Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/323830333a326539303a3a2f33322d3438203d3e20323732393134.roa
File:                     323830333a326539303a3a2f33322d3438203d3e20323732393134.roa (raw, json)
Hash identifier:          y7YWyAMyd5GU2dVFTH9rJnKxy0u67v2cCsoaeX0EkTY=
Subject key identifier:   20:10:E8:FC:16:DF:5E:0D:47:67:30:06:70:5B:AD:FC:10:18:66:F3
Certificate issuer:       /CN=1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D
Certificate serial:       70D636FA80E857E6F37753D859D679632A61C83E
Authority key identifier: 1D:07:C2:B7:CB:C7:C5:75:F5:78:D3:D3:BA:24:F0:3E:A5:DC:05:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/323830333a326539303a3a2f33322d3438203d3e20323732393134.roa
Signing time:             Tue 04 Feb 2025 18:05:51 +0000
ROA not before:           Tue 04 Feb 2025 18:00:51 +0000
ROA not after:            Tue 03 Feb 2026 18:05:51 +0000
asID:                     272914
IP address blocks:        2803:2e90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d6:36:fa:80:e8:57:e6:f3:77:53:d8:59:d6:79:63:2a:61:c8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D
        Validity
            Not Before: Feb  4 18:00:51 2025 GMT
            Not After : Feb  3 18:05:51 2026 GMT
        Subject: CN=2010E8FC16DF5E0D47673006705BADFC101866F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:27:22:4f:67:f5:fd:19:01:76:07:91:08:
                    f0:47:09:d5:e4:3e:c7:43:af:da:d0:eb:26:74:8c:
                    98:2a:5f:86:6d:e7:b3:74:05:3e:be:cf:62:1b:d2:
                    ea:d3:83:d4:53:9f:0c:12:4e:2b:ea:e7:53:d8:fa:
                    f3:e5:eb:4b:cf:8d:b0:16:74:fe:b7:92:3b:c3:92:
                    c4:57:ec:05:e3:85:13:70:9d:01:a8:26:6a:c8:3e:
                    29:5a:57:cf:0b:be:23:68:66:a9:d5:02:38:75:73:
                    4f:52:a4:50:ae:c2:b1:b9:8d:5e:a7:7f:93:a1:af:
                    41:48:b4:75:d4:68:c3:17:d3:74:31:05:d5:a0:3b:
                    bd:bf:d5:70:e3:3b:1e:d4:45:90:4c:e7:7d:d0:ad:
                    c5:51:6b:c5:dd:9a:c9:38:44:36:4b:3e:4b:7e:cd:
                    ba:ef:93:ac:df:96:1d:77:10:b1:48:fd:38:2b:1a:
                    64:48:da:48:8d:b0:b5:ee:88:06:77:f2:a8:dd:d2:
                    67:85:a0:4b:1a:a6:bd:73:ed:60:7f:e8:2f:c0:13:
                    ee:8e:f9:01:20:c6:7a:09:e5:f3:dd:d9:03:2e:79:
                    9d:1c:e7:2c:f6:e3:4c:55:e8:b5:8d:b2:e6:6b:eb:
                    9e:8e:18:1b:ff:d5:b8:19:e2:6e:36:26:24:33:1e:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:E8:FC:16:DF:5E:0D:47:67:30:06:70:5B:AD:FC:10:18:66:F3
            X509v3 Authority Key Identifier:
                keyid:1D:07:C2:B7:CB:C7:C5:75:F5:78:D3:D3:BA:24:F0:3E:A5:DC:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D07C2B7CBC7C575F578D3D3BA24F03EA5DC051D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/227886CFF65D2304A297AF8D4F48825F8663A0B0FD7054E01CF26D8D73147AFB/0/323830333a326539303a3a2f33322d3438203d3e20323732393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:58:8c:5f:f3:e6:f6:dc:2b:5d:a5:85:52:7f:42:d7:66:a7:
         4a:8f:07:20:3c:59:ef:e3:7f:08:63:da:9e:47:ab:95:44:da:
         5c:54:91:fd:5c:52:2b:48:57:30:90:05:6f:d9:6a:66:3d:34:
         ec:cb:6e:78:5d:01:df:ca:fb:e7:0a:6f:ec:b2:33:5d:ac:23:
         f8:28:55:55:37:31:df:18:82:00:f8:e4:55:47:93:21:18:72:
         c5:3f:f4:8e:ff:a2:db:51:50:c2:5b:8b:8c:87:c5:8c:8a:bc:
         b4:eb:16:f7:91:79:72:79:3d:07:64:5b:23:85:29:0d:4c:16:
         b2:20:e0:e6:e2:32:a3:4c:5d:b5:4c:87:b1:8b:70:fb:ad:b3:
         15:82:c1:d0:c6:1e:3b:15:02:94:00:58:c8:28:7e:11:0c:0b:
         da:4f:a2:f5:a4:75:2b:51:b7:bd:e0:75:b4:ad:0e:fd:e0:ec:
         28:18:eb:a7:d1:ae:51:18:82:37:78:77:8b:98:7a:ce:ba:1f:
         70:bd:0f:3e:92:69:32:c5:5a:2f:ff:e9:58:d6:b9:bb:27:d4:
         8e:7e:7b:6a:9d:d3:1f:69:38:f2:f4:ae:da:a8:c6:40:a6:5e:
         fd:87:26:fe:98:3c:ee:d5:11:72:91:0c:90:8e:95:b6:73:6e:
         bf:f8:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:03:30 2025 by rpki-client