Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7A1C3783FE49FF418848E5CB1A6279CE47AD1388B65C1BF16BB26DAD679BA2F/0/323830313a3163643a3a2f34332d3433203d3e20323733393737.roa
File:                     323830313a3163643a3a2f34332d3433203d3e20323733393737.roa (raw, json)
Hash identifier:          tAy6PLb2iOoYOObO7cyhe64gYYyak/M+6IFJac/9bis=
Subject key identifier:   9D:68:41:51:52:52:85:CB:0C:8A:FF:69:05:78:16:E5:AE:22:83:A5
Certificate issuer:       /CN=86EBE5E6D6FBC91F6E62A5A642B525ACE0E5E91F
Certificate serial:       54C5F644C965973BDF7EE1D283F5247B7C09AB37
Authority key identifier: 86:EB:E5:E6:D6:FB:C9:1F:6E:62:A5:A6:42:B5:25:AC:E0:E5:E9:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86EBE5E6D6FBC91F6E62A5A642B525ACE0E5E91F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7A1C3783FE49FF418848E5CB1A6279CE47AD1388B65C1BF16BB26DAD679BA2F/0/323830313a3163643a3a2f34332d3433203d3e20323733393737.roa
Signing time:             Wed 22 Jan 2025 14:40:00 +0000
ROA not before:           Wed 22 Jan 2025 14:35:00 +0000
ROA not after:            Wed 21 Jan 2026 14:40:00 +0000
asID:                     273977
IP address blocks:        2801:1cd::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c5:f6:44:c9:65:97:3b:df:7e:e1:d2:83:f5:24:7b:7c:09:ab:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86EBE5E6D6FBC91F6E62A5A642B525ACE0E5E91F
        Validity
            Not Before: Jan 22 14:35:00 2025 GMT
            Not After : Jan 21 14:40:00 2026 GMT
        Subject: CN=9D684151525285CB0C8AFF69057816E5AE2283A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:8d:76:56:30:d9:e4:a3:ed:06:96:3c:bb:
                    63:8a:43:2b:2a:b0:c0:34:d1:fa:35:53:ca:19:a9:
                    d9:48:c4:fa:1b:4f:45:ac:8d:6f:d3:a9:26:ad:d1:
                    e0:d8:e1:14:47:89:c2:7e:5a:62:36:58:86:e9:ce:
                    c8:d7:9a:19:6c:1b:b8:dc:69:64:42:e0:56:26:a9:
                    3c:df:33:c1:34:72:2f:3e:36:91:4d:04:5c:e0:42:
                    68:89:2d:3f:35:08:af:b6:f5:48:44:19:72:5a:b5:
                    5f:99:3b:65:4d:2c:22:5c:b9:b6:16:40:ff:53:34:
                    97:fb:7c:e8:b7:c7:15:ec:08:e4:e5:6f:23:27:1c:
                    42:0b:c3:d5:21:24:bf:7c:86:11:b8:78:bd:67:1c:
                    36:fa:89:ee:9a:4d:ef:2b:2f:1e:ba:e9:18:ea:e0:
                    38:a7:9f:5d:c1:7c:8c:de:1f:79:22:db:3e:f5:c9:
                    92:a2:90:6a:cb:59:0e:b8:43:ff:0c:61:78:f5:4f:
                    1e:cb:b9:c9:fb:05:57:fd:3f:43:35:b9:aa:ed:65:
                    7a:95:a3:e1:68:b6:15:10:2d:18:d1:93:67:02:80:
                    85:35:87:61:1a:05:8b:a3:f9:77:72:9d:20:6c:85:
                    13:7a:17:f3:14:c0:81:02:d8:26:38:bc:aa:08:a3:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:41:51:52:52:85:CB:0C:8A:FF:69:05:78:16:E5:AE:22:83:A5
            X509v3 Authority Key Identifier:
                keyid:86:EB:E5:E6:D6:FB:C9:1F:6E:62:A5:A6:42:B5:25:AC:E0:E5:E9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7A1C3783FE49FF418848E5CB1A6279CE47AD1388B65C1BF16BB26DAD679BA2F/0/86EBE5E6D6FBC91F6E62A5A642B525ACE0E5E91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/86EBE5E6D6FBC91F6E62A5A642B525ACE0E5E91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7A1C3783FE49FF418848E5CB1A6279CE47AD1388B65C1BF16BB26DAD679BA2F/0/323830313a3163643a3a2f34332d3433203d3e20323733393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1cd::/43

    Signature Algorithm: sha256WithRSAEncryption
         6d:81:95:5c:1f:b9:1a:c0:6c:fb:9a:e4:7a:81:66:1f:ed:f8:
         df:7f:e2:81:59:c8:4d:48:95:c5:60:ab:3c:47:c7:b9:a1:23:
         2e:0d:b1:01:39:16:4e:ca:ae:65:65:07:49:b6:1c:54:dd:69:
         cf:b3:7e:2b:15:17:ec:1e:91:4a:1c:1d:2d:a8:f4:3f:33:ea:
         ef:e0:b3:02:3f:b8:40:bd:64:7b:37:2f:50:a6:c5:c7:63:4b:
         17:92:87:a4:ce:06:fc:91:f7:2c:fc:9b:2f:3a:9b:2a:47:86:
         17:01:2b:4a:4f:17:d2:a7:05:e7:52:65:a2:a5:97:35:29:3e:
         6b:60:eb:1f:10:e2:2b:83:79:ff:c7:1b:84:e4:bf:43:44:21:
         7d:04:5f:a4:53:16:a0:6c:e8:f0:80:03:a4:b9:55:c8:48:7c:
         bc:33:03:24:c9:10:ce:35:1f:36:6b:f7:fd:77:17:66:55:b4:
         78:5a:1c:8e:fb:63:80:db:79:2b:81:08:67:ff:71:3e:e2:91:
         1d:af:73:1c:4e:53:78:e0:95:27:a8:c3:33:2b:ba:6d:f5:f2:
         8f:e9:29:3c:c2:b3:c2:8a:7d:43:1d:96:f8:5c:71:62:1f:f5:
         85:de:a1:a6:44:fc:5f:0a:61:8e:63:ad:b3:26:00:d2:47:5c:
         b0:53:17:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----