Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/323830333a393436303a3a2f33322d3332203d3e20323637383432.roa
File:                     323830333a393436303a3a2f33322d3332203d3e20323637383432.roa (raw, json)
Hash identifier:          MwwIb9uPyIDN/CiPZ39kYlOZgXTxlF0bN9hN24VLkXg=
Subject key identifier:   3D:25:01:6C:90:14:66:27:58:D3:A5:73:3A:CF:74:71:81:26:B0:6C
Certificate issuer:       /CN=F7ED49FE4FBD19C88175FC1E05555233C66F53CB
Certificate serial:       4BBCA7689DF693821DE8029F3BDFF7C67BD03E0B
Authority key identifier: F7:ED:49:FE:4F:BD:19:C8:81:75:FC:1E:05:55:52:33:C6:6F:53:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/323830333a393436303a3a2f33322d3332203d3e20323637383432.roa
Signing time:             Tue 04 Feb 2025 18:35:27 +0000
ROA not before:           Tue 04 Feb 2025 18:30:27 +0000
ROA not after:            Tue 03 Feb 2026 18:35:27 +0000
asID:                     267842
IP address blocks:        2803:9460::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bc:a7:68:9d:f6:93:82:1d:e8:02:9f:3b:df:f7:c6:7b:d0:3e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7ED49FE4FBD19C88175FC1E05555233C66F53CB
        Validity
            Not Before: Feb  4 18:30:27 2025 GMT
            Not After : Feb  3 18:35:27 2026 GMT
        Subject: CN=3D25016C9014662758D3A5733ACF74718126B06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:16:5c:f1:49:c2:15:47:08:66:0e:cc:24:
                    1f:14:29:9e:fe:d3:30:31:e7:95:ac:a9:fe:c7:ac:
                    1e:f2:a2:de:17:a8:6a:b2:88:35:ad:f4:36:94:61:
                    7b:31:a5:9f:1d:5f:73:3f:81:ed:a8:cf:18:86:46:
                    8f:48:0c:69:47:33:a6:c0:7c:65:e5:c8:b8:65:3b:
                    05:75:09:ca:30:01:ad:8a:76:19:8d:3c:4a:53:1a:
                    75:13:47:88:a4:5c:78:a6:45:b1:26:f1:bd:6a:13:
                    4a:89:25:15:9c:c5:7c:3e:be:db:86:d0:88:35:12:
                    6a:c2:4a:61:ec:78:5f:93:b2:fd:0b:b0:28:08:86:
                    25:87:71:e1:7e:90:ed:36:e5:59:ea:e5:01:2a:a1:
                    7b:1d:af:ce:9c:d3:d5:21:e0:dc:81:7f:3a:3b:d3:
                    d7:80:9a:b4:31:4f:6e:ae:4d:70:75:83:43:1b:d2:
                    03:f6:cb:50:08:be:f4:2f:14:1c:e4:ce:4a:89:d7:
                    de:e7:c3:d8:7e:2f:50:0b:29:f4:f6:74:3a:24:c2:
                    81:01:d4:d0:7f:cc:7e:cd:c1:3f:71:d4:09:79:09:
                    75:b1:43:94:b0:fd:90:be:99:fc:7e:22:8e:de:5f:
                    8f:ac:78:d5:ca:b7:6b:af:20:ec:1b:71:0e:ad:72:
                    5e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:25:01:6C:90:14:66:27:58:D3:A5:73:3A:CF:74:71:81:26:B0:6C
            X509v3 Authority Key Identifier:
                keyid:F7:ED:49:FE:4F:BD:19:C8:81:75:FC:1E:05:55:52:33:C6:6F:53:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7ED49FE4FBD19C88175FC1E05555233C66F53CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03B2B2E87C2FD855B70E81899ECA9998480C76C8C5E0EE888A2C771380F73882/0/323830333a393436303a3a2f33322d3332203d3e20323637383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9460::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:2d:c2:f7:82:83:36:55:fa:28:2e:e8:ab:12:9b:f6:3c:49:
         01:e4:80:dd:51:95:4e:65:98:c6:60:59:0b:d9:9e:2a:66:11:
         5b:f6:bc:b5:82:63:76:8c:ee:d4:ad:1f:64:35:5d:6b:67:56:
         ea:4a:26:e4:a6:b3:ab:00:3e:b2:2a:d3:2d:87:ca:62:1c:5c:
         e5:f6:70:c6:eb:ae:42:b7:b7:07:2c:ab:06:4f:07:6a:e9:b4:
         5d:07:39:19:d0:5d:68:4e:31:78:37:3d:c5:f8:2a:28:04:9f:
         9b:a7:48:a8:f8:be:1b:02:1a:61:42:15:09:75:bc:6a:58:eb:
         30:73:37:a2:4f:84:a5:5d:aa:c0:2d:89:85:69:55:13:45:d4:
         e5:ba:96:93:c2:fa:db:7d:5d:a9:3c:dc:65:31:97:34:16:60:
         6d:f2:13:3a:a9:27:b8:00:13:06:68:b5:d2:78:9b:8d:e8:2e:
         4b:2f:3b:b3:c6:89:3f:98:8a:99:73:be:a2:12:e1:9a:ff:42:
         23:42:ee:bd:4b:8e:d0:9c:50:d5:dc:46:fa:3a:05:18:db:fe:
         8c:27:77:51:2c:93:f6:4c:25:ed:04:61:ef:8a:48:41:8e:1c:
         8c:8b:62:0e:d0:ff:6c:b1:c7:28:a0:21:fe:b4:7b:07:46:73:
         18:98:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:46:16 2025 by rpki-client