Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BD1E4001F4D5E67AFCC87F155ECC9195DB391CC31004479AC153BCDC1A9C278/0/323830333a623232303a3a2f33322d3438203d3e20323635383434.roa
File:                     323830333a623232303a3a2f33322d3438203d3e20323635383434.roa (raw, json)
Hash identifier:          EC4w7qMfXEQtsLTrPgkXinN6JGqXNnaHXsDhJ6xHTH8=
Subject key identifier:   CA:DD:00:00:1F:AA:EA:B3:80:EF:B8:E2:0E:5E:D9:F7:C3:0A:7F:E0
Certificate issuer:       /CN=6D2323470778FBF541DC6EF3375B47938B0ADCAF
Certificate serial:       28FA607D5575B59587ADD2C09638AC36E28DA9D1
Authority key identifier: 6D:23:23:47:07:78:FB:F5:41:DC:6E:F3:37:5B:47:93:8B:0A:DC:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2323470778FBF541DC6EF3375B47938B0ADCAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BD1E4001F4D5E67AFCC87F155ECC9195DB391CC31004479AC153BCDC1A9C278/0/323830333a623232303a3a2f33322d3438203d3e20323635383434.roa
Signing time:             Tue 04 Feb 2025 18:18:00 +0000
ROA not before:           Tue 04 Feb 2025 18:13:00 +0000
ROA not after:            Tue 03 Feb 2026 18:18:00 +0000
asID:                     265844
IP address blocks:        2803:b220::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fa:60:7d:55:75:b5:95:87:ad:d2:c0:96:38:ac:36:e2:8d:a9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2323470778FBF541DC6EF3375B47938B0ADCAF
        Validity
            Not Before: Feb  4 18:13:00 2025 GMT
            Not After : Feb  3 18:18:00 2026 GMT
        Subject: CN=CADD00001FAAEAB380EFB8E20E5ED9F7C30A7FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:17:0e:57:af:4d:51:54:d1:83:55:c2:06:
                    c9:89:a7:d5:5b:d6:0a:8c:32:b7:97:3a:b3:6e:de:
                    af:d0:ba:69:09:e5:fb:c0:57:f5:36:85:55:ee:0d:
                    9b:95:44:8a:3c:b8:f1:8f:76:45:62:b2:72:10:17:
                    c5:9a:47:0b:3b:f8:5f:de:91:88:85:f8:c9:e4:e5:
                    a8:a6:85:65:0d:c9:9e:85:fe:97:2d:e1:21:a2:41:
                    bb:ad:b0:f7:82:61:b9:53:9d:d4:ac:f0:19:d9:04:
                    0b:2a:de:dd:8d:be:af:b4:06:3e:4a:86:62:61:5f:
                    3a:c9:32:b2:27:80:34:16:f8:05:35:ed:b7:8a:79:
                    43:23:76:9b:04:5a:ea:9b:2c:c6:53:ee:f5:38:72:
                    88:5c:96:c9:40:d7:f6:b7:c9:0b:53:f2:92:19:e3:
                    96:56:fe:16:0b:a8:ae:df:01:92:46:8f:24:60:e3:
                    37:88:79:e9:33:af:32:a0:07:6d:f9:b7:13:21:30:
                    7d:0b:96:6c:13:10:02:4e:be:92:8c:c7:b6:51:57:
                    2a:0e:69:c6:18:59:a1:f5:b7:35:90:0c:89:c4:0e:
                    2f:4d:80:57:c2:ac:9b:b2:53:04:6b:6f:a6:6d:cc:
                    35:3f:69:a0:2e:fa:cc:52:96:b3:6a:2f:a9:76:74:
                    c8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DD:00:00:1F:AA:EA:B3:80:EF:B8:E2:0E:5E:D9:F7:C3:0A:7F:E0
            X509v3 Authority Key Identifier:
                keyid:6D:23:23:47:07:78:FB:F5:41:DC:6E:F3:37:5B:47:93:8B:0A:DC:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BD1E4001F4D5E67AFCC87F155ECC9195DB391CC31004479AC153BCDC1A9C278/0/6D2323470778FBF541DC6EF3375B47938B0ADCAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2323470778FBF541DC6EF3375B47938B0ADCAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BD1E4001F4D5E67AFCC87F155ECC9195DB391CC31004479AC153BCDC1A9C278/0/323830333a623232303a3a2f33322d3438203d3e20323635383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b220::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:03:2a:5e:b8:86:24:66:cf:ee:79:70:0f:45:79:65:68:d6:
         d8:95:40:b2:d2:68:86:52:ea:94:f9:d1:16:8b:be:06:10:89:
         e8:75:e7:d3:b5:c1:88:f0:7d:c8:de:50:75:b3:c2:67:d8:38:
         49:3c:be:ad:a9:5a:79:b4:60:64:b2:69:38:9e:04:fb:1c:db:
         1e:ab:65:b0:76:3b:4d:33:be:51:94:80:b2:d1:97:74:08:d7:
         ba:d0:49:27:3e:e2:55:a2:ab:10:43:a6:c2:16:7a:28:0e:01:
         b8:4f:9f:6a:d2:cf:09:f7:2b:cf:82:8a:61:9d:8e:0b:90:a1:
         29:ab:42:76:7d:a4:3c:a0:d4:fe:2b:e7:d0:dc:18:0d:a5:f8:
         3c:e8:14:59:82:0a:a7:d7:52:dd:59:07:66:b1:08:1e:52:2a:
         3a:57:18:ed:34:29:d7:80:37:71:db:c9:ae:46:d0:1e:44:a6:
         39:bd:22:ed:c7:96:5e:22:b7:10:d1:c7:da:2c:da:05:c7:1c:
         39:95:a8:5e:00:25:b0:9e:07:d0:81:65:ac:16:34:40:70:d2:
         0f:93:d2:70:12:70:78:d3:ef:d1:c3:5c:1b:af:43:60:2c:dd:
         37:04:62:70:5c:92:12:4e:d6:28:d5:0d:6f:8f:29:20:50:b9:
         c2:cb:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:19:03 2025 by rpki-client