Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa
File:                     323830333a396632303a3a2f33322d3332203d3e20323636373830.roa (raw, json)
Hash identifier:          lGf/40HehSbEHBpChK1MHo9fvFYVZWszKBTsZ5CAIRI=
Subject key identifier:   47:9C:95:63:B3:DB:2E:AC:20:2E:36:F0:C5:CD:75:92:B3:B0:3D:EF
Certificate issuer:       /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial:       20FA606DCCE3B76F3DAB03B24426A5884BA5AB4B
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa
Signing time:             Tue 04 Feb 2025 18:51:41 +0000
ROA not before:           Tue 04 Feb 2025 18:46:41 +0000
ROA not after:            Tue 03 Feb 2026 18:51:41 +0000
asID:                     266780
IP address blocks:        2803:9f20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fa:60:6d:cc:e3:b7:6f:3d:ab:03:b2:44:26:a5:88:4b:a5:ab:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
        Validity
            Not Before: Feb  4 18:46:41 2025 GMT
            Not After : Feb  3 18:51:41 2026 GMT
        Subject: CN=479C9563B3DB2EAC202E36F0C5CD7592B3B03DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:95:6c:15:80:bf:2f:de:23:b6:64:98:0f:
                    04:fa:37:77:73:01:92:43:fb:92:3f:ed:f0:d0:12:
                    67:00:b3:e6:b4:d3:f8:af:8d:8e:b4:91:a4:24:9e:
                    6c:53:77:59:b3:f7:27:2f:d3:19:df:66:df:f9:9d:
                    b7:06:c7:ff:9c:5f:ce:ec:84:a0:c6:92:d6:cd:70:
                    d2:c1:cd:7a:50:b1:35:c3:42:38:b3:97:61:f0:a6:
                    ce:17:7f:5f:aa:d8:d7:a4:1f:95:a2:41:5b:3d:ed:
                    58:82:4d:dc:b1:50:c7:df:21:85:ce:1e:7d:1e:f5:
                    39:63:c7:b8:f8:56:10:90:b8:d8:e5:f1:7e:54:90:
                    ad:14:91:b1:e3:4c:bb:83:fc:ab:b9:a8:f8:53:91:
                    c9:fc:6e:19:8c:52:f7:d0:83:33:82:46:20:b7:8e:
                    6d:82:27:22:3b:45:34:fa:e6:d8:0d:c4:60:80:1e:
                    e0:fd:ed:bc:9e:f6:81:07:7d:6e:22:ec:78:d5:91:
                    7e:0f:c7:7b:e0:d2:fe:3a:e2:83:4b:cf:10:5c:cf:
                    67:9a:82:3d:48:80:03:fe:3e:3f:55:9a:07:6c:b9:
                    9c:c4:4d:ca:e6:e5:0f:de:7e:0c:1f:c2:04:94:57:
                    a7:7c:ee:da:31:60:83:77:e1:3f:99:05:28:39:6e:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:95:63:B3:DB:2E:AC:20:2E:36:F0:C5:CD:75:92:B3:B0:3D:EF
            X509v3 Authority Key Identifier:
                keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/323830333a396632303a3a2f33322d3332203d3e20323636373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:26:d8:97:64:d2:7d:86:cf:3a:8a:9d:9a:c4:b3:4c:b4:e7:
         40:52:ea:3b:1f:7d:dd:a9:16:d8:79:fe:53:c6:90:44:28:61:
         9a:56:c6:24:3f:4a:16:0a:07:ff:fe:4b:69:6b:24:e8:b7:a4:
         15:d8:71:e0:11:1d:72:b5:0d:e6:14:ba:55:76:ac:1a:ed:48:
         b6:8c:3a:60:39:21:e3:b9:a5:89:7d:d1:b6:20:5a:db:7c:68:
         cb:98:60:b3:7c:7d:4d:a3:ab:44:a2:70:15:07:bf:af:71:be:
         59:b8:38:16:ac:9e:4f:83:58:96:f5:2d:e8:36:09:06:2a:b3:
         5a:6e:9b:d5:55:8f:bf:53:c0:30:a3:90:83:ec:fd:16:10:bf:
         41:2c:9a:2a:85:fb:15:02:0c:19:58:0f:f2:69:0e:e1:ad:5a:
         35:84:47:55:65:de:b9:78:fa:eb:3f:58:9b:45:4a:89:b4:c4:
         f5:31:ce:fa:11:b1:b0:f3:2e:bb:03:65:81:43:e6:d2:59:30:
         72:b7:40:a4:a1:35:c6:2f:9f:d3:a7:47:eb:8c:4a:4f:6e:17:
         ac:a2:a1:d8:6a:fb:21:e6:d3:09:da:97:49:dd:a9:b1:6e:bc:
         cd:ef:13:cd:6b:21:23:55:8a:25:2f:db:78:18:2d:16:06:5d:
         c3:2a:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:49 2025 by rpki-client