Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/323830333a376139303a3a2f33322d3438203d3e20323732383836.roa
File:                     323830333a376139303a3a2f33322d3438203d3e20323732383836.roa (raw, json)
Hash identifier:          qRLgZJ5uQazjFZnj/+adptuv29PrDywtPKJsXR5Z8+M=
Subject key identifier:   4B:3D:DA:23:C1:A5:73:13:31:75:D8:56:57:C3:FB:56:CA:D0:13:E9
Certificate issuer:       /CN=EE7D6E5021DEEB7C36518742F6D237F750B6E9A6
Certificate serial:       71976F7C6FA0485930E09D421CFBA13579DD5FC8
Authority key identifier: EE:7D:6E:50:21:DE:EB:7C:36:51:87:42:F6:D2:37:F7:50:B6:E9:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/323830333a376139303a3a2f33322d3438203d3e20323732383836.roa
Signing time:             Tue 04 Feb 2025 18:12:51 +0000
ROA not before:           Tue 04 Feb 2025 18:07:51 +0000
ROA not after:            Tue 03 Feb 2026 18:12:51 +0000
asID:                     272886
IP address blocks:        2803:7a90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:97:6f:7c:6f:a0:48:59:30:e0:9d:42:1c:fb:a1:35:79:dd:5f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE7D6E5021DEEB7C36518742F6D237F750B6E9A6
        Validity
            Not Before: Feb  4 18:07:51 2025 GMT
            Not After : Feb  3 18:12:51 2026 GMT
        Subject: CN=4B3DDA23C1A573133175D85657C3FB56CAD013E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:67:33:7a:9a:8a:df:4b:3c:1f:53:e4:68:
                    90:73:37:93:8f:94:cb:4c:7f:19:56:e5:4c:57:d0:
                    3b:96:96:f9:f7:b6:44:a1:62:87:cc:05:f8:63:9d:
                    f5:b5:2e:13:a8:41:db:ea:a2:26:b6:6d:24:ac:fa:
                    a2:c9:0c:40:ef:a4:0b:13:3d:22:2d:ab:dc:ad:01:
                    7c:ac:ae:73:90:9d:54:91:76:18:91:2b:0d:e3:dc:
                    6f:58:b0:57:26:8f:2f:e9:37:5a:00:4f:7f:e3:c2:
                    0d:e6:01:ad:f5:d6:09:48:ed:f5:a9:9a:40:d5:37:
                    d8:e9:15:21:0c:db:95:23:08:a0:eb:eb:77:3c:5c:
                    c3:2d:21:74:55:e4:31:2c:b2:5f:5a:c4:25:5a:82:
                    6b:a0:37:e6:f2:6d:fd:67:81:97:77:c9:77:ed:0a:
                    a8:14:77:43:30:ce:ef:62:49:4b:29:20:4f:aa:ad:
                    28:6c:80:fe:80:49:85:d5:70:38:74:36:d0:41:b2:
                    3c:2d:72:f5:4b:42:4d:34:17:a9:3e:9f:3a:f5:bf:
                    89:3a:a4:f0:cc:39:ba:43:0b:83:9a:da:d7:5d:a2:
                    a4:e3:e1:d5:e8:4c:e1:42:23:ab:03:71:1b:7e:55:
                    b5:6d:16:85:a5:eb:11:c3:c0:b2:df:3b:ce:e5:78:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3D:DA:23:C1:A5:73:13:31:75:D8:56:57:C3:FB:56:CA:D0:13:E9
            X509v3 Authority Key Identifier:
                keyid:EE:7D:6E:50:21:DE:EB:7C:36:51:87:42:F6:D2:37:F7:50:B6:E9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE7D6E5021DEEB7C36518742F6D237F750B6E9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/366DC252A9E24FE7578D2F2918639475A59FA6BE88ECE9011AFA080E5D990EF4/0/323830333a376139303a3a2f33322d3438203d3e20323732383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:7f:ca:3a:91:c0:b2:ba:bd:22:cc:60:95:be:46:2d:b7:c2:
         d9:e0:21:74:44:79:85:c9:14:22:1b:c3:d0:72:dd:6c:c4:9a:
         78:ce:82:dd:a5:35:1a:37:44:b2:86:26:61:b9:66:d6:7d:bc:
         0b:8f:12:9f:4f:52:52:40:5c:08:71:95:9c:5b:54:b0:da:42:
         39:23:dc:2d:33:c9:79:3a:cf:b1:18:68:77:d8:db:e8:51:f0:
         00:f6:da:9b:7f:3a:58:3b:e2:19:df:99:69:e8:43:a6:79:d1:
         87:41:d9:24:75:e7:2a:46:55:ee:6c:ba:45:6a:01:78:22:ff:
         c3:92:fc:0e:93:4d:66:19:7f:f2:80:e9:ba:f9:b9:30:66:fb:
         d1:0c:d0:24:05:5e:28:80:bc:db:7c:5e:d2:00:2f:3b:71:a3:
         2e:47:bc:bd:e0:fe:f4:1a:81:26:af:2a:d3:03:5a:18:c1:2f:
         59:ca:40:8e:35:02:cc:31:4e:ef:e3:fd:fd:5f:dd:bf:6e:4b:
         5a:73:91:62:32:04:e2:19:e9:13:6e:ef:74:37:86:bc:92:92:
         bd:01:03:08:de:05:e6:42:3a:af:7c:b1:e3:67:88:48:61:2f:
         67:1a:a3:85:8e:f1:ae:01:6d:16:ee:15:96:08:70:16:db:97:
         da:14:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:46 2025 by rpki-client