Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12471B3F379D7236A320C5988571FEFFE8B66CACCF82631C5E3E8F51E6BDB9BD/0/323830333a333331303a3a2f33322d3332203d3e20323732303639.roa
File:                     323830333a333331303a3a2f33322d3332203d3e20323732303639.roa (raw, json)
Hash identifier:          YGlnT3njfzwG+UgWhkA2r22Uevs5r650xitplLaZans=
Subject key identifier:   90:70:EE:2D:CF:09:CA:B8:CE:5C:00:2F:AF:BB:7B:84:CA:83:7F:70
Certificate issuer:       /CN=D03703750EB04020548DBEDA6A85AD45C4E14E1A
Certificate serial:       5715B551C8BF496ECA8602ECE268B07E8F413E77
Authority key identifier: D0:37:03:75:0E:B0:40:20:54:8D:BE:DA:6A:85:AD:45:C4:E1:4E:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D03703750EB04020548DBEDA6A85AD45C4E14E1A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12471B3F379D7236A320C5988571FEFFE8B66CACCF82631C5E3E8F51E6BDB9BD/0/323830333a333331303a3a2f33322d3332203d3e20323732303639.roa
Signing time:             Tue 04 Feb 2025 18:09:55 +0000
ROA not before:           Tue 04 Feb 2025 18:04:55 +0000
ROA not after:            Tue 03 Feb 2026 18:09:55 +0000
asID:                     272069
IP address blocks:        2803:3310::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:15:b5:51:c8:bf:49:6e:ca:86:02:ec:e2:68:b0:7e:8f:41:3e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D03703750EB04020548DBEDA6A85AD45C4E14E1A
        Validity
            Not Before: Feb  4 18:04:55 2025 GMT
            Not After : Feb  3 18:09:55 2026 GMT
        Subject: CN=9070EE2DCF09CAB8CE5C002FAFBB7B84CA837F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:90:a0:37:af:e8:22:bc:d7:cc:36:af:61:
                    b2:3d:b2:37:0a:95:fa:f6:2a:5a:da:27:94:c5:6e:
                    4f:8a:18:70:50:64:b7:91:73:7d:a0:52:f4:59:dd:
                    24:34:ef:2d:bb:c6:65:c5:b6:1b:cf:3c:d7:bd:d8:
                    d5:a7:85:2c:02:87:bd:1f:84:fb:53:f8:1a:5a:56:
                    31:b8:f4:e7:8f:a6:46:1e:9b:f6:0b:b7:d7:9c:1a:
                    00:eb:8f:f2:a5:28:ae:7e:88:c6:ab:29:31:cd:78:
                    72:54:e9:2e:aa:9f:85:c1:95:20:58:a9:22:5d:63:
                    fc:28:bc:5f:4e:44:e7:6d:34:65:46:1a:2b:96:b8:
                    30:8a:da:d0:2f:8b:17:35:9e:02:8a:bc:2d:95:2c:
                    b2:6b:06:ed:85:54:86:95:92:d2:da:57:b5:00:16:
                    be:b9:c9:00:5b:17:36:31:cc:2c:92:ef:15:d3:72:
                    f2:da:7b:59:1a:cb:f9:03:9e:61:cd:d4:87:19:bb:
                    96:3b:3f:e3:9c:b3:d7:7e:26:d3:a8:30:2b:e0:33:
                    1d:4a:18:66:10:39:ff:22:ff:32:a9:43:2d:c6:6d:
                    35:c4:bc:8a:3f:fa:d3:23:af:75:23:95:6e:e6:e9:
                    fe:89:5a:05:1a:f7:86:09:60:e1:94:7d:13:90:3a:
                    29:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:70:EE:2D:CF:09:CA:B8:CE:5C:00:2F:AF:BB:7B:84:CA:83:7F:70
            X509v3 Authority Key Identifier:
                keyid:D0:37:03:75:0E:B0:40:20:54:8D:BE:DA:6A:85:AD:45:C4:E1:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12471B3F379D7236A320C5988571FEFFE8B66CACCF82631C5E3E8F51E6BDB9BD/0/D03703750EB04020548DBEDA6A85AD45C4E14E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D03703750EB04020548DBEDA6A85AD45C4E14E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12471B3F379D7236A320C5988571FEFFE8B66CACCF82631C5E3E8F51E6BDB9BD/0/323830333a333331303a3a2f33322d3332203d3e20323732303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3310::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:61:54:0e:c7:f7:d7:e4:8e:24:f5:65:85:48:c7:98:c3:a0:
         34:86:0a:bf:c5:f7:b6:26:4f:f0:52:04:da:cb:19:9d:98:7c:
         ee:ea:e3:82:a7:d4:c4:65:6d:d0:e8:8f:de:ee:10:ee:63:84:
         67:ed:0c:e8:24:51:f9:7d:f1:f5:33:b8:79:2f:94:ba:5a:7b:
         2b:e3:70:3c:a6:49:3c:2e:1d:34:6e:9f:8a:bf:f1:e5:7b:30:
         24:59:ef:08:dc:d6:7a:7b:7c:d2:11:9d:7e:4a:a8:28:3a:31:
         2c:85:e6:57:c3:db:27:27:1d:1e:63:f5:d4:e3:a5:bf:80:bb:
         a5:25:57:9c:66:4b:1c:94:a9:ad:02:26:f4:6e:67:ac:85:41:
         8c:0b:6b:70:1d:55:0f:44:fb:ae:53:f8:04:f8:20:6d:63:d4:
         36:f1:61:89:74:7e:f9:3b:95:d0:ed:64:2f:8c:46:c9:42:61:
         5a:4d:fe:0d:17:d7:6b:4d:d8:db:fa:f6:18:57:e0:74:0f:ce:
         2c:8f:c3:2d:5e:70:e4:ad:be:9a:11:cc:fe:26:d4:cb:ce:e6:
         0f:28:db:52:dc:5c:2d:45:0b:82:bd:b7:d0:f6:3e:d4:7b:59:
         33:be:28:60:23:71:7b:fe:f0:52:7a:70:e2:1e:c2:83:e2:91:
         97:c3:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:47 2025 by rpki-client