Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3630303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3630303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          qML6eNOb1TX2VS1Ac+tbzNYTH9hJJeQI07UiPT6rO5M=
Subject key identifier:   A0:C0:B8:44:DC:07:60:9C:7C:E1:26:D4:4E:E7:86:CC:DF:B7:9A:C1
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       4262552006B7F0FBCC89FF70B48D9E0A7971622E
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3630303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 04 Feb 2025 18:14:18 +0000
ROA not before:           Tue 04 Feb 2025 18:09:18 +0000
ROA not after:            Tue 03 Feb 2026 18:14:18 +0000
asID:                     272939
IP address blocks:        2803:b190:600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:62:55:20:06:b7:f0:fb:cc:89:ff:70:b4:8d:9e:0a:79:71:62:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Feb  4 18:09:18 2025 GMT
            Not After : Feb  3 18:14:18 2026 GMT
        Subject: CN=A0C0B844DC07609C7CE126D44EE786CCDFB79AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:e9:29:ef:c9:40:4e:df:aa:52:b8:50:2e:
                    1a:1b:61:e1:62:84:8e:e0:57:ba:16:f7:e6:ac:31:
                    47:67:cf:c1:33:5a:11:51:5e:f8:90:8f:a4:86:36:
                    c0:3b:6d:66:bb:f8:1e:b3:68:67:46:47:c9:3a:7d:
                    eb:45:cc:aa:a6:66:e8:7f:08:4b:0d:77:de:71:4f:
                    94:5c:0e:aa:ff:87:ac:b2:c3:55:8f:50:c1:38:f5:
                    5e:c7:16:e2:58:66:ed:f8:32:ed:29:71:a6:01:9f:
                    ef:6f:7e:97:cc:c9:c1:2d:a2:89:2c:8b:ab:67:05:
                    fe:de:c0:ef:48:e4:2d:3b:7b:38:8c:f6:55:d9:5f:
                    9b:cf:16:ec:41:12:85:d9:47:ab:5e:39:ba:28:32:
                    91:40:0c:42:ee:9e:ce:07:6e:c1:d8:f2:87:34:29:
                    b3:a9:08:b0:44:3f:24:0c:78:1a:35:de:43:24:bd:
                    7e:6f:bd:62:11:01:4b:d0:fa:52:75:e4:6d:aa:a2:
                    f9:e2:12:60:87:22:cf:f3:12:e2:c2:e4:d3:9e:eb:
                    be:8d:aa:ec:f6:ca:76:a2:9f:b2:14:00:d7:c3:3d:
                    26:10:c2:f2:2b:c9:09:a2:bd:cf:54:72:76:3d:5f:
                    45:5e:30:08:cf:01:ce:94:62:73:b1:ba:14:46:79:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C0:B8:44:DC:07:60:9C:7C:E1:26:D4:4E:E7:86:CC:DF:B7:9A:C1
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3630303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:45:bf:f6:e9:5d:bc:92:81:cb:6d:5b:5e:41:e8:de:12:00:
         9a:92:40:eb:dd:fc:0b:24:66:cd:69:86:d1:01:bb:9b:83:e1:
         f6:2f:32:26:50:b7:4a:fd:66:26:ce:77:db:40:e8:b0:79:c4:
         37:84:61:ec:b5:e7:ec:a2:18:05:c7:f8:d4:97:7e:41:d0:62:
         a1:58:f5:1c:fd:f4:2f:32:dd:2b:26:4e:65:e6:c3:8f:14:71:
         26:c0:99:44:80:08:66:09:90:20:f4:01:59:7b:9f:59:57:08:
         b5:b3:c7:46:2d:3f:e0:79:cf:81:9a:26:7e:d4:ac:9f:79:36:
         ef:25:09:f6:be:0b:a0:b7:c2:a5:27:1b:b0:4a:cb:26:09:f3:
         db:5a:31:74:1d:bb:1f:35:18:73:10:95:d5:1f:95:d4:af:5b:
         23:13:6d:ca:70:6c:38:3d:78:a0:cd:94:83:d8:a4:91:75:c3:
         64:51:a7:65:6b:a1:aa:c2:4e:32:fb:29:c3:a5:6c:e2:f2:7c:
         35:36:5d:34:ee:a3:4d:00:ae:11:c0:13:04:54:62:7f:3f:63:
         78:04:e7:4b:a5:72:c1:a8:bf:4e:04:d0:f2:6c:fd:9c:17:7e:
         7e:da:2f:3d:d7:87:d5:da:73:10:4b:ad:d7:b7:13:e9:7a:37:
         26:74:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:53:44 2025 by rpki-client