Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/323830333a383831303a3a2f33322d3332203d3e20323731383134.roa
File:                     323830333a383831303a3a2f33322d3332203d3e20323731383134.roa (raw, json)
Hash identifier:          yGeas3/c4vnAQ6gUOYm8qLlXX3BdSYJpWkcLCF4L3ac=
Subject key identifier:   C6:8D:EB:AF:3D:59:9A:E4:9D:31:2B:28:3C:3C:CD:EB:EE:03:5C:28
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       59CC7EFB93C839DC9499FE389A1C35E2FBC10F94
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/323830333a383831303a3a2f33322d3332203d3e20323731383134.roa
Signing time:             Tue 04 Feb 2025 18:01:15 +0000
ROA not before:           Tue 04 Feb 2025 17:56:15 +0000
ROA not after:            Tue 03 Feb 2026 18:01:15 +0000
asID:                     271814
IP address blocks:        2803:8810::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:cc:7e:fb:93:c8:39:dc:94:99:fe:38:9a:1c:35:e2:fb:c1:0f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Feb  4 17:56:15 2025 GMT
            Not After : Feb  3 18:01:15 2026 GMT
        Subject: CN=C68DEBAF3D599AE49D312B283C3CCDEBEE035C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:28:e0:9a:fa:52:d5:ec:a1:c8:3a:cf:8e:2c:
                    ab:10:d5:25:ab:21:94:3f:93:c5:1c:be:9e:d6:f4:
                    c2:42:b5:69:cf:9a:e2:bc:4d:47:1f:d6:d4:c5:af:
                    54:47:50:ae:53:26:19:a3:37:c7:f3:64:f8:64:60:
                    44:c1:7d:3f:09:27:70:f0:50:74:35:19:0b:73:ae:
                    2f:12:e6:5f:2c:85:48:ae:27:dc:1a:e9:b4:13:9e:
                    74:0b:27:7e:0d:c6:81:1c:e5:d3:f0:c9:f4:09:01:
                    14:8e:78:71:ca:ee:8e:34:85:21:ac:f7:df:8d:2a:
                    b1:9b:de:1c:ff:c2:d8:eb:ea:f1:1d:67:ad:91:2a:
                    ff:fe:24:a2:bd:43:88:b1:ab:7a:f7:c4:ec:08:96:
                    d2:25:a3:37:f9:71:78:60:4b:d1:96:93:ea:75:28:
                    39:a3:45:82:a5:b3:95:47:97:da:7f:4a:12:0c:73:
                    a8:22:7c:c4:23:13:2c:f8:d2:5a:ef:00:63:2b:f6:
                    1f:bd:f6:22:12:81:90:ba:73:88:c1:68:1c:02:fc:
                    b1:a4:6e:44:cc:d6:36:6f:37:a8:50:c4:a7:0c:b9:
                    b1:95:fb:85:7b:23:5e:eb:50:33:ab:83:75:3b:85:
                    63:b3:ef:1d:c7:ab:62:a4:63:b2:e8:bc:2b:0a:69:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8D:EB:AF:3D:59:9A:E4:9D:31:2B:28:3C:3C:CD:EB:EE:03:5C:28
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/323830333a383831303a3a2f33322d3332203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8810::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:df:67:f7:73:e4:70:ab:b0:75:c8:84:3b:21:32:41:26:b9:
         d6:28:c8:a8:89:f8:17:67:6c:81:7e:56:f0:7b:d1:19:ad:54:
         c0:e8:0f:a1:91:d5:42:34:7a:e1:88:e0:c9:30:2b:1c:d4:99:
         31:2b:08:9d:d0:23:24:cc:35:19:6e:32:57:cd:7a:1c:5d:16:
         34:89:ca:63:b0:21:8b:0e:2d:2f:dc:05:27:cc:90:de:70:d1:
         bb:46:c1:59:c3:25:3a:37:3c:3c:25:16:7d:52:71:1f:ad:09:
         9c:08:c9:f7:96:e6:07:60:d9:fa:26:5d:a5:09:58:45:ed:b7:
         ca:03:cc:17:e6:bd:a0:de:1f:ba:a8:dd:f9:b5:f2:f0:26:b0:
         48:3c:43:f4:12:10:39:88:04:80:ce:0c:58:79:99:f6:90:ea:
         ec:aa:cc:eb:6c:c9:d9:7b:39:5b:44:65:31:ae:18:7c:b5:b9:
         b9:c9:26:93:e6:a9:aa:10:ea:f0:a0:b2:d4:8c:a9:b7:41:a1:
         e0:61:af:c4:d3:82:10:ad:11:00:28:b0:1a:50:46:01:53:15:
         a8:f5:42:14:49:6b:89:70:99:31:5a:4a:26:b7:83:f6:4f:b6:
         b2:cf:7f:b6:90:b9:32:5b:b9:1c:0c:88:d0:fb:39:59:88:62:
         ee:f2:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:02 2025 by rpki-client