e5:ed:7b:c8:06:9f:5a:
                    ba:a2:8c:c2:b1:a0:0f:0d:e8:b9:c5:b1:b4:de:3f:
                    72:65:4d:3b:07:1d:d3:33:dd:cf:60:8b:eb:99:7f:
                    70:4e:ac:e9:34:47:1d:0e:87:d6:b4:a0:d5:22:4d:
                    02:c8:91:4b:84:21:80:cb:c2:9d:99:c6:7e:c0:51:
                    44:8d:f8:99:fe:b1:5b:36:22:ba:16:20:76:8f:f9:
                    cd:cc:7b:b4:dd:f6:66:c9:76:f5:89:9d:f0:e5:9c:
                    d1:33:ce:7e:fc:ff:43:32:3c:3e:20:88:6b:2b:cc:
                    c5:59:2f:3d:50:5e:1f:37:37:0d:90:46:7a:07:dc:
                    aa:9b:a6:de:3a:3a:6c:bb:0e:bd:3e:62:24:34:43:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6B:5E:30:D6:7E:F4:A9:D2:E1:43:7E:94:D5:EE:34:19:A0:C8:2F
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a313030303a3a2f33362d3336203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ca0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9a:27:2d:78:3b:b8:78:45:d9:ff:a0:3e:70:ba:2d:2b:10:69:
         01:3e:26:00:0f:d3:fd:29:f9:79:1d:5c:dc:07:8e:55:4a:f8:
         cb:2e:35:59:67:2c:27:ac:f0:10:63:06:b8:33:0d:5b:21:9e:
         36:37:37:a2:09:8d:af:d9:b6:4a:25:19:70:f8:0e:18:c1:ea:
         e7:df:db:32:72:05:b7:57:6c:49:26:d4:88:73:1c:be:9a:6d:
         88:37:1f:fc:6d:4a:42:24:ad:f4:04:7d:93:f0:a7:1d:2d:ce:
         ec:30:64:73:c0:bf:19:a1:c1:61:2e:07:0d:6c:50:6d:3c:87:
         48:0c:af:8d:1a:73:36:9a:3a:23:b8:e1:55:20:15:91:26:b0:
         c2:0b:26:e8:e7:3a:b1:d1:10:6d:4b:dd:e9:0b:a8:97:c6:43:
         d0:d5:5d:b6:db:fa:48:c4:f2:24:a4:b1:cc:1d:73:a3:81:20:
         ea:22:ee:dd:e7:bf:83:5c:69:c6:82:8f:72:6b:72:88:7d:4f:
         b0:03:32:e5:ec:d5:07:60:ef:4f:eb:8e:32:f8:43:3d:3f:07:
         81:95:c5:cb:ca:c6:db:8b:96:55:22:7d:0a:8d:aa:e8:dc:be:
         43:a3:b6:3b:76:57:24:3c:64:97:5c:f0:03:d0:7d:d6:de:8b:
         9c:0e:28:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----