Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e203237383834.roa
File:                     323830333a633363303a3a2f33322d3438203d3e203237383834.roa (raw, json)
Hash identifier:          s7lezIGF3xa8lq2V/NuO2iMwzydhVWFeescQkxoP+3o=
Subject key identifier:   57:06:38:39:48:58:3E:54:9B:7D:70:32:08:AA:D2:A7:72:BC:B5:00
Certificate issuer:       /CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Certificate serial:       4F51973CE2C424DEDD27A398DA05B6CD97BF3FD7
Authority key identifier: FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e203237383834.roa
Signing time:             Tue 04 Feb 2025 18:06:57 +0000
ROA not before:           Tue 04 Feb 2025 18:01:57 +0000
ROA not after:            Tue 03 Feb 2026 18:06:57 +0000
asID:                     27884
IP address blocks:        2803:c3c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:51:97:3c:e2:c4:24:de:dd:27:a3:98:da:05:b6:cd:97:bf:3f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
        Validity
            Not Before: Feb  4 18:01:57 2025 GMT
            Not After : Feb  3 18:06:57 2026 GMT
        Subject: CN=5706383948583E549B7D703208AAD2A772BCB500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:0a:6d:65:27:c2:7a:71:68:15:99:23:53:
                    00:0b:a8:9a:5e:8e:fc:7a:1d:d6:5d:3f:f4:96:3d:
                    6d:ec:cb:af:99:35:f2:50:0b:32:c5:b3:71:cd:48:
                    f0:00:88:04:61:3b:56:0a:1a:84:b9:92:6c:fe:2d:
                    ce:8a:9d:91:78:f6:41:73:11:ec:8e:2c:e3:87:24:
                    1f:07:13:5b:b6:60:eb:2b:75:41:4e:27:e2:74:a8:
                    36:ec:e4:cb:95:9a:8a:71:80:6f:ed:bc:61:d4:1e:
                    77:7e:83:b9:a8:32:be:7c:45:0f:a3:f3:30:4a:e4:
                    16:98:d3:2c:58:f1:81:69:fe:f9:5c:c2:26:70:b8:
                    e5:15:f2:3c:fe:c9:e0:b7:79:1d:48:01:25:a9:de:
                    76:5a:dc:cc:00:7d:a1:93:71:dc:ce:40:8a:2d:2f:
                    e4:8d:f6:d2:8f:42:5c:eb:d6:71:d7:0c:6b:3e:87:
                    04:b2:dd:26:b2:96:4f:5b:7f:23:4e:d2:c8:37:ec:
                    02:ef:c3:b5:ba:e2:de:fb:b8:41:40:89:7c:77:ef:
                    6b:35:9c:ae:e9:06:25:31:21:e7:23:bf:42:49:1b:
                    ab:84:81:fd:45:f2:3e:28:eb:bd:fb:7f:e4:b6:df:
                    f2:a0:5b:a3:66:b8:5f:63:2e:a5:69:4c:27:16:58:
                    7a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:06:38:39:48:58:3E:54:9B:7D:70:32:08:AA:D2:A7:72:BC:B5:00
            X509v3 Authority Key Identifier:
                keyid:FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/323830333a633363303a3a2f33322d3438203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:c3:48:7b:25:af:9a:88:d9:ce:df:12:28:a1:2c:96:3c:
         24:99:03:52:15:5b:d1:ba:b6:f6:af:e1:52:f7:c6:44:ef:7f:
         4d:4a:05:ee:08:ea:ba:c8:84:28:68:dc:21:ce:8f:ea:c6:1c:
         b8:31:21:fb:73:82:91:c9:85:6d:49:53:4d:24:77:2c:d4:71:
         5b:1d:c2:81:d2:2b:29:5e:c8:23:26:e4:b3:0b:db:a3:46:ce:
         62:4f:d6:24:45:1b:c4:fb:cf:80:5e:38:73:22:25:1a:e3:4e:
         7c:1c:f8:38:17:40:18:10:bd:ac:3c:4a:11:cd:c4:e6:25:31:
         98:2c:8f:14:cc:eb:f5:0b:25:cc:2e:27:e0:50:cb:5a:08:40:
         8c:22:6f:e4:76:69:91:05:f4:a9:66:43:2c:ee:13:da:62:2e:
         e3:11:3c:64:ba:f4:fe:3c:e9:03:67:5e:5c:e0:b4:1a:e7:a4:
         bc:a3:8b:90:3b:d6:43:ad:74:e9:2e:d4:15:42:50:34:75:59:
         e6:7b:17:c8:bc:08:04:79:f1:ca:2b:c9:cf:db:90:ab:da:00:
         9d:fa:81:9e:16:b3:ea:6e:3c:cb:86:ae:2d:f2:41:f5:87:70:
         e4:3b:cb:82:96:84:7b:2d:89:62:c8:b0:da:93:80:37:90:5d:
         fa:e5:45:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:54 2025 by rpki-client