Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a383030303a3a2f33332d3333203d3e20323633373239.roa
File:                     323830333a346638303a383030303a3a2f33332d3333203d3e20323633373239.roa (raw, json)
Hash identifier:          Wl72q5E5LfDsIH09kNOjKbFjDKhgH40R7bsS015ORuA=
Subject key identifier:   94:9F:8E:73:B4:A8:0D:14:53:94:C3:14:DE:6E:D7:EB:1C:18:96:91
Certificate issuer:       /CN=AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5
Certificate serial:       2B34780A90F4217D4FC651CF67317304986B16DE
Authority key identifier: AB:6B:AD:4E:48:CA:90:BB:C6:E4:CE:22:67:5D:DE:58:82:BB:73:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a383030303a3a2f33332d3333203d3e20323633373239.roa
Signing time:             Mon 03 Feb 2025 18:30:00 +0000
ROA not before:           Mon 03 Feb 2025 18:25:00 +0000
ROA not after:            Mon 02 Feb 2026 18:30:00 +0000
asID:                     263729
IP address blocks:        2803:4f80:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:34:78:0a:90:f4:21:7d:4f:c6:51:cf:67:31:73:04:98:6b:16:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5
        Validity
            Not Before: Feb  3 18:25:00 2025 GMT
            Not After : Feb  2 18:30:00 2026 GMT
        Subject: CN=949F8E73B4A80D145394C314DE6ED7EB1C189691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:0b:de:49:25:a5:78:23:6e:2a:cc:80:81:
                    3b:37:bc:3b:7c:cd:72:6a:f4:6d:e0:9a:c3:d2:3b:
                    75:c5:02:b1:89:b4:bb:e5:b0:73:3d:ca:e3:8a:56:
                    98:2f:6a:9e:c6:8b:26:5a:bf:37:4a:49:5f:ca:44:
                    82:8e:bd:96:93:ac:80:fd:29:3e:79:4a:4c:db:ff:
                    93:1e:5e:19:3d:6e:71:1f:92:76:81:1d:81:0b:c6:
                    85:56:f1:6f:69:dd:91:b0:e2:a7:80:4b:76:e5:a1:
                    8e:b7:52:ec:36:2b:ba:10:7d:1c:d2:65:a1:18:75:
                    b5:35:f2:db:6c:63:30:fe:8a:b4:09:9e:52:54:ac:
                    36:e6:8b:1a:97:b3:77:a4:09:29:46:98:b5:50:fa:
                    56:b3:09:8c:8d:64:9e:f9:b4:6b:a1:a2:5f:89:69:
                    65:d6:5b:13:18:fb:ef:92:3c:05:05:51:1e:1b:86:
                    f5:3a:52:3c:a9:6a:65:c9:ea:0c:7e:0c:cf:07:f7:
                    4d:1e:a1:7c:60:64:d7:3a:87:dc:57:e8:34:dd:4f:
                    e0:9a:0d:98:dc:3c:af:f4:d5:0e:ed:fb:ef:8a:d4:
                    12:6f:c6:b3:5d:cd:6e:cb:61:b2:b8:b0:79:87:a7:
                    f0:c5:54:2d:4d:09:79:7d:c2:be:8b:87:b7:58:e3:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9F:8E:73:B4:A8:0D:14:53:94:C3:14:DE:6E:D7:EB:1C:18:96:91
            X509v3 Authority Key Identifier:
                keyid:AB:6B:AD:4E:48:CA:90:BB:C6:E4:CE:22:67:5D:DE:58:82:BB:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a383030303a3a2f33332d3333203d3e20323633373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f80:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         87:c1:91:07:31:7c:a3:01:52:62:26:21:58:2b:62:86:df:08:
         df:94:16:6d:62:e9:c4:e9:87:37:28:8b:54:f1:d0:96:5b:62:
         5e:b3:98:39:d9:7d:ac:3b:23:14:51:a2:be:7f:ab:33:8f:d0:
         97:ba:2f:40:3b:8d:d1:77:91:16:7d:45:69:51:1f:7b:6e:03:
         b5:13:0d:87:71:5b:0b:a8:19:26:8d:60:ca:b1:3e:19:2e:19:
         93:11:5a:a3:88:0e:d8:b9:ba:0d:8a:d6:0e:49:e6:57:a8:11:
         4e:84:25:a5:b8:8e:b5:41:5a:9e:0f:4c:39:4a:5b:30:56:51:
         db:90:da:4d:30:49:ee:e3:19:2f:d0:fe:96:c6:d4:45:1a:65:
         c3:6c:7b:7a:b3:e9:31:96:fa:d7:9a:7a:0e:6f:eb:8d:8b:0c:
         a0:ad:b5:83:6b:b7:12:23:2b:87:b8:50:8f:a7:74:21:52:59:
         f4:8e:ba:86:62:61:80:c2:f4:cc:f1:1b:db:23:57:f7:b2:d2:
         6a:99:56:71:ed:fa:13:9f:e5:35:a4:d5:ee:e3:4a:4e:40:5c:
         35:ff:c8:40:22:69:17:0d:24:8e:58:a1:91:e8:b5:35:58:53:
         e1:35:ca:14:08:13:84:d1:ae:4c:8a:c6:6e:16:64:30:8c:98:
         e9:45:04:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:40 2025 by rpki-client