Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/323830333a646363303a3a2f33322d3634203d3e20323634383230.roa
File:                     323830333a646363303a3a2f33322d3634203d3e20323634383230.roa (raw, json)
Hash identifier:          jI9xcSu2REblbojZZyXNxtF5HiW71bX2vZ7K4vZAr9M=
Subject key identifier:   B8:25:53:53:BE:2C:29:24:DB:9C:08:79:F5:47:84:66:18:97:D5:F7
Certificate issuer:       /CN=65B9BA148971D9B804D3A8ED2091FAC0E0BC8863
Certificate serial:       077A87838B1FF3008678A64E010F01DE4206E311
Authority key identifier: 65:B9:BA:14:89:71:D9:B8:04:D3:A8:ED:20:91:FA:C0:E0:BC:88:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/323830333a646363303a3a2f33322d3634203d3e20323634383230.roa
Signing time:             Tue 04 Feb 2025 18:12:02 +0000
ROA not before:           Tue 04 Feb 2025 18:07:02 +0000
ROA not after:            Tue 03 Feb 2026 18:12:02 +0000
asID:                     264820
IP address blocks:        2803:dcc0::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7a:87:83:8b:1f:f3:00:86:78:a6:4e:01:0f:01:de:42:06:e3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65B9BA148971D9B804D3A8ED2091FAC0E0BC8863
        Validity
            Not Before: Feb  4 18:07:02 2025 GMT
            Not After : Feb  3 18:12:02 2026 GMT
        Subject: CN=B8255353BE2C2924DB9C0879F54784661897D5F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:8d:b7:8e:af:10:eb:66:3c:ea:d0:b3:bd:
                    d5:15:46:fc:c9:9e:39:3d:52:c8:e0:43:b7:6e:11:
                    58:29:3a:7c:02:a1:7d:32:70:48:2b:e9:46:4d:19:
                    07:29:0c:42:cd:bd:5d:e5:0e:be:ce:fa:10:26:6d:
                    1a:28:06:f1:29:90:ae:cf:3b:45:cb:26:0e:e8:76:
                    bc:32:5b:f2:26:db:03:32:a9:e4:91:2e:23:04:48:
                    5f:c2:c7:fb:26:f3:87:85:f8:a7:88:86:6a:00:17:
                    82:c2:6e:e2:c1:c6:24:90:49:59:44:50:ae:69:0b:
                    f1:32:43:d4:41:38:9f:bf:c5:cd:09:45:11:37:5a:
                    11:47:fb:ec:c6:2b:91:c4:95:62:9d:8d:05:50:87:
                    35:db:64:5e:b3:4d:4d:de:bd:e3:0c:2e:c2:e4:db:
                    cf:bd:ae:6b:bb:93:ac:64:61:65:be:7e:e9:e3:45:
                    56:60:12:10:f8:ca:cd:32:0e:46:a5:74:e4:67:fb:
                    2c:70:47:de:07:6d:38:3a:1b:04:1e:d9:b9:55:56:
                    79:e7:b6:1f:a6:26:3e:70:6f:a7:45:80:ee:36:9f:
                    66:b1:bd:b0:c1:de:c6:24:ae:3e:fb:4d:33:e4:d9:
                    f3:f4:d3:0e:21:c2:2b:47:10:c8:5e:26:80:2a:89:
                    e4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:53:53:BE:2C:29:24:DB:9C:08:79:F5:47:84:66:18:97:D5:F7
            X509v3 Authority Key Identifier:
                keyid:65:B9:BA:14:89:71:D9:B8:04:D3:A8:ED:20:91:FA:C0:E0:BC:88:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/323830333a646363303a3a2f33322d3634203d3e20323634383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:69:21:75:cd:fc:fc:01:45:41:80:a8:34:96:a4:64:b3:7e:
         5f:4c:a7:f5:ab:67:f6:bc:52:79:3c:b8:8d:7d:bb:bb:50:74:
         af:b1:4d:8d:85:6b:21:be:7d:9a:06:f4:b1:80:58:cb:ee:c0:
         75:46:35:fb:cb:b6:ab:74:89:2c:d1:40:dd:7a:59:c4:2f:a1:
         4d:7b:ab:83:ac:17:64:70:05:3a:0b:4e:eb:8f:bf:86:aa:80:
         c9:cf:b4:5b:a7:50:23:97:fe:c9:ea:37:df:7b:7b:e2:1b:c5:
         f8:6d:d6:00:52:4a:ae:72:02:c3:2d:87:06:64:b4:ce:9c:f4:
         76:3f:b1:a9:b8:1d:c0:97:5f:33:bc:68:2b:7f:a1:61:58:bb:
         e9:2f:1e:30:aa:ca:7d:8f:1e:6b:c3:fb:bc:ba:1c:c6:b6:73:
         d2:fb:24:a1:81:35:f1:c0:c1:4b:2f:ba:db:72:4d:3d:ae:9e:
         c9:36:c9:c7:f0:f9:00:72:03:1f:79:f3:a2:8b:08:4c:aa:f6:
         25:cb:b2:08:cf:8e:36:ea:48:1a:83:bc:1c:c2:68:f5:c9:d0:
         85:ac:91:52:e7:80:70:a9:ee:83:b8:9b:3f:85:4e:34:2e:62:
         bd:44:51:95:ac:99:f8:2b:08:ac:8a:54:f9:2f:15:87:d9:41:
         63:78:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:04 2025 by rpki-client