Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/323830333a316530303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a316530303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          DWTZTQ/vNPOasNO8jWWfg0/1nAFx+nD9qascjKUeFxM=
Subject key identifier:   69:B9:04:16:A6:65:B4:37:72:9C:FB:43:8F:94:74:BF:7E:F5:C8:67
Certificate issuer:       /CN=0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE
Certificate serial:       7856EEB364FBA4A0D0AB83759FFD5C122F4EB188
Authority key identifier: 0E:D6:B6:73:F8:63:9E:1B:FA:76:C3:D0:C7:C8:6D:57:5A:E0:F0:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/323830333a316530303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:33:37 +0000
ROA not before:           Tue 04 Feb 2025 18:28:37 +0000
ROA not after:            Tue 03 Feb 2026 18:33:37 +0000
asID:                     52468
IP address blocks:        2803:1e00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:56:ee:b3:64:fb:a4:a0:d0:ab:83:75:9f:fd:5c:12:2f:4e:b1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE
        Validity
            Not Before: Feb  4 18:28:37 2025 GMT
            Not After : Feb  3 18:33:37 2026 GMT
        Subject: CN=69B90416A665B437729CFB438F9474BF7EF5C867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:67:4e:c1:1d:b1:52:1a:30:3f:35:b6:62:
                    87:a8:fd:6a:04:db:e5:ab:d2:58:d3:73:b3:a5:8e:
                    bf:f5:6a:cb:27:d7:3c:44:0f:43:96:65:54:14:b0:
                    74:72:00:47:a2:4c:07:75:cc:76:ce:3d:95:81:8b:
                    75:03:65:a4:58:dd:e7:39:a6:d4:00:55:28:b5:30:
                    fb:b7:99:79:96:4e:7e:1d:74:a1:54:cf:8a:f8:f2:
                    bf:72:86:0e:17:dd:19:bd:45:d0:20:19:0d:d3:70:
                    c1:5e:9f:0e:55:96:73:1c:cf:92:0c:d3:bf:39:41:
                    a2:c2:e1:f8:02:73:0a:de:cc:c5:b7:7f:13:8c:a4:
                    29:34:12:3d:c6:35:25:02:50:3d:6d:23:c7:be:ca:
                    7c:c9:c6:2d:71:5f:17:7e:a2:6f:43:df:d8:82:eb:
                    50:a3:ed:71:f2:7f:62:33:35:83:c5:85:03:78:27:
                    28:1d:c0:37:36:06:3a:f1:61:4d:4f:34:60:6a:93:
                    4c:4d:37:68:cf:b1:ee:5b:93:92:c1:68:30:3e:9c:
                    ad:d6:47:57:a1:80:2b:53:a6:95:65:c8:25:68:30:
                    c6:e3:7f:76:f0:66:28:4d:35:ef:b9:3c:a3:15:2f:
                    b8:ea:8e:7c:be:2c:8f:eb:44:f1:6b:5d:ff:ca:61:
                    6c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B9:04:16:A6:65:B4:37:72:9C:FB:43:8F:94:74:BF:7E:F5:C8:67
            X509v3 Authority Key Identifier:
                keyid:0E:D6:B6:73:F8:63:9E:1B:FA:76:C3:D0:C7:C8:6D:57:5A:E0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED6B673F8639E1BFA76C3D0C7C86D575AE0F0CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51720634CD7ECF83983D328C94314C3F01C0804FD39ADA5CCBF37C47359FED95/0/323830333a316530303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:7d:8f:39:5f:0f:53:fd:77:18:24:56:b8:34:1c:82:5b:
         94:8e:b8:6c:91:2d:50:34:83:da:ad:c3:78:09:a3:1f:cb:05:
         e7:83:79:ea:cf:63:39:77:7a:cb:2e:84:57:19:da:a1:99:ec:
         bf:bc:c7:08:a5:3d:b3:7b:31:62:b2:53:b3:0d:76:dc:0d:da:
         17:9a:9a:59:53:4d:b7:19:f3:a5:05:ea:c7:72:e6:f4:82:5d:
         6b:19:74:25:0d:35:ba:0b:db:62:14:a9:d4:d6:cb:70:13:80:
         ee:eb:13:a7:50:42:1a:2e:ae:ae:34:7e:d4:d0:9c:2e:23:6b:
         8c:85:04:d5:aa:79:51:cd:73:1f:f1:69:01:68:96:ca:7e:84:
         c2:0d:08:14:f3:8d:dd:53:96:cb:f2:d2:9a:39:e7:ee:fe:61:
         77:de:25:d6:6a:72:a8:23:d5:51:e8:71:5a:a2:2b:6e:ab:66:
         78:24:cf:e3:94:e9:32:c9:d7:fd:05:1c:34:42:7f:94:56:b8:
         f5:d9:a8:d8:e0:03:bc:1e:42:83:11:df:cd:28:bd:50:c8:8d:
         41:35:eb:ff:ff:2a:37:b8:72:ca:4e:f6:5c:6a:59:83:36:82:
         37:cf:a5:bf:79:d1:04:1d:48:ff:d3:25:67:66:3c:0d:e9:fe:
         08:f2:8c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:36 2025 by rpki-client