Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/323830333a346465303a3a2f33322d3438203d3e20323730303531.roa
File:                     323830333a346465303a3a2f33322d3438203d3e20323730303531.roa (raw, json)
Hash identifier:          oZpBi1BrQpZpguENxuG49v/a2wXbNkIXNmeT14L4fXw=
Subject key identifier:   D2:02:DD:10:62:A9:5F:D6:30:1C:11:E1:2D:5D:13:29:EA:BC:81:35
Certificate issuer:       /CN=B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224
Certificate serial:       196982367022037ECBA184C8EBDA1AB86F254451
Authority key identifier: B5:7E:BC:F7:8B:C5:0E:7A:1C:13:B5:A6:A2:0C:0A:47:DB:F4:B2:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/323830333a346465303a3a2f33322d3438203d3e20323730303531.roa
Signing time:             Tue 04 Feb 2025 18:41:51 +0000
ROA not before:           Tue 04 Feb 2025 18:36:51 +0000
ROA not after:            Tue 03 Feb 2026 18:41:51 +0000
asID:                     270051
IP address blocks:        2803:4de0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:82:36:70:22:03:7e:cb:a1:84:c8:eb:da:1a:b8:6f:25:44:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224
        Validity
            Not Before: Feb  4 18:36:51 2025 GMT
            Not After : Feb  3 18:41:51 2026 GMT
        Subject: CN=D202DD1062A95FD6301C11E12D5D1329EABC8135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:69:4f:f2:ab:71:c8:ca:cc:06:97:cd:13:
                    12:6f:8b:4c:66:5b:84:c0:b8:e9:3d:6c:b4:3e:8a:
                    bc:70:8a:79:7b:63:9d:ea:b8:d8:b4:a0:20:c4:97:
                    49:d8:9c:d6:8d:05:72:b6:aa:6f:93:00:0c:f4:a5:
                    9b:d2:66:1b:1d:d5:d0:a2:04:24:56:3e:62:d7:3a:
                    f7:67:be:0c:ec:ad:f6:e4:e2:e5:e1:71:1e:59:b7:
                    45:19:91:e0:c8:34:05:32:a0:af:d1:0f:5a:81:63:
                    ff:dc:92:eb:a3:27:e6:9a:c8:f1:64:60:f7:04:32:
                    96:8a:b9:f6:41:18:1e:b4:fe:d3:95:56:64:9b:44:
                    e6:e4:f0:ca:fb:30:28:76:11:19:99:af:49:87:38:
                    da:9f:b5:65:2d:39:88:42:72:54:6e:1c:2d:91:ca:
                    08:8b:72:ce:bb:42:ef:1a:98:56:1d:32:e8:a1:2e:
                    dc:ba:13:99:d3:e0:94:11:62:e9:62:08:5a:1d:01:
                    52:cc:06:e4:3a:5c:b4:c2:36:ac:30:18:7b:fe:06:
                    60:d8:ab:9e:8c:09:3a:6b:ad:b3:d4:d3:d4:cc:c1:
                    56:2b:d8:1c:6c:eb:48:b3:0f:76:70:55:15:41:15:
                    81:34:fc:86:53:a4:e9:10:b4:41:72:b8:12:51:94:
                    e4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:02:DD:10:62:A9:5F:D6:30:1C:11:E1:2D:5D:13:29:EA:BC:81:35
            X509v3 Authority Key Identifier:
                keyid:B5:7E:BC:F7:8B:C5:0E:7A:1C:13:B5:A6:A2:0C:0A:47:DB:F4:B2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/323830333a346465303a3a2f33322d3438203d3e20323730303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:22:0e:0c:5b:1d:ef:7a:a9:c8:14:94:ea:c7:57:44:00:cc:
         20:38:cb:fa:34:d1:32:ad:33:7c:d4:a7:eb:7f:1e:ab:0c:17:
         73:d2:3d:a3:18:5a:26:60:98:32:64:0d:25:1d:5a:7d:2b:b7:
         52:6f:11:da:7a:53:4d:3b:ef:7a:c9:b8:8e:6d:2b:b0:ca:db:
         8f:4c:01:5e:d6:2f:2b:e6:c1:c3:10:e1:96:1f:3c:7a:ab:a9:
         26:70:18:07:03:99:a6:bf:88:ce:3a:c3:4f:fd:be:d1:12:12:
         f0:40:fb:a0:ff:e4:ed:48:fd:ac:96:a2:b1:af:73:5d:03:69:
         88:55:01:39:3c:19:29:2f:b1:45:4a:14:5d:28:9d:55:57:2b:
         4e:37:0b:74:40:29:05:79:e6:cb:10:42:42:dd:20:b3:10:5d:
         c5:e0:58:2e:4c:04:c9:c4:40:37:0d:59:c5:86:58:b9:6e:cf:
         28:34:5c:bf:ff:98:d8:f3:8c:ff:9b:48:73:14:41:ef:80:57:
         a0:25:61:7a:de:55:f5:b8:5a:e8:2b:5c:89:4c:09:32:9f:08:
         2a:57:f3:ee:15:92:b7:0c:c3:6a:b0:33:6e:f5:97:6d:9f:e9:
         f6:20:f0:f6:22:38:77:18:0d:7f:40:56:93:6b:13:e8:d2:df:
         19:44:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:47 2025 by rpki-client