Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/323830333a343231303a3a2f33322d3438203d3e20323731383938.roa
File:                     323830333a343231303a3a2f33322d3438203d3e20323731383938.roa (raw, json)
Hash identifier:          L5gczrARKUez2G2IwAO8d/WEADO9AcuPJjfFaDk6Fwk=
Subject key identifier:   0B:15:14:AA:75:C9:47:DD:EC:2F:94:D2:E1:49:29:62:FD:BE:15:66
Certificate issuer:       /CN=15AE320A4DE21615CC1ABBF64113CDEFC2D255CA
Certificate serial:       671E294BE0ADB2AC9E010A30ECF9122A2DA732DA
Authority key identifier: 15:AE:32:0A:4D:E2:16:15:CC:1A:BB:F6:41:13:CD:EF:C2:D2:55:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/323830333a343231303a3a2f33322d3438203d3e20323731383938.roa
Signing time:             Tue 04 Feb 2025 18:24:39 +0000
ROA not before:           Tue 04 Feb 2025 18:19:39 +0000
ROA not after:            Tue 03 Feb 2026 18:24:39 +0000
asID:                     271898
IP address blocks:        2803:4210::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1e:29:4b:e0:ad:b2:ac:9e:01:0a:30:ec:f9:12:2a:2d:a7:32:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15AE320A4DE21615CC1ABBF64113CDEFC2D255CA
        Validity
            Not Before: Feb  4 18:19:39 2025 GMT
            Not After : Feb  3 18:24:39 2026 GMT
        Subject: CN=0B1514AA75C947DDEC2F94D2E1492962FDBE1566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:c0:01:12:1e:27:df:46:ce:32:9e:c0:cb:
                    0d:1f:ac:a2:1d:0d:82:14:7b:f1:f0:21:b1:8c:4d:
                    35:1a:5a:3a:97:66:e1:c6:bf:65:67:26:f1:c1:2c:
                    ce:3f:2d:1f:15:37:1d:18:72:0e:7c:09:2d:6c:ff:
                    23:ef:5e:74:04:1e:7c:a2:48:be:1f:4b:f8:df:2c:
                    c8:dd:66:95:a6:4a:98:2d:7d:85:81:09:1a:a0:63:
                    53:71:6c:68:83:ae:85:ed:e5:62:cc:e1:c0:e6:e3:
                    18:96:7e:2c:18:1f:02:d5:c9:3e:e4:11:2b:21:29:
                    06:68:be:2c:4c:34:bf:64:d1:17:21:9d:66:d1:5d:
                    04:70:69:21:bf:09:b3:cc:18:e3:cc:36:de:75:70:
                    b7:13:c2:ed:1b:a0:9a:9a:89:26:a6:cd:f7:59:31:
                    9b:4a:db:22:bf:e3:b6:32:41:5b:d5:72:10:65:97:
                    81:6f:0c:a5:9e:1b:6c:c0:98:6d:31:54:6e:1f:6f:
                    45:5d:c5:75:93:6c:f2:23:40:62:48:0e:03:36:bf:
                    58:32:18:e2:16:1c:9c:a8:92:38:e9:a2:12:5c:c5:
                    fb:5f:74:ee:d0:13:f4:a4:21:c2:be:93:54:67:05:
                    6f:c8:b3:45:09:7f:5e:80:20:fa:92:86:4f:86:9f:
                    67:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:15:14:AA:75:C9:47:DD:EC:2F:94:D2:E1:49:29:62:FD:BE:15:66
            X509v3 Authority Key Identifier:
                keyid:15:AE:32:0A:4D:E2:16:15:CC:1A:BB:F6:41:13:CD:EF:C2:D2:55:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/323830333a343231303a3a2f33322d3438203d3e20323731383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4210::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:89:16:97:d6:d3:56:6d:aa:45:be:ad:bf:89:9a:87:33:33:
         84:03:cb:49:7b:7e:95:06:a3:0c:7c:c4:c7:aa:ab:54:12:c2:
         82:c6:1c:6c:d1:ec:4a:e1:97:43:14:8a:c4:36:8d:d2:cd:36:
         03:69:57:95:f4:df:6c:6f:dc:03:43:d8:20:3a:dc:23:8f:c3:
         6a:6f:79:64:65:c2:b4:ac:74:e1:d9:e1:0a:f8:3c:dc:66:88:
         46:dc:35:eb:6f:74:d3:87:04:1c:70:f3:44:83:2f:fa:72:c8:
         4c:74:c2:bc:20:ed:4c:9a:2a:e1:25:d9:6e:63:36:8b:b1:33:
         48:78:19:66:b0:19:03:99:ba:86:87:ca:d8:c3:b2:79:7d:2d:
         2a:2a:d9:f8:f5:e5:2f:a4:71:64:36:55:59:be:ea:02:9d:3d:
         1a:4e:68:ce:bb:b7:40:f4:6c:6b:cd:17:9b:4f:fe:4b:94:58:
         62:db:1c:ed:2f:10:9a:6e:1a:44:78:88:ab:70:d3:a1:7f:fa:
         7b:fd:82:d1:ec:d3:fe:06:f2:31:57:1b:d0:df:43:60:db:5c:
         a2:07:cb:e0:2c:92:ea:e5:87:f3:d6:dc:92:65:91:14:be:80:
         4b:fd:7b:6e:d3:d6:b2:9e:85:cc:90:17:d4:d2:a9:e4:3e:6f:
         bf:48:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:13 2025 by rpki-client