Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3230303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a3230303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          VpAsgy2IATOfg0Q8XlW45AABs6o47BbgYYAS9vRhP+4=
Subject key identifier:   E0:34:6A:31:68:DA:32:11:E3:43:92:EA:F2:CD:0E:68:38:2B:9F:CC
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       27A9338FBDBF23374D38123188D24037D448129B
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3230303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 04 Feb 2025 18:32:19 +0000
ROA not before:           Tue 04 Feb 2025 18:27:19 +0000
ROA not after:            Tue 03 Feb 2026 18:32:19 +0000
asID:                     272877
IP address blocks:        2803:2a90:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a9:33:8f:bd:bf:23:37:4d:38:12:31:88:d2:40:37:d4:48:12:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Feb  4 18:27:19 2025 GMT
            Not After : Feb  3 18:32:19 2026 GMT
        Subject: CN=E0346A3168DA3211E34392EAF2CD0E68382B9FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:76:6a:25:79:a8:a1:38:6d:90:db:96:cc:4a:
                    40:36:0d:d6:65:37:d5:e7:17:1d:e5:47:f8:8f:79:
                    05:8f:85:e0:fc:43:86:5d:eb:76:32:63:76:69:da:
                    36:2f:e3:e9:f0:21:9a:b9:d7:a1:c5:36:a7:93:c9:
                    b0:9f:2c:d3:90:bb:24:43:0e:c4:24:c7:1c:8a:90:
                    46:ba:73:e6:33:86:12:09:9c:63:e3:64:44:56:28:
                    3b:7e:3a:26:67:a4:cf:83:e8:15:bd:33:27:60:29:
                    0f:a2:a8:1a:97:67:7f:22:ed:8a:cf:a7:f8:48:7b:
                    b9:4b:70:b9:0f:b9:46:08:8a:c2:c8:f3:2b:91:cc:
                    97:80:ab:15:22:5f:7a:d8:b3:15:3f:f3:33:03:12:
                    b1:7f:16:43:61:ba:91:7d:63:7e:fc:bc:32:a1:49:
                    32:a8:35:a6:fe:a6:9c:91:72:74:57:06:65:8f:11:
                    33:e1:8b:6c:ca:c7:6d:96:2c:37:49:96:79:75:62:
                    52:ff:f7:d2:4d:14:5f:89:59:d9:2e:5f:2e:26:b0:
                    be:35:74:80:c6:a5:fb:e2:a3:0a:17:6f:28:e7:34:
                    fc:d2:55:58:50:c4:05:21:fe:67:36:73:32:94:5e:
                    c6:0d:bb:ce:4c:42:86:19:c6:d6:b6:11:63:83:97:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:6A:31:68:DA:32:11:E3:43:92:EA:F2:CD:0E:68:38:2B:9F:CC
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3230303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:98:71:f8:60:0c:18:6e:c6:7e:1f:3b:88:9f:82:77:3b:2f:
         e3:ec:c0:40:64:7f:a0:19:b0:96:c8:35:f7:bf:22:8f:5e:a0:
         fe:bc:58:a7:69:40:aa:b0:4e:e6:eb:54:6a:43:1f:67:14:e7:
         75:5a:f6:c3:72:7f:b8:59:26:f4:89:f3:dd:9b:5b:0e:76:f8:
         f0:51:b3:36:eb:df:39:9e:01:4e:ad:87:d6:6e:d5:68:5f:69:
         f4:b2:de:17:e3:e0:ef:79:20:d2:9d:af:46:d4:d7:c1:76:00:
         b8:ca:4f:15:7e:9d:a0:56:21:0e:b6:fb:8d:77:19:bd:74:44:
         d2:fb:8e:bf:14:48:5a:73:63:91:57:d0:49:d8:fa:62:34:c3:
         e4:be:2c:94:08:48:53:11:0b:a1:80:9d:39:fe:d5:21:70:4a:
         9e:f9:6f:89:4a:66:91:f4:47:48:5b:ec:29:cb:d7:3f:11:67:
         75:13:e7:67:42:50:3d:28:fc:ff:30:f9:b9:d4:61:10:cd:80:
         d4:4c:57:a5:f6:b8:d5:b9:4a:e3:2b:d1:8b:3b:ef:00:dd:8a:
         62:5b:7b:27:2c:4a:d7:21:0a:aa:bd:d9:04:7e:8f:5e:56:f8:
         1f:62:22:1a:4d:c6:c0:c5:c6:e1:c9:6c:15:56:2f:79:7c:11:
         0b:64:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:59 2025 by rpki-client