Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/323830333a633634303a323230303a3a2f34382d3438203d3e203237393833.roa
File:                     323830333a633634303a323230303a3a2f34382d3438203d3e203237393833.roa (raw, json)
Hash identifier:          7uNVnTPhjEkbVbRltrKN6ICGg922D7IDAja0MFQ2Vs8=
Subject key identifier:   CD:9D:E4:9A:1C:46:BE:21:A5:94:B5:4D:CC:1F:2F:10:90:E7:CE:7E
Certificate issuer:       /CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
Certificate serial:       50A8B0452AFCADFA04BD8C401AFB5F03C602B16C
Authority key identifier: E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/323830333a633634303a323230303a3a2f34382d3438203d3e203237393833.roa
Signing time:             Tue 04 Feb 2025 18:19:05 +0000
ROA not before:           Tue 04 Feb 2025 18:14:05 +0000
ROA not after:            Tue 03 Feb 2026 18:19:05 +0000
asID:                     27983
IP address blocks:        2803:c640:2200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a8:b0:45:2a:fc:ad:fa:04:bd:8c:40:1a:fb:5f:03:c6:02:b1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
        Validity
            Not Before: Feb  4 18:14:05 2025 GMT
            Not After : Feb  3 18:19:05 2026 GMT
        Subject: CN=CD9DE49A1C46BE21A594B54DCC1F2F1090E7CE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:db:17:b6:00:13:a7:4e:bc:18:17:ab:9e:
                    b8:62:8e:83:f0:58:3b:9a:dd:23:1e:c1:86:64:fb:
                    f3:5d:fc:a8:a5:9a:5a:28:49:fa:96:d3:99:52:95:
                    e3:61:c1:aa:e7:47:1d:39:14:28:be:60:4f:2e:a6:
                    a5:07:a6:d1:ee:b6:6e:e4:34:c7:6d:89:5d:2c:0d:
                    ba:cb:42:a0:15:f3:98:62:1c:84:5d:8e:8c:3c:e4:
                    1c:55:42:4c:e6:c6:bf:7b:5a:6f:10:7c:12:a0:2c:
                    d1:fa:65:00:aa:14:0c:7e:6b:5d:c0:cb:fc:d2:83:
                    d1:97:4b:ce:e3:ef:c5:58:88:c6:92:b2:81:e6:b3:
                    43:af:1b:db:fc:ff:fa:cb:79:be:e7:f9:51:c7:c9:
                    7d:a8:01:84:15:2c:26:82:04:8f:c9:6d:03:63:0a:
                    8e:60:f1:c2:d3:61:d5:ba:e3:15:e2:fd:c3:4d:f8:
                    05:74:70:4b:e2:27:eb:f2:47:42:5b:cf:48:3f:8a:
                    63:1b:8f:77:39:56:68:7f:40:71:b6:f5:07:f2:cd:
                    69:f8:52:a5:7c:b3:47:04:b3:7b:20:51:29:30:6a:
                    d4:41:d0:e4:a8:9a:09:bc:24:88:fd:5d:57:be:b9:
                    b1:62:02:f6:79:bb:cf:60:1c:52:10:f5:a2:bb:a8:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9D:E4:9A:1C:46:BE:21:A5:94:B5:4D:CC:1F:2F:10:90:E7:CE:7E
            X509v3 Authority Key Identifier:
                keyid:E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/323830333a633634303a323230303a3a2f34382d3438203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c640:2200::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:d3:97:c0:b5:8e:84:3a:69:ce:08:6a:1c:b2:ca:79:e6:ca:
         bc:c2:46:12:b9:6a:dc:d0:3a:d5:8e:83:c6:9c:0f:32:fc:f2:
         0f:cf:fa:f7:87:cd:b7:84:42:fe:6b:1d:e7:4a:89:73:03:96:
         df:37:f1:48:6d:3c:cd:60:ec:bf:6f:a9:e3:de:5b:ac:a9:f5:
         1b:d6:41:9b:bb:d2:55:af:00:54:60:53:c3:ce:5d:d9:fb:2b:
         59:0d:06:d6:42:0a:cf:11:a6:9a:34:73:1b:39:01:63:81:9f:
         bc:e6:e7:08:b3:2a:85:18:bc:3f:7e:a4:4a:e8:0b:85:45:60:
         ab:85:36:a3:0e:85:87:84:cd:cc:0d:8f:18:f1:2a:1a:a1:67:
         f1:b3:bc:81:08:6a:c0:c8:f5:00:26:ac:2e:9f:3b:c0:70:0b:
         4b:99:dd:4c:5e:10:66:51:1e:9c:8d:5f:b6:0b:83:1b:f2:55:
         5b:78:e4:77:10:94:76:92:98:c3:43:18:66:e4:e7:a4:86:7e:
         e3:a9:1f:11:04:f9:69:81:63:89:a1:1c:00:c4:d7:55:d3:dd:
         7c:86:55:a2:60:d2:76:1b:0a:a8:5d:dd:25:6f:44:1a:b6:7b:
         9d:38:34:8e:c0:ab:c1:13:61:b2:73:40:db:f9:e5:fa:ee:49:
         f3:b3:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:55 2025 by rpki-client