Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e20323639393130.roa
File:                     323830333a656365303a3a2f33322d3332203d3e20323639393130.roa (raw, json)
Hash identifier:          +u/1vcqYAei3ECYyMrWTuYCGvVi8QXjEaSVsGPWMEFg=
Subject key identifier:   CA:59:3B:B0:D7:F9:F0:EC:03:A8:59:B4:B0:E5:8F:CC:30:B5:7E:D8
Certificate issuer:       /CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Certificate serial:       2BC471CE90BA0D989CC6FEFD3B861794436ABE2C
Authority key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e20323639393130.roa
Signing time:             Tue 04 Feb 2025 20:05:21 +0000
ROA not before:           Tue 04 Feb 2025 20:00:21 +0000
ROA not after:            Tue 03 Feb 2026 20:05:21 +0000
asID:                     269910
IP address blocks:        2803:ece0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c4:71:ce:90:ba:0d:98:9c:c6:fe:fd:3b:86:17:94:43:6a:be:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
        Validity
            Not Before: Feb  4 20:00:21 2025 GMT
            Not After : Feb  3 20:05:21 2026 GMT
        Subject: CN=CA593BB0D7F9F0EC03A859B4B0E58FCC30B57ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:58:c7:9e:95:74:dd:fd:79:08:96:0d:e0:
                    2e:77:10:33:e0:d9:8a:47:b0:25:4d:70:46:89:50:
                    64:e3:b6:5f:3d:87:66:76:9a:ed:5f:f1:2d:38:12:
                    63:bb:d9:a1:b1:03:ad:85:16:ef:a4:24:ec:cb:44:
                    32:9b:e0:9c:37:74:e1:32:ce:da:20:9d:99:63:d9:
                    f6:da:65:12:cd:5f:41:99:6c:71:f1:71:9e:96:f2:
                    d8:7b:cb:f0:87:68:ff:78:e4:f8:46:1b:d6:49:20:
                    fc:87:37:d3:15:22:71:be:b5:11:f9:99:12:0c:3c:
                    08:37:ce:c3:54:b1:11:3b:e9:66:09:1e:d9:c6:2a:
                    f2:1f:7f:3a:c3:b6:22:80:5a:eb:12:0d:d2:37:a2:
                    12:79:e6:23:39:05:42:b2:1a:29:57:a1:d8:f2:ac:
                    cd:f8:ce:57:04:20:32:2f:49:e4:7a:fe:07:a9:c2:
                    d0:e5:d4:28:a6:bc:e2:5f:57:ff:55:2e:06:76:29:
                    22:c3:33:09:35:33:cf:3e:e6:d0:d8:99:dc:18:5a:
                    48:ce:09:3f:ed:b4:c2:c0:a2:63:68:07:36:66:57:
                    68:23:f0:89:50:8e:0f:6d:6f:32:a1:64:cb:7e:70:
                    13:37:27:6a:ed:ee:0e:c0:43:88:4a:3a:da:c0:5c:
                    ff:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:59:3B:B0:D7:F9:F0:EC:03:A8:59:B4:B0:E5:8F:CC:30:B5:7E:D8
            X509v3 Authority Key Identifier:
                keyid:91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/323830333a656365303a3a2f33322d3332203d3e20323639393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ece0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:15:d8:44:e2:ac:b0:0a:9e:38:8a:02:54:ae:bb:93:71:c5:
         bc:05:fd:2d:0a:80:e7:af:a8:de:0d:33:80:64:1d:b4:31:dd:
         8c:db:ca:1f:9e:b8:d1:b8:97:44:10:7c:18:d9:0d:6b:24:1b:
         02:42:1f:e7:84:8b:ed:84:51:f8:bd:55:a8:7f:f3:a6:69:b0:
         77:e2:5c:40:97:4a:cd:65:73:4f:4f:8a:fd:f0:a1:50:66:b3:
         5a:4a:a9:1f:9c:cc:ca:6b:15:c8:25:07:3c:eb:af:3f:25:97:
         a1:a4:10:8d:8f:42:5a:4d:15:a6:58:07:b0:1c:a0:50:d5:c6:
         c8:e9:70:d4:09:a0:2f:2b:d2:81:3d:98:e4:00:b0:53:ce:5d:
         4e:d2:cb:9e:a3:48:78:29:54:de:70:45:87:22:e6:e0:94:a8:
         62:21:9b:8e:38:0f:93:00:1d:5f:15:83:a2:06:3d:9f:5d:1f:
         90:fd:35:6c:a6:48:76:0d:4e:4f:ea:05:92:83:d9:39:2e:f3:
         69:7a:a7:e6:c2:e3:48:c5:98:f0:e2:54:f5:d7:b3:71:51:d9:
         11:60:e5:20:2e:f8:5a:c7:aa:34:94:a5:a8:00:e2:ff:d1:ce:
         0a:ac:d4:35:2b:f2:5c:f1:42:22:8c:3a:1e:1e:82:91:22:3b:
         44:48:4a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:13:19 2025 by rpki-client