Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3730303a3a2f34302d3430203d3e20323732393339.roa
File:                     323830333a623139303a3730303a3a2f34302d3430203d3e20323732393339.roa (raw, json)
Hash identifier:          rNzToYxZvQBp7o8Jaa+GLMiP2z3BHqSEQ4e2hx/2BG0=
Subject key identifier:   BA:E0:BF:56:EF:81:CE:DA:3E:CB:39:55:7C:DB:14:9F:91:2E:28:D5
Certificate issuer:       /CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
Certificate serial:       7E91F2D30E6C2258B258B0475C5F6FAB6E5247FB
Authority key identifier: E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3730303a3a2f34302d3430203d3e20323732393339.roa
Signing time:             Tue 04 Feb 2025 18:14:19 +0000
ROA not before:           Tue 04 Feb 2025 18:09:19 +0000
ROA not after:            Tue 03 Feb 2026 18:14:19 +0000
asID:                     272939
IP address blocks:        2803:b190:700::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:91:f2:d3:0e:6c:22:58:b2:58:b0:47:5c:5f:6f:ab:6e:52:47:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8
        Validity
            Not Before: Feb  4 18:09:19 2025 GMT
            Not After : Feb  3 18:14:19 2026 GMT
        Subject: CN=BAE0BF56EF81CEDA3ECB39557CDB149F912E28D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:87:9d:08:e2:f2:e8:79:aa:e7:1a:2a:66:
                    47:2e:91:e2:7a:e5:2e:7c:9f:a1:66:6d:bc:46:c0:
                    c7:3a:a2:7c:4f:ad:62:b8:50:d6:31:5a:5b:59:5c:
                    e1:2d:b2:5a:89:f5:84:2a:13:dc:33:3d:a6:c3:9f:
                    e3:8c:4a:6d:ae:71:7c:7e:5c:57:f7:44:31:81:a4:
                    7d:d6:a6:1f:11:48:34:3a:ec:28:4f:1d:e2:b4:33:
                    5c:95:96:67:14:ae:16:2e:65:f1:93:64:d7:1d:be:
                    11:67:8d:c2:b7:86:63:02:3a:7a:00:f4:3d:8a:ee:
                    57:bb:91:5f:c2:43:f3:f1:31:f7:bb:f2:15:2f:2f:
                    3b:1a:c4:60:d7:30:6b:d6:55:fe:a0:01:2f:a3:af:
                    af:22:12:33:a0:58:a7:ee:6a:81:99:e1:9a:80:69:
                    74:a7:d7:09:fc:75:84:d9:df:18:7c:5d:69:13:73:
                    41:af:5c:b8:58:b1:d1:34:a5:c7:ba:75:ac:c4:50:
                    b0:6c:65:b2:4f:a6:7a:ec:e1:a3:7d:52:22:17:8e:
                    d0:f9:ef:f5:b6:23:20:15:c6:21:ae:62:b9:2a:c8:
                    e4:74:18:55:2a:e8:19:01:ee:e1:40:2d:ef:d5:d2:
                    5d:f3:22:d4:46:35:65:bb:de:b7:a6:a6:e4:d6:8a:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E0:BF:56:EF:81:CE:DA:3E:CB:39:55:7C:DB:14:9F:91:2E:28:D5
            X509v3 Authority Key Identifier:
                keyid:E5:B3:F4:03:2F:D6:8E:C9:C0:5F:AD:BA:43:7C:34:59:E3:C7:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5B3F4032FD68EC9C05FADBA437C3459E3C7A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B7093FC2E6776D1257B2529C57A27EB68C700B2032E52F44023E172B5E81F8C/0/323830333a623139303a3730303a3a2f34302d3430203d3e20323732393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         d6:fb:c5:a8:59:ea:b5:65:49:aa:a2:c7:05:c1:f1:3e:82:49:
         9b:d8:ee:ea:77:37:0e:98:64:ee:7a:21:bd:ab:e3:f3:54:25:
         32:10:37:2b:3a:75:02:2c:85:e8:bb:bd:ec:43:6c:68:92:ba:
         50:2c:6e:68:c1:17:d9:69:61:d2:58:93:c3:2b:5a:54:50:a2:
         1d:8b:11:00:0e:ed:44:2a:93:ef:ef:0a:2d:c8:b0:ea:33:08:
         26:90:c3:15:a4:44:3a:69:9f:27:e3:ed:ef:62:ab:da:ad:d4:
         2e:97:ea:d2:79:7f:37:9e:8b:9f:7c:94:ee:ce:6a:5e:40:2b:
         72:7e:3b:64:b9:14:06:16:6f:e9:89:d3:69:2c:80:35:38:7f:
         a1:a1:db:53:00:e1:6b:00:03:87:24:4e:b5:f3:56:41:58:85:
         b6:d9:ea:91:34:ba:02:6c:74:38:d0:03:2b:57:91:42:26:79:
         6e:67:df:35:58:50:95:d2:02:72:5d:b5:23:44:37:97:06:87:
         7d:04:9c:81:a2:04:60:e8:12:cd:c7:20:cf:0a:f8:4f:f4:38:
         bb:ea:b7:5d:4d:3c:83:2f:60:f6:1d:b4:c0:52:89:97:66:87:
         d4:9b:d9:43:c1:85:7c:c3:51:dc:31:c5:a6:ca:0d:25:79:e3:
         98:e9:12:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:24:07 2025 by rpki-client