Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a383030303a3a2f33352d3335203d3e203532323738.roa
File:                     323830333a653939303a383030303a3a2f33352d3335203d3e203532323738.roa (raw, json)
Hash identifier:          FvYV8/pOEOALQgflE7ulW7r8Zv4dFyKKPgjTjWjjSgw=
Subject key identifier:   23:37:1B:90:6E:5E:72:45:87:83:96:B1:FB:E7:28:D3:B7:BB:BF:B9
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       49CE5DD4130CAABAA84402A3F75F440EE6FA590F
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a383030303a3a2f33352d3335203d3e203532323738.roa
Signing time:             Fri 21 Feb 2025 22:40:01 +0000
ROA not before:           Fri 21 Feb 2025 22:35:01 +0000
ROA not after:            Fri 20 Feb 2026 22:40:01 +0000
asID:                     52278
IP address blocks:        2803:e990:8000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ce:5d:d4:13:0c:aa:ba:a8:44:02:a3:f7:5f:44:0e:e6:fa:59:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb 21 22:35:01 2025 GMT
            Not After : Feb 20 22:40:01 2026 GMT
        Subject: CN=23371B906E5E7245878396B1FBE728D3B7BBBFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:4b:04:2d:5c:cc:f0:9b:29:6e:33:a7:77:
                    6f:78:52:ba:fb:e7:22:4e:8d:46:1b:7c:62:b7:6e:
                    77:61:5f:5a:18:0f:b1:cf:d4:64:1f:ab:53:46:37:
                    5d:3d:06:3f:62:94:21:61:a8:6e:d2:dc:55:00:03:
                    cc:bd:f6:91:18:43:9c:a4:0d:d8:e2:a3:ff:d1:79:
                    1b:ec:86:6f:4f:16:b3:9e:19:7b:32:1b:de:92:cd:
                    22:a1:13:06:d9:18:7c:56:77:90:c5:32:a1:03:40:
                    1e:f1:f1:0d:b2:0f:42:a4:82:59:b9:77:4b:a9:30:
                    a7:66:0c:18:f3:54:9e:27:39:54:e0:53:8b:87:84:
                    2a:19:f6:85:a7:a6:d8:78:e2:0a:d2:d1:d6:d0:7d:
                    2b:20:c1:2c:52:91:01:d1:af:7e:aa:20:e7:0e:35:
                    17:12:18:53:4e:9b:11:17:0a:58:f0:b7:1a:d0:54:
                    20:82:44:bf:55:e0:66:0b:83:83:34:0d:05:d1:8b:
                    20:89:30:a2:48:d9:fe:b3:27:e0:6b:ed:36:02:dd:
                    d4:56:ea:10:68:d4:3d:3e:49:cb:33:d9:f7:74:ef:
                    ae:13:15:5d:ed:d4:77:3e:32:76:e4:c3:46:65:95:
                    70:b6:ab:e4:b9:40:5f:9d:ca:72:63:ca:8b:c5:77:
                    72:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:37:1B:90:6E:5E:72:45:87:83:96:B1:FB:E7:28:D3:B7:BB:BF:B9
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a383030303a3a2f33352d3335203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e990:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a1:5e:f8:14:4e:65:57:22:4b:5b:09:2e:aa:47:51:5c:6d:14:
         22:b0:4b:27:91:8b:5d:57:26:fd:25:a6:7c:3a:00:c2:f6:c5:
         33:70:8d:aa:92:9c:ab:b2:55:a1:9d:5f:1f:e9:e2:d1:a4:ad:
         13:d2:c9:45:70:ce:67:f0:cb:4c:6b:97:36:7c:46:7a:78:39:
         fd:f3:93:23:47:4e:19:a8:f9:6e:3c:5e:e9:df:6c:d0:03:93:
         e3:7b:1b:1c:2e:d3:5b:2e:1f:3b:c9:09:37:0a:8f:2a:79:90:
         52:a6:91:28:a8:ac:d2:ae:c3:ae:87:8d:b2:0f:83:cf:85:8e:
         e1:25:cb:8f:51:1c:f3:9c:7c:58:d0:5a:d8:5f:c7:8a:76:94:
         40:8c:ef:a8:78:c5:38:24:b5:74:7f:91:02:47:f0:62:68:c3:
         b8:d6:4d:2e:0e:52:22:df:47:b0:ad:2c:56:d5:51:ec:9f:49:
         79:27:69:e7:04:9b:fb:a0:f3:d3:30:a4:4e:93:56:2c:67:a5:
         27:5c:f4:de:82:86:aa:93:2e:f3:84:69:fc:e2:55:65:c8:0d:
         d7:e5:14:f1:44:79:ab:3b:86:40:6d:d3:46:ee:ee:96:a5:31:
         45:2f:37:04:5f:37:61:0f:82:fe:36:c5:07:d6:00:e4:67:98:
         ba:e5:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:08 2025 by rpki-client