Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a643030303a3a2f33362d3336203d3e203631353038.roa
File:                     323830333a663234303a643030303a3a2f33362d3336203d3e203631353038.roa (raw, json)
Hash identifier:          pDoy2YBVz3eqswksW8JUAPmY8EukrAaCLQfLq4eq/qU=
Subject key identifier:   4B:EA:54:1D:B3:8B:BF:F2:46:54:66:C9:27:A7:D0:DF:66:30:D3:96
Certificate issuer:       /CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
Certificate serial:       25DE17BE077E6724E6AE5695B5691B8188F7D2F4
Authority key identifier: 81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a643030303a3a2f33362d3336203d3e203631353038.roa
Signing time:             Tue 04 Feb 2025 18:28:49 +0000
ROA not before:           Tue 04 Feb 2025 18:23:49 +0000
ROA not after:            Tue 03 Feb 2026 18:28:49 +0000
asID:                     61508
IP address blocks:        2803:f240:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:de:17:be:07:7e:67:24:e6:ae:56:95:b5:69:1b:81:88:f7:d2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD
        Validity
            Not Before: Feb  4 18:23:49 2025 GMT
            Not After : Feb  3 18:28:49 2026 GMT
        Subject: CN=4BEA541DB38BBFF2465466C927A7D0DF6630D396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:eb:fa:b9:34:ed:fc:9a:d0:f5:41:2d:34:
                    4c:c3:b4:6c:61:be:23:36:e9:32:14:a2:3a:96:68:
                    10:a2:ee:83:69:19:ae:db:bf:6f:65:c6:df:15:7b:
                    fa:d9:80:79:df:78:10:af:8e:36:8f:21:b5:8d:4b:
                    10:33:87:f5:65:94:d1:96:de:08:27:d8:40:aa:02:
                    4b:56:25:23:2e:39:12:d1:ff:26:dc:0e:4c:bb:14:
                    2c:fe:24:63:b7:99:a8:c7:a7:35:72:9b:d9:cb:e7:
                    9c:8e:79:bc:66:23:bf:b3:1c:d9:b8:dd:12:15:2f:
                    2f:37:54:2b:00:89:0d:28:73:ec:e4:3a:2c:c5:b5:
                    9d:dd:18:14:ee:a0:02:9f:d5:77:a2:be:01:0b:dd:
                    97:9e:17:3b:58:b0:9c:19:9d:1d:47:15:c0:39:b1:
                    bd:f9:03:7e:4d:71:79:ad:b2:dc:cb:a0:7b:e0:86:
                    9c:98:3e:12:9e:6d:8e:2a:76:b1:de:3f:97:99:01:
                    a4:a4:14:d5:2c:36:af:d1:9a:ba:39:a9:c4:51:f9:
                    f4:b2:64:78:40:ec:fc:09:02:83:6b:bd:35:4f:90:
                    7d:db:22:c3:fb:0e:0a:4d:e5:93:62:4a:25:a1:71:
                    1c:86:2a:a0:d2:04:42:ab:ef:05:20:74:c0:b5:55:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EA:54:1D:B3:8B:BF:F2:46:54:66:C9:27:A7:D0:DF:66:30:D3:96
            X509v3 Authority Key Identifier:
                keyid:81:8F:5B:44:DD:81:3B:A4:BC:8A:04:C7:D2:55:04:2F:1A:E4:B2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/818F5B44DD813BA4BC8A04C7D255042F1AE4B2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/272467CD58545DB3C91B9FD59703A48BA0F1BACF3D5C56AA7C90CBE691CC6F44/0/323830333a663234303a643030303a3a2f33362d3336203d3e203631353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:aa:4a:ba:ad:b4:c3:af:a0:19:0d:e5:ce:6a:1b:74:73:
         8c:83:25:71:2e:e7:1c:cf:89:01:e8:6a:6c:2f:43:2e:5b:b6:
         21:3a:73:e3:f4:5f:58:df:fe:a9:35:a3:c8:62:61:69:ce:bb:
         3c:5b:cf:51:77:65:a5:25:77:68:0c:f9:89:d1:90:27:09:0f:
         7d:bd:fa:32:08:bf:00:71:aa:39:8e:4f:b3:7f:b8:59:73:c5:
         5d:a0:a8:72:31:62:d4:7b:ea:bf:50:0c:3d:cd:df:05:3d:44:
         de:fd:bc:67:46:d5:9b:64:f3:04:c2:34:dc:c1:79:b3:2a:80:
         ff:16:c7:ed:8f:ab:cd:cb:9d:59:6b:15:4a:19:a1:10:8f:b8:
         d8:e7:9b:67:5f:92:be:26:4c:26:b0:00:2b:16:c1:e2:ea:7c:
         d4:3c:92:46:74:f0:0e:ee:82:35:88:ec:38:29:7b:1a:21:08:
         73:bd:ed:0e:5d:43:91:11:8b:28:03:1b:ff:9e:5c:3f:a5:9a:
         5e:1e:5f:6b:40:2b:18:d3:20:84:21:d2:a3:21:87:30:2d:6f:
         b6:5f:cc:02:b6:91:05:76:f1:10:22:fc:3c:f1:08:3c:26:82:
         81:26:2a:b6:8b:09:b0:0e:f1:f3:d1:f7:82:99:62:6f:f5:fb:
         7a:d9:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:05 2025 by rpki-client