Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a3a2f33322d3438203d3e20323731393432.roa
File:                     323830333a323631303a3a2f33322d3438203d3e20323731393432.roa (raw, json)
Hash identifier:          yDwSmm1IA/vLD7Wz1xzqH4i2ofuhK3KAikpsrE6iNyM=
Subject key identifier:   B8:0E:E8:26:4F:A6:DC:33:72:8D:88:2F:3A:29:3C:CB:39:9E:C6:44
Certificate issuer:       /CN=B6403C53F9B05EDE5B902522724143F306D488E7
Certificate serial:       22AAAFEC83072A4A1009101EA7A44F917FAE8740
Authority key identifier: B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a3a2f33322d3438203d3e20323731393432.roa
Signing time:             Tue 04 Feb 2025 18:28:21 +0000
ROA not before:           Tue 04 Feb 2025 18:23:21 +0000
ROA not after:            Tue 03 Feb 2026 18:28:21 +0000
asID:                     271942
IP address blocks:        2803:2610::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:aa:af:ec:83:07:2a:4a:10:09:10:1e:a7:a4:4f:91:7f:ae:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6403C53F9B05EDE5B902522724143F306D488E7
        Validity
            Not Before: Feb  4 18:23:21 2025 GMT
            Not After : Feb  3 18:28:21 2026 GMT
        Subject: CN=B80EE8264FA6DC33728D882F3A293CCB399EC644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:28:73:e7:dc:00:0d:7d:ce:21:93:8f:d9:
                    96:2a:05:0b:bc:15:1f:eb:f2:cb:e2:65:fa:37:2b:
                    0d:c7:03:3d:50:00:f5:7f:8d:d3:75:3a:c5:c1:f2:
                    a1:2c:9e:8f:c0:c4:ae:3b:c3:e1:54:a3:71:2e:fc:
                    8f:93:2b:59:85:d2:af:8c:db:4b:fc:d6:ae:d7:e7:
                    f2:26:8b:08:f2:8e:f0:f5:74:be:bd:31:ef:3e:60:
                    6d:d3:02:42:5b:6b:02:8c:3f:6e:15:41:a0:25:f0:
                    f1:1e:0b:b7:94:54:da:2a:fb:1c:1e:59:f7:51:ce:
                    c0:83:4e:9b:8f:19:85:14:1e:33:c3:d6:d2:48:cf:
                    b1:95:ad:d7:68:b8:42:0d:e5:56:54:29:12:26:81:
                    20:c2:4e:d6:5e:92:37:11:c8:b8:5a:f3:5e:b7:a8:
                    c6:74:60:12:47:c1:14:a2:b0:dc:5d:75:db:72:e7:
                    92:1c:26:ea:94:32:09:1b:17:b8:09:bf:a4:aa:8b:
                    fd:37:14:9c:9b:63:e9:0a:94:f5:a3:d7:de:f2:30:
                    27:2d:48:b6:00:c5:45:38:ce:cf:7e:03:8f:16:82:
                    e6:46:b2:68:06:95:d2:02:b3:17:cf:6d:59:85:87:
                    41:ad:8a:03:47:fc:15:e5:f6:87:41:9e:c2:cc:61:
                    93:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0E:E8:26:4F:A6:DC:33:72:8D:88:2F:3A:29:3C:CB:39:9E:C6:44
            X509v3 Authority Key Identifier:
                keyid:B6:40:3C:53:F9:B0:5E:DE:5B:90:25:22:72:41:43:F3:06:D4:88:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/B6403C53F9B05EDE5B902522724143F306D488E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6403C53F9B05EDE5B902522724143F306D488E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406BFEAC47888E79323A6C0453295FBD53E061F93D6CE47410D5A2381489A351/0/323830333a323631303a3a2f33322d3438203d3e20323731393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2610::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:09:7c:dd:20:9f:a2:c3:0d:df:c9:03:db:f9:85:36:f8:e5:
         f7:b1:db:35:ce:bb:cf:d6:f0:e0:5f:17:3f:d5:ff:64:0a:76:
         9d:79:a8:63:12:cb:85:dd:57:03:1d:24:9b:d2:0c:a4:73:58:
         51:31:e4:c5:67:96:58:b2:46:04:53:eb:ad:f7:bb:27:8d:97:
         a4:6e:fd:89:6e:1e:7d:30:ae:af:73:3f:dd:f7:86:eb:b3:2d:
         ed:57:62:fe:8d:23:10:53:a2:1b:c9:e1:d9:a9:ef:56:e5:01:
         60:f0:a2:33:22:79:e7:96:8f:52:28:41:7a:fb:7b:c9:7c:8e:
         38:f8:a5:14:f7:db:54:32:2a:cb:94:89:66:7a:2b:7d:85:fe:
         a9:a8:0e:e6:88:0a:cd:a5:84:6c:3b:20:2e:01:f2:58:f3:02:
         0f:8f:19:57:d4:10:0b:fb:1e:e0:8d:f9:52:26:f0:63:21:58:
         ef:a0:05:e9:d3:c7:02:e6:69:fd:b2:29:83:3e:06:6e:6e:ef:
         47:c3:86:34:1d:32:78:69:c8:c6:0f:1e:a9:d6:b6:46:87:a7:
         57:e9:1f:1d:38:6a:a8:1b:bb:79:a4:7d:f7:00:52:3b:73:d9:
         51:19:b9:c5:0a:6e:60:56:2b:ae:f9:bd:94:b4:e4:c0:4b:4f:
         37:69:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:25 2025 by rpki-client