Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/323830333a386365303a3a2f33322d3438203d3e20323636373439.roa
File:                     323830333a386365303a3a2f33322d3438203d3e20323636373439.roa (raw, json)
Hash identifier:          cfpT4JR0oMuyedsrw9RrA+g2bFsVujidPyDCt6vuzdg=
Subject key identifier:   BD:4F:3E:B0:8C:E7:95:E0:59:4D:EF:DB:E3:D8:17:94:C9:34:17:84
Certificate issuer:       /CN=096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35
Certificate serial:       79DDB893BD4E8B3C2308FA0B7B0A96B7DF3D8EFB
Authority key identifier: 09:6E:1E:9E:3F:D7:23:EA:1C:D1:C1:98:6A:E9:A6:C3:45:AC:DC:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/323830333a386365303a3a2f33322d3438203d3e20323636373439.roa
Signing time:             Tue 04 Feb 2025 19:58:03 +0000
ROA not before:           Tue 04 Feb 2025 19:53:03 +0000
ROA not after:            Tue 03 Feb 2026 19:58:03 +0000
asID:                     266749
IP address blocks:        2803:8ce0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dd:b8:93:bd:4e:8b:3c:23:08:fa:0b:7b:0a:96:b7:df:3d:8e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35
        Validity
            Not Before: Feb  4 19:53:03 2025 GMT
            Not After : Feb  3 19:58:03 2026 GMT
        Subject: CN=BD4F3EB08CE795E0594DEFDBE3D81794C9341784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:51:c0:d6:5e:9e:bd:7f:e7:cb:9f:9c:d5:
                    a1:ab:f7:fb:71:62:35:f6:98:36:14:de:f1:9f:1e:
                    93:5e:b9:64:9b:3e:76:03:be:6e:f0:00:c0:e7:87:
                    11:f3:9b:88:52:3c:79:3b:04:85:67:21:bc:ee:67:
                    c6:62:35:af:c5:b0:b5:80:78:2f:4e:8c:e9:d7:6a:
                    08:57:8e:13:a4:a4:29:f5:e6:3d:bc:8c:64:11:4d:
                    f9:f8:d1:82:7b:41:51:99:da:3e:a9:f3:b2:0a:af:
                    05:7c:63:b4:e0:3f:1e:db:68:34:5f:61:e2:31:65:
                    12:aa:57:09:42:47:6a:70:97:12:54:aa:d7:34:14:
                    2a:51:69:c9:ac:1d:65:38:74:e3:38:17:d9:a3:4d:
                    2f:9d:06:3c:d0:c8:b4:43:65:67:4f:a1:0f:59:ea:
                    52:a4:03:e4:e8:4f:92:33:1b:be:ab:ac:a3:22:16:
                    69:95:c1:b2:77:b2:ea:1b:87:ff:26:01:8f:9b:a0:
                    39:28:b1:e0:b7:54:91:27:e8:0f:2c:d7:99:b9:91:
                    2a:e0:ac:f8:eb:8c:e1:d5:b4:63:e7:85:04:70:5e:
                    64:31:80:2c:89:0c:3b:c7:91:fd:87:f8:11:9a:ba:
                    7f:0d:ba:ca:67:e2:3c:50:8d:7c:35:8d:bf:06:62:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4F:3E:B0:8C:E7:95:E0:59:4D:EF:DB:E3:D8:17:94:C9:34:17:84
            X509v3 Authority Key Identifier:
                keyid:09:6E:1E:9E:3F:D7:23:EA:1C:D1:C1:98:6A:E9:A6:C3:45:AC:DC:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096E1E9E3FD723EA1CD1C1986AE9A6C345ACDC35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D55C2C01B222783517E8A474C06CBA263251E58BFF147F361D42B68D689671A/0/323830333a386365303a3a2f33322d3438203d3e20323636373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:4a:b0:6e:e6:ef:fe:fd:d1:6f:1f:01:71:eb:6a:85:d9:ab:
         da:07:b7:8b:8e:b1:43:1b:07:93:f6:71:be:96:36:6f:df:db:
         ff:f7:55:26:a6:1a:81:69:58:a2:a4:14:ea:74:4c:cd:e5:34:
         c5:20:0a:40:22:01:4f:79:5b:98:f8:86:5b:a6:90:9d:db:8c:
         ec:21:b6:d1:46:a6:54:92:f5:b5:2b:0b:6d:bf:dc:a9:93:86:
         dc:f0:32:92:f4:fc:9d:89:ef:ed:b7:5e:69:4a:c4:b8:f3:c3:
         74:7e:df:68:b8:c0:1b:a4:16:87:42:7f:e0:0a:74:43:5c:0d:
         2f:a7:ed:de:3f:0f:64:f2:c5:15:ba:c1:fc:e9:95:ea:70:c8:
         30:3a:e0:aa:8a:12:cd:bf:31:30:c2:35:e5:27:3c:e7:8a:9b:
         4d:d8:4a:2e:5b:95:38:07:8a:3f:23:14:cc:94:6a:de:2f:bc:
         7b:2b:e3:9f:a9:1d:e9:52:40:25:33:60:a9:34:08:84:e3:44:
         80:38:fa:a2:5a:1d:9a:3e:cf:cc:4d:ee:94:27:a0:bb:55:7d:
         51:02:20:86:c2:eb:2b:a8:be:5d:36:b8:5c:7f:2e:e9:c6:71:
         0a:68:0c:0f:e7:9f:3a:b1:ef:11:7e:b1:1b:02:70:de:b6:7b:
         ce:94:9f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:14 2025 by rpki-client