Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/323830333a386434333a3a2f33322d3332203d3e203532323632.roa
File:                     323830333a386434333a3a2f33322d3332203d3e203532323632.roa (raw, json)
Hash identifier:          Y21PPZDzSFBf6WZD+ESvEkSynl55+nC3hEtoUtMLXEM=
Subject key identifier:   48:64:63:90:F0:78:B9:86:09:C6:7F:B1:6E:2E:3B:36:E6:4C:44:9C
Certificate issuer:       /CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
Certificate serial:       792AA21FE5696F412438B176C8C232EBD248B438
Authority key identifier: E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/323830333a386434333a3a2f33322d3332203d3e203532323632.roa
Signing time:             Tue 04 Feb 2025 20:04:55 +0000
ROA not before:           Tue 04 Feb 2025 19:59:55 +0000
ROA not after:            Tue 03 Feb 2026 20:04:55 +0000
asID:                     52262
IP address blocks:        2803:8d43::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2a:a2:1f:e5:69:6f:41:24:38:b1:76:c8:c2:32:eb:d2:48:b4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66
        Validity
            Not Before: Feb  4 19:59:55 2025 GMT
            Not After : Feb  3 20:04:55 2026 GMT
        Subject: CN=48646390F078B98609C67FB16E2E3B36E64C449C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:59:4b:2d:03:9f:15:d8:98:b4:8b:6d:14:c2:
                    72:39:cb:48:c2:e7:96:d6:41:2b:40:8e:23:63:c0:
                    df:d0:92:ef:a9:0e:04:4e:23:c2:14:da:1d:f8:e1:
                    c7:5a:36:d2:c7:aa:a3:d0:38:95:b6:3b:05:a0:0d:
                    0e:c6:92:ed:e2:c9:c9:80:4f:2f:f7:79:d0:8d:3a:
                    37:a9:98:94:6b:18:06:b3:f5:a0:09:91:ed:6a:71:
                    c8:7a:53:a5:6c:3e:b7:ad:e6:c6:7e:b8:2f:fc:06:
                    7e:72:66:c1:95:fa:50:ca:45:03:95:f6:a2:9f:8f:
                    4a:71:f0:a0:fd:8d:b2:e5:2c:30:3e:61:6d:7a:46:
                    86:47:0b:24:99:90:a3:2f:97:2f:33:7b:c0:97:90:
                    4f:2c:da:3a:ab:75:31:2f:4f:36:18:d5:5e:58:74:
                    70:d1:a1:01:e2:d2:d5:86:d6:b5:46:23:ae:3a:05:
                    1b:42:3b:1a:91:7b:81:19:73:6c:f3:10:4a:56:9e:
                    a8:0d:f3:c6:9c:8d:d9:f1:3a:e8:cf:dd:bf:4b:f8:
                    17:60:3b:24:76:b0:49:4c:8b:e4:da:ed:5a:7f:92:
                    e8:ba:3b:ed:1b:8d:50:6e:e8:b5:0a:d2:9b:e6:cb:
                    c2:b5:2c:08:ac:05:5b:24:3b:ec:e4:34:8e:4c:fd:
                    ab:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:64:63:90:F0:78:B9:86:09:C6:7F:B1:6E:2E:3B:36:E6:4C:44:9C
            X509v3 Authority Key Identifier:
                keyid:E1:2E:5A:81:FF:61:5D:36:EE:5D:FA:42:78:2C:CB:7E:1F:D5:BB:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E12E5A81FF615D36EE5DFA42782CCB7E1FD5BB66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A0F06438A6D2CB7E76DCCAAB955CAA75D96D39D1C3EF40D5760BD7069AF638F/0/323830333a386434333a3a2f33322d3332203d3e203532323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d43::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:c1:7c:77:61:88:0f:ef:26:40:c3:8c:44:eb:6e:5b:29:2f:
         2c:f6:2e:2d:c6:a9:23:48:cb:f1:40:9d:d2:07:ea:12:80:c6:
         fe:7c:a9:00:91:d1:da:58:fe:fe:eb:cb:5f:5d:3f:a5:a5:4b:
         05:a5:41:c8:db:4b:88:16:bc:42:81:b6:f5:60:7d:33:64:6a:
         e3:42:64:61:18:c2:32:ee:d8:d0:96:5c:75:75:c8:9d:c0:2e:
         88:61:72:cb:ef:ec:e3:7e:34:46:5b:17:82:04:34:21:8a:ca:
         6c:e4:67:bb:6b:b6:47:e8:5b:34:18:ba:d2:84:9a:c9:6c:2d:
         63:f8:00:ee:47:8d:0d:a3:57:c7:8b:2e:38:f5:72:0c:6b:52:
         4f:f7:c1:39:2f:85:d4:b7:de:4e:47:db:7f:bf:48:0c:1b:4c:
         88:ea:ca:7d:47:74:35:65:6f:51:ee:c9:76:41:26:df:01:80:
         25:94:67:14:a1:aa:73:b0:40:de:aa:d1:72:a6:d9:6e:0c:f0:
         98:a6:c7:bb:3c:99:e3:05:5d:47:d1:a2:c0:03:92:2c:48:28:
         44:3e:23:a8:4f:99:fc:e0:d7:0d:8c:28:ac:5e:b2:6b:3e:cc:
         b1:24:6f:23:d5:75:36:da:27:3e:2c:78:eb:0e:dd:e7:2d:fc:
         bf:d6:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 20:06:48 2025 by rpki-client