Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a3a2f33322d3332203d3e20323732393632.roa
File:                     323830333a663939303a3a2f33322d3332203d3e20323732393632.roa (raw, json)
Hash identifier:          XmHqHUPa1WkymmqvrS2gOdBHD1YuteLAuO8LNdojBVc=
Subject key identifier:   E4:9B:5B:64:86:B0:9C:FC:2D:E1:A8:A9:FA:B2:F3:CE:E3:4A:30:A8
Certificate issuer:       /CN=83F7E47489A9B33F206BDEF2A5355211978698EE
Certificate serial:       545C05AA08150B15A6792DED8DB53741A2FAF3
Authority key identifier: 83:F7:E4:74:89:A9:B3:3F:20:6B:DE:F2:A5:35:52:11:97:86:98:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a3a2f33322d3332203d3e20323732393632.roa
Signing time:             Tue 04 Feb 2025 17:58:55 +0000
ROA not before:           Tue 04 Feb 2025 17:53:55 +0000
ROA not after:            Tue 03 Feb 2026 17:58:55 +0000
asID:                     272962
IP address blocks:        2803:f990::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5c:05:aa:08:15:0b:15:a6:79:2d:ed:8d:b5:37:41:a2:fa:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F7E47489A9B33F206BDEF2A5355211978698EE
        Validity
            Not Before: Feb  4 17:53:55 2025 GMT
            Not After : Feb  3 17:58:55 2026 GMT
        Subject: CN=E49B5B6486B09CFC2DE1A8A9FAB2F3CEE34A30A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:16:66:ca:7a:72:cf:55:f6:ff:03:ad:10:
                    eb:67:98:14:90:36:ed:38:72:03:2c:cf:a7:94:4e:
                    f3:2b:1d:ac:c5:7c:1b:84:2a:70:23:e3:5b:b8:69:
                    78:cd:ed:e4:b0:13:c8:88:1d:58:b8:0a:65:98:6c:
                    f7:24:2e:1f:2d:d3:4e:76:4b:fb:8d:68:8d:d1:03:
                    e8:b6:e5:60:e8:38:5c:63:3f:79:7e:c8:0a:25:ac:
                    d9:37:5b:33:36:97:41:9e:3a:a2:87:7d:5b:02:26:
                    21:e8:ea:b6:70:ad:db:ef:a2:fe:7d:1c:83:9e:3c:
                    3d:30:10:1e:8f:74:3b:97:09:96:7b:c1:f1:8a:84:
                    b6:78:8f:9c:0c:ad:76:fa:54:7a:a1:2a:1a:38:0b:
                    b5:11:bc:44:88:c3:38:26:92:28:46:1f:b9:66:60:
                    76:35:9f:ed:76:04:99:a8:8a:5e:1b:ac:12:f3:a6:
                    c3:c1:cd:48:91:24:62:bc:89:f9:9a:56:79:6c:e5:
                    76:f6:59:0c:ba:a5:37:0f:d3:95:2a:69:a0:cf:00:
                    25:c3:be:76:3b:52:0f:9d:72:12:b7:3a:2e:e8:0d:
                    9f:79:b2:c9:9c:d4:29:02:5d:c2:f9:3d:78:58:1d:
                    96:a6:92:bc:92:33:2e:f3:b0:7d:e3:bf:43:f7:1a:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9B:5B:64:86:B0:9C:FC:2D:E1:A8:A9:FA:B2:F3:CE:E3:4A:30:A8
            X509v3 Authority Key Identifier:
                keyid:83:F7:E4:74:89:A9:B3:3F:20:6B:DE:F2:A5:35:52:11:97:86:98:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/83F7E47489A9B33F206BDEF2A5355211978698EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83F7E47489A9B33F206BDEF2A5355211978698EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06C4BAE3D8648D0EB233F12BE3ECC5AD952E9516F30874E3287A08A73D856250/0/323830333a663939303a3a2f33322d3332203d3e20323732393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f990::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:d0:87:07:f3:18:54:a0:a3:cc:3c:e3:07:2e:2e:61:e4:f7:
         e4:d6:ca:98:53:55:75:37:45:37:fd:f4:ea:0b:db:1e:09:c8:
         0e:b0:da:e2:59:c4:24:72:62:43:31:3c:bc:45:9f:a5:76:47:
         8e:35:f4:c3:76:5b:c8:dd:f4:84:04:ac:56:ee:6b:7b:c0:05:
         7a:49:9c:79:7b:0c:c3:82:fb:21:2b:13:a5:ca:d7:c9:a3:e6:
         ad:25:a5:9c:ce:52:7e:b7:a6:e6:73:02:bd:9f:9b:fc:88:70:
         ab:48:6b:33:31:99:58:e4:c6:38:29:7f:0c:57:90:e5:c7:e4:
         ce:49:c8:32:f1:da:cf:4c:6f:b8:7f:9d:5b:35:06:d9:e9:ea:
         71:73:b0:28:53:53:91:2e:4f:02:01:d4:31:94:26:e1:f8:66:
         b5:18:9c:e3:20:90:ff:e0:59:e5:57:75:7c:20:25:e9:38:b9:
         09:c5:70:d9:4c:c2:2a:ff:c5:80:cc:1e:1e:d3:c6:f7:1f:ef:
         20:96:74:90:49:90:1f:50:05:80:f1:84:7f:93:e6:10:a9:51:
         f4:0e:c9:81:02:34:ba:8f:65:c3:b2:2f:42:50:21:d9:68:c9:
         1b:b6:cf:a3:67:18:90:9f:da:c2:00:71:f8:9f:5f:0e:e1:37:
         c8:ca:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:00 2025 by rpki-client