Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/323830333a616438303a3a2f33322d3438203d3e203432343733.roa
File:                     323830333a616438303a3a2f33322d3438203d3e203432343733.roa (raw, json)
Hash identifier:          ouZ/Ce9oLhzqrnfqmh4uqUud/3d9HKmSQhwNHIA4Ak4=
Subject key identifier:   1B:07:19:59:39:0D:00:B8:47:EB:18:39:D7:1B:AD:A6:4B:82:7B:F2
Certificate issuer:       /CN=CC7F59E10868BFB993AAD4E7AC6585D3748F2855
Certificate serial:       2A03FBFF27CB23B0CF63618CBFC511C7C24ACF00
Authority key identifier: CC:7F:59:E1:08:68:BF:B9:93:AA:D4:E7:AC:65:85:D3:74:8F:28:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/323830333a616438303a3a2f33322d3438203d3e203432343733.roa
Signing time:             Tue 04 Feb 2025 18:20:24 +0000
ROA not before:           Tue 04 Feb 2025 18:15:24 +0000
ROA not after:            Tue 03 Feb 2026 18:20:24 +0000
asID:                     42473
IP address blocks:        2803:ad80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:03:fb:ff:27:cb:23:b0:cf:63:61:8c:bf:c5:11:c7:c2:4a:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC7F59E10868BFB993AAD4E7AC6585D3748F2855
        Validity
            Not Before: Feb  4 18:15:24 2025 GMT
            Not After : Feb  3 18:20:24 2026 GMT
        Subject: CN=1B071959390D00B847EB1839D71BADA64B827BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:99:19:ca:01:ea:5c:91:3d:5d:a8:86:fa:
                    83:9e:cc:21:c2:b2:cb:6c:fb:32:d3:ab:fb:33:b9:
                    a1:0d:0e:69:9b:42:5b:40:89:28:2f:82:3c:bd:8c:
                    79:a5:8d:73:b4:63:21:24:ec:c3:71:68:ef:93:67:
                    c8:68:e3:9f:d2:4e:3b:f9:02:6a:d2:08:d7:6d:82:
                    78:3e:2b:f4:26:50:97:81:55:15:46:88:e4:78:02:
                    c2:b1:f3:2b:7e:1a:be:cd:a1:8d:56:5f:fc:2d:58:
                    75:3a:1f:bf:f1:b6:70:53:c0:95:74:5a:c2:8e:e3:
                    9f:cc:03:61:82:34:d4:4c:9e:6e:89:02:09:61:47:
                    4d:02:68:52:46:49:18:99:0c:a3:8d:bb:13:8a:1e:
                    7d:15:67:62:ec:99:b6:6e:68:ea:36:92:0c:b0:25:
                    74:2a:90:f6:4d:b5:1f:b5:4f:da:88:66:cb:6f:73:
                    1c:2d:a2:91:db:6f:75:70:5b:9d:1f:ff:f4:b8:1b:
                    6e:98:9f:db:be:7b:1d:ee:13:f5:1f:32:39:12:72:
                    8f:68:da:35:bf:06:29:64:71:d1:d4:c9:13:7f:26:
                    ea:4d:63:07:98:d2:65:93:d0:80:1b:1d:59:a3:04:
                    3e:cf:b4:fb:2c:bd:8e:ea:f5:75:d7:68:c5:f5:44:
                    08:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:07:19:59:39:0D:00:B8:47:EB:18:39:D7:1B:AD:A6:4B:82:7B:F2
            X509v3 Authority Key Identifier:
                keyid:CC:7F:59:E1:08:68:BF:B9:93:AA:D4:E7:AC:65:85:D3:74:8F:28:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC7F59E10868BFB993AAD4E7AC6585D3748F2855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BE36B85F82AA9405E87639E2CB49C6EB0E719C6CC0619563E5C408D87253F54/0/323830333a616438303a3a2f33322d3438203d3e203432343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad80::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:60:26:26:5b:5f:89:15:ec:7d:50:64:49:46:83:79:b7:5d:
         bc:08:f3:f8:22:27:a7:c6:cb:87:a7:98:d6:5b:74:ac:b1:2d:
         1b:10:9e:f0:48:35:c9:2d:d0:9e:ff:eb:aa:74:6d:da:e6:85:
         07:78:d7:1d:d3:f2:27:ab:06:9d:bf:81:ad:12:cb:0b:97:c7:
         40:19:fd:5b:e4:59:52:0e:56:e0:b5:8e:e0:a4:4e:04:b3:4c:
         13:68:0a:9f:90:0b:ac:67:29:62:fb:16:9b:df:d2:2c:7f:e6:
         bc:d2:a6:ca:48:9f:f8:4d:c1:c5:06:67:22:b5:d0:ef:2e:8f:
         44:cf:8f:ba:4a:d5:f7:3e:49:1b:01:4d:01:56:68:de:25:10:
         9c:aa:0d:7e:45:5b:3f:8a:e5:90:1b:98:a9:cf:79:11:62:f8:
         9e:d3:93:cb:cc:16:37:e2:ff:5c:e9:5f:55:e2:29:d5:e4:66:
         1a:66:a7:ee:f6:c5:5e:58:7a:54:87:e8:eb:6b:7d:ff:4c:10:
         4e:13:f8:f0:91:56:44:e9:1d:7a:24:c2:2a:e5:05:0f:ce:66:
         dc:d6:62:d3:e1:7b:8a:ec:fe:57:1d:e8:c0:82:fc:98:fa:39:
         11:0c:ca:29:12:aa:e2:68:92:51:15:76:82:05:8c:ec:58:fd:
         cc:47:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:23 2025 by rpki-client