Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a3a2f33322d3332203d3e20323634383330.roa
File:                     323830333a3263303a3a2f33322d3332203d3e20323634383330.roa (raw, json)
Hash identifier:          HXaL95rf/XUYaVXMr/j61hmbzxwKfhWF4tTLZ6EG7/A=
Subject key identifier:   60:E2:9C:62:A4:35:59:6E:A9:BA:AE:38:CC:3C:23:FA:10:9D:7D:8D
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       301E932A07DBED7E08DC77FF2B7346EDAC3B5B1D
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a3a2f33322d3332203d3e20323634383330.roa
Signing time:             Tue 04 Feb 2025 19:58:31 +0000
ROA not before:           Tue 04 Feb 2025 19:53:31 +0000
ROA not after:            Tue 03 Feb 2026 19:58:31 +0000
asID:                     264830
IP address blocks:        2803:2c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1e:93:2a:07:db:ed:7e:08:dc:77:ff:2b:73:46:ed:ac:3b:5b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Feb  4 19:53:31 2025 GMT
            Not After : Feb  3 19:58:31 2026 GMT
        Subject: CN=60E29C62A435596EA9BAAE38CC3C23FA109D7D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:79:52:31:e0:35:30:cc:bc:d8:2c:2a:8c:
                    ee:33:85:c7:6f:01:4d:d0:40:2b:45:ef:24:22:6e:
                    b8:32:56:c4:ad:76:b5:c9:73:6d:d7:86:ee:04:28:
                    6e:c8:21:b8:d2:3e:51:19:e3:ff:c5:2e:05:6f:15:
                    95:ba:72:47:09:a0:77:91:e2:5e:67:eb:07:29:7b:
                    51:0d:30:f3:62:2c:ec:c8:9c:d0:be:25:42:7b:9b:
                    dc:f9:ec:be:a0:7f:bc:9f:f9:a6:ab:ba:c7:24:7f:
                    0b:3e:47:6d:85:ea:58:b1:01:46:ec:2b:48:da:7e:
                    af:d1:db:23:47:fd:4c:eb:29:d8:9c:53:10:00:06:
                    55:c4:1c:54:79:f0:35:0e:21:cc:2e:12:1a:07:6b:
                    b6:f0:66:b0:8c:51:a3:9e:c7:3c:3b:66:11:2d:c3:
                    59:b6:2c:25:79:00:7b:90:aa:82:5e:1e:00:93:48:
                    4f:03:ce:b0:4f:3f:0e:07:9e:4a:5d:0a:57:d8:7c:
                    d3:f9:f5:51:a6:68:a8:88:eb:19:79:e3:62:c0:7e:
                    31:03:08:73:38:ca:9f:1b:16:14:e8:6f:6b:a8:a6:
                    37:a3:25:0a:97:e5:4a:24:bd:48:fa:91:15:3a:39:
                    a0:e5:e2:55:f8:cb:f0:ff:b4:2f:89:1d:05:98:d6:
                    2c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E2:9C:62:A4:35:59:6E:A9:BA:AE:38:CC:3C:23:FA:10:9D:7D:8D
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/323830333a3263303a3a2f33322d3332203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:0f:40:ac:47:63:d9:af:2b:0c:d4:2c:db:15:d5:4c:13:a1:
         46:3d:8b:21:16:b3:d9:6e:0a:f0:9d:60:54:15:a2:97:2f:4d:
         07:ba:98:87:7d:73:28:e1:4f:e7:91:ab:a2:f0:85:bf:59:b8:
         9a:99:19:7d:7f:9e:9f:8b:a8:82:e9:ea:6b:c5:ab:4b:da:ea:
         c0:7d:f9:5e:d7:7c:84:31:47:4d:ec:e3:f2:d1:43:ea:cf:b3:
         29:a3:c8:d1:8e:8d:9c:b2:63:26:2e:5d:1c:db:da:6a:5f:fc:
         71:39:a0:7d:cd:b2:52:00:19:65:e3:fc:4d:92:89:02:50:99:
         41:25:b2:b5:33:e7:ab:2f:01:57:98:65:7e:cd:85:96:c4:00:
         b4:56:a9:12:18:a8:fd:bb:1f:61:1c:4a:67:51:a6:b2:8d:c1:
         7e:3f:96:39:e2:99:83:1a:7d:79:05:cd:1a:4b:15:e2:b7:62:
         fb:e3:6b:ed:d7:c3:13:dd:33:b5:3f:8d:19:4c:c8:68:6b:f4:
         74:4b:a8:25:59:e0:70:59:e1:8e:ee:b6:52:c6:40:99:4c:58:
         f4:c2:ec:9f:6d:a8:be:a6:eb:6b:5e:b2:6f:6f:3e:3d:db:44:
         23:98:36:d7:e0:4e:5a:1b:71:93:fe:ec:2b:33:77:e1:e8:ac:
         c4:41:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:39 2025 by rpki-client