Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/323830333a613930303a3a2f33322d3438203d3e203532343230.roa
File:                     323830333a613930303a3a2f33322d3438203d3e203532343230.roa (raw, json)
Hash identifier:          vab+4jwY9wFG06WD3dikkPTsjgS18ccjp3RFqLojOVA=
Subject key identifier:   70:D3:E4:D5:87:4B:8F:4C:1F:1B:CC:A2:68:97:67:08:E8:15:E1:C2
Certificate issuer:       /CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
Certificate serial:       0A8740FE4D05B4F762FF57A1800C07A333B6E0B8
Authority key identifier: 5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/323830333a613930303a3a2f33322d3438203d3e203532343230.roa
Signing time:             Tue 04 Feb 2025 18:40:19 +0000
ROA not before:           Tue 04 Feb 2025 18:35:19 +0000
ROA not after:            Tue 03 Feb 2026 18:40:19 +0000
asID:                     52420
IP address blocks:        2803:a900::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:87:40:fe:4d:05:b4:f7:62:ff:57:a1:80:0c:07:a3:33:b6:e0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EEF74EC549BBA3A98586948A652EF1E67729F08
        Validity
            Not Before: Feb  4 18:35:19 2025 GMT
            Not After : Feb  3 18:40:19 2026 GMT
        Subject: CN=70D3E4D5874B8F4C1F1BCCA268976708E815E1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:03:f5:5b:e0:ff:eb:dc:a7:b3:82:40:3e:
                    95:a3:98:14:11:09:e3:f4:e7:c0:91:78:38:fb:a7:
                    d7:70:c7:de:3c:b4:9e:72:fd:bb:e1:d0:b7:da:99:
                    10:cc:ee:d8:48:4a:99:22:dc:25:22:29:5f:68:2e:
                    c2:ab:fc:31:a9:50:af:b5:42:d5:48:ad:f8:15:db:
                    24:db:ff:d3:6c:72:45:02:4c:d0:4f:9d:dd:4d:6f:
                    ee:30:d0:0a:f8:c9:38:2c:37:86:c6:2c:11:88:aa:
                    a5:50:88:5e:df:f3:db:06:f9:29:01:15:0e:91:63:
                    a9:1c:72:87:73:69:57:6a:d2:34:3a:e8:b2:61:d7:
                    92:82:41:d8:7f:57:9b:4d:a5:dc:a7:81:18:76:68:
                    7a:61:51:9f:df:ef:4e:c6:a9:b8:e0:4f:4a:56:40:
                    fd:48:00:e5:e5:7e:b9:e7:4a:ee:9d:ea:92:82:c5:
                    f7:c2:e9:a3:57:75:0a:47:cd:c3:1e:d2:d1:96:b9:
                    18:9c:08:64:8e:06:4b:95:95:65:1e:c8:6e:0e:71:
                    ca:04:ff:a7:c3:c6:ba:f0:d8:99:cb:0c:15:53:95:
                    9a:15:19:5f:d4:f1:1d:64:43:58:61:fb:1b:13:53:
                    25:aa:c5:d6:98:4c:ab:da:d9:e5:38:71:c1:ee:d3:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D3:E4:D5:87:4B:8F:4C:1F:1B:CC:A2:68:97:67:08:E8:15:E1:C2
            X509v3 Authority Key Identifier:
                keyid:5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/323830333a613930303a3a2f33322d3438203d3e203532343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a900::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:76:37:94:96:33:c1:57:8c:13:0b:2e:73:d2:02:12:d6:7e:
         9a:e3:ee:90:2a:1b:64:b5:91:73:e1:8c:2f:e9:74:b6:d1:68:
         81:3f:53:20:e2:c0:1b:5d:af:fc:5f:c9:55:c3:44:30:56:36:
         5c:2a:68:19:73:87:18:27:b7:44:70:fc:5f:1f:f3:6c:fd:fd:
         f9:ef:f4:6c:73:97:4a:eb:c7:6d:1d:b9:65:8b:5e:1f:39:71:
         ce:39:f7:4b:b5:a4:b6:30:62:96:9c:bc:8a:64:99:27:4a:42:
         8f:15:13:4c:7b:1c:77:e2:56:a1:38:41:5d:e2:d9:3e:22:f5:
         3f:f1:db:e8:83:29:e5:46:00:92:da:1d:d7:31:2b:c1:2f:6d:
         65:d6:5d:11:51:e2:59:0f:61:89:6c:a1:f0:fe:b2:4a:ee:73:
         c9:54:88:eb:7f:49:54:a5:75:91:13:2d:6c:62:ad:c5:ac:17:
         07:dd:9e:b4:63:a9:df:58:2d:fa:dd:04:7b:d9:2f:d3:6f:70:
         16:f5:85:fb:5b:ab:57:8c:42:eb:a6:5a:b4:83:5b:1e:24:7d:
         d1:39:b6:18:95:3e:fc:1f:c2:62:cd:2a:9e:77:44:6e:db:0c:
         5e:0d:94:1f:e8:cc:57:df:a4:32:49:84:52:fa:fc:2f:9a:65:
         f6:24:fe:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:39 2025 by rpki-client