Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a3830303a3a2f34382d3438203d3e20323730303335.roa
File:                     323830333a653565303a3830303a3a2f34382d3438203d3e20323730303335.roa (raw, json)
Hash identifier:          E2w/1GIyr4f/LPfKRzugeCPwaKESQvhimhFbA1PopfE=
Subject key identifier:   E7:E4:7A:03:7F:48:75:36:0B:3E:0F:65:02:F4:43:93:29:A7:74:24
Certificate issuer:       /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
Certificate serial:       3A3A31F892AC4CFC35C59E1370ABEB43597D4A41
Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a3830303a3a2f34382d3438203d3e20323730303335.roa
Signing time:             Tue 04 Feb 2025 18:28:17 +0000
ROA not before:           Tue 04 Feb 2025 18:23:17 +0000
ROA not after:            Tue 03 Feb 2026 18:28:17 +0000
asID:                     270035
IP address blocks:        2803:e5e0:800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3a:31:f8:92:ac:4c:fc:35:c5:9e:13:70:ab:eb:43:59:7d:4a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
        Validity
            Not Before: Feb  4 18:23:17 2025 GMT
            Not After : Feb  3 18:28:17 2026 GMT
        Subject: CN=E7E47A037F4875360B3E0F6502F4439329A77424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:5b:8b:35:0b:cc:68:04:7b:a1:31:9c:eb:
                    bb:4a:e1:36:ed:88:60:a8:3e:a1:e9:53:f8:d0:8f:
                    47:d1:05:bd:2b:3b:4a:f1:39:c8:8b:97:5c:34:a7:
                    5d:c2:a6:a5:ac:df:fc:d8:b4:70:3f:69:e8:53:20:
                    d5:ae:c3:bc:03:05:e4:c3:64:0b:06:98:89:52:6e:
                    2a:d7:68:5b:8a:df:7f:76:32:80:8c:79:48:61:59:
                    75:f8:73:ee:9b:fc:bb:3e:30:eb:79:81:f0:86:73:
                    78:9a:f0:4e:b0:f6:8c:55:48:ce:83:e1:bd:ca:be:
                    b3:3c:be:3a:ac:61:63:0a:31:d7:44:ff:b3:bf:7b:
                    2f:ed:49:22:65:d3:36:96:96:f9:b1:68:c9:44:37:
                    ee:30:1c:e2:db:9a:36:53:e9:ae:bf:33:70:3a:e0:
                    21:50:2e:e2:f4:8f:18:8a:6b:40:7c:33:03:74:7b:
                    6f:4e:d2:43:63:57:a5:66:30:19:33:03:62:a3:1b:
                    9f:a9:89:a2:2a:7a:8b:f1:c8:a4:34:1c:61:e3:1d:
                    8b:2f:b2:41:26:51:d5:92:ff:f7:fc:c2:be:60:27:
                    1b:ee:16:e2:ca:59:70:05:31:e7:19:89:a1:0f:76:
                    b7:65:23:57:f7:34:40:eb:c0:cc:7a:a7:78:1f:b5:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E4:7A:03:7F:48:75:36:0B:3E:0F:65:02:F4:43:93:29:A7:74:24
            X509v3 Authority Key Identifier:
                keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a3830303a3a2f34382d3438203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5e0:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:78:7b:91:39:a2:50:5e:7e:63:c6:1c:c4:02:5d:11:e1:ea:
         15:d5:ae:4c:6a:f2:8b:b6:5a:c4:04:86:0f:d7:f5:9a:8a:22:
         76:0e:0a:e7:5f:be:93:25:89:22:49:d1:46:f8:38:0f:12:57:
         32:87:69:93:20:84:bf:3d:34:f6:3e:4a:2a:22:6f:2a:5a:87:
         88:c0:2d:97:d3:ad:e3:1a:b9:ea:33:0e:50:3d:71:56:4b:d0:
         66:67:f8:9b:ba:91:3e:c5:a6:91:8a:8c:48:f7:a8:5b:7b:5b:
         30:f8:77:1f:9c:2f:22:b6:ee:7e:49:aa:ea:d4:4a:2c:3a:0d:
         4a:41:d1:47:6b:9d:13:85:78:67:2c:96:72:b9:ed:f4:b2:65:
         ac:11:06:8c:c7:0a:4e:ec:0a:6d:63:07:bf:e8:b1:d0:70:e7:
         c2:06:04:68:7b:0b:4b:aa:6e:6b:64:9e:e2:eb:e1:59:d2:0b:
         81:15:cc:05:54:86:68:36:eb:11:8b:0d:b7:27:f6:6d:fe:43:
         63:e7:79:53:f4:6f:02:7a:c8:cf:98:fb:0c:3e:89:0c:17:e2:
         80:38:64:de:0f:18:fb:43:fe:dc:61:7f:56:4e:1e:30:cb:72:
         00:d8:46:9a:a7:f4:a5:a3:3d:f7:1d:b9:3d:d4:0c:f0:cd:f2:
         e8:04:2e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:19:25 2025 by rpki-client