Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9BDCCEDE13C94D6FAA191397F913969FB7E8B8D0A939A46F73E1C813076AE86B/0/323830333a333064303a3a2f33322d3438203d3e20323733393733.roa
File:                     323830333a333064303a3a2f33322d3438203d3e20323733393733.roa (raw, json)
Hash identifier:          xOPiLJQmUz9/F2KLAZfqk2klOTSG3QYGS0A+/PnVs3M=
Subject key identifier:   69:AF:A8:03:0E:AA:D1:E5:80:B2:7A:B8:B4:43:BE:8B:9C:61:30:68
Certificate issuer:       /CN=E54A2EEF6241629453F18B90C6B3027DCD1714B0
Certificate serial:       6BB6594276E6A01F5054570A82FE07FB0BD39A0C
Authority key identifier: E5:4A:2E:EF:62:41:62:94:53:F1:8B:90:C6:B3:02:7D:CD:17:14:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E54A2EEF6241629453F18B90C6B3027DCD1714B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9BDCCEDE13C94D6FAA191397F913969FB7E8B8D0A939A46F73E1C813076AE86B/0/323830333a333064303a3a2f33322d3438203d3e20323733393733.roa
Signing time:             Wed 29 Jan 2025 15:40:00 +0000
ROA not before:           Wed 29 Jan 2025 15:35:00 +0000
ROA not after:            Wed 28 Jan 2026 15:40:00 +0000
asID:                     273973
IP address blocks:        2803:30d0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b6:59:42:76:e6:a0:1f:50:54:57:0a:82:fe:07:fb:0b:d3:9a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54A2EEF6241629453F18B90C6B3027DCD1714B0
        Validity
            Not Before: Jan 29 15:35:00 2025 GMT
            Not After : Jan 28 15:40:00 2026 GMT
        Subject: CN=69AFA8030EAAD1E580B27AB8B443BE8B9C613068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:e1:55:70:3d:81:2b:1b:38:f2:65:e6:f4:
                    7e:59:ee:f5:ae:45:ab:66:20:28:6d:3e:39:67:45:
                    d6:27:ba:53:cd:97:7b:85:5e:b1:5c:63:a7:de:80:
                    f8:12:97:34:e5:4c:27:55:69:8a:8e:e6:3e:d3:bf:
                    d1:16:f6:a1:e3:86:3e:c6:3d:0a:05:2c:40:64:df:
                    e1:d8:a9:9c:36:4c:97:45:59:ce:3b:7b:40:7d:ee:
                    f0:83:3d:b7:a2:a1:bf:47:e0:cb:d2:5c:77:ab:d1:
                    86:d2:46:bd:56:6c:5a:14:8a:b6:9a:ec:f5:77:f8:
                    3b:74:fa:56:d7:d3:0c:12:7a:8a:08:70:5e:de:38:
                    a0:6d:48:25:71:53:9d:c8:49:d2:f4:99:fc:5a:6f:
                    87:79:56:51:d2:86:94:ac:f2:ac:0d:78:a6:38:c3:
                    11:60:02:04:95:a7:39:34:be:3e:10:67:f9:99:99:
                    b8:1b:a5:5a:0d:80:f1:0e:00:16:98:b6:51:65:00:
                    f9:4c:83:44:1a:e3:d7:bd:6c:08:86:41:ca:1f:f0:
                    58:0f:be:58:8f:b5:0a:8c:76:26:ca:e3:0c:2e:42:
                    05:73:74:54:a2:9b:ba:88:62:9d:ab:c6:d8:35:8f:
                    ce:a1:54:a8:76:d3:d6:15:aa:8c:28:cd:b5:8e:6b:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AF:A8:03:0E:AA:D1:E5:80:B2:7A:B8:B4:43:BE:8B:9C:61:30:68
            X509v3 Authority Key Identifier:
                keyid:E5:4A:2E:EF:62:41:62:94:53:F1:8B:90:C6:B3:02:7D:CD:17:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9BDCCEDE13C94D6FAA191397F913969FB7E8B8D0A939A46F73E1C813076AE86B/0/E54A2EEF6241629453F18B90C6B3027DCD1714B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E54A2EEF6241629453F18B90C6B3027DCD1714B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9BDCCEDE13C94D6FAA191397F913969FB7E8B8D0A939A46F73E1C813076AE86B/0/323830333a333064303a3a2f33322d3438203d3e20323733393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:30d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:fd:83:f7:f8:0a:e3:c6:bd:b8:87:36:f7:36:49:46:a6:52:
         10:81:9c:1a:32:f0:1e:aa:a6:34:a6:3f:73:17:5a:26:1f:63:
         55:c4:c6:5e:6d:af:35:82:4e:8a:e2:e3:b6:82:df:ba:14:1e:
         67:57:de:e5:2a:1b:49:27:6d:6c:e8:69:35:14:3a:97:a9:55:
         48:48:80:17:55:ea:b3:cd:a5:2c:08:70:ab:00:d3:dc:0c:d6:
         2f:c3:86:9d:36:e3:8d:18:c1:f6:0b:d5:73:0a:34:15:d7:61:
         ad:45:a2:7e:4f:b1:49:08:6b:71:c0:56:39:09:c8:1f:48:8b:
         d6:bd:b4:82:e5:ec:4d:09:54:b1:b1:6f:0f:4a:af:6b:5f:e1:
         85:dd:d1:6e:81:08:a9:ca:18:c6:3e:f1:8f:84:59:4d:97:77:
         df:c9:57:66:22:ef:cd:89:61:c5:e1:7d:37:67:e2:78:c1:06:
         5a:d0:d8:df:5d:60:b5:6d:a1:c4:fe:d3:91:ed:52:cb:a9:db:
         8d:86:b2:24:11:c6:0d:db:28:ef:d9:8c:05:0f:46:93:81:0b:
         79:fc:5e:47:5f:e0:92:d0:69:e1:66:f4:15:a1:e5:28:ff:56:
         9a:29:53:af:04:1b:d9:65:10:48:26:75:a7:48:2a:0c:a4:c5:
         6f:5a:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----