Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3630303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a3630303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          LiYVw26sFgmD4unYzUsv6TMFDZOTszn/m97xWJYj7lA=
Subject key identifier:   CE:21:CE:6D:D7:A8:BE:FE:D8:EB:BC:95:0D:B9:94:C0:B9:27:39:1C
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       21F88177E97684CC71BD6CA87F0859E1C9A514FA
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3630303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 04 Feb 2025 18:32:19 +0000
ROA not before:           Tue 04 Feb 2025 18:27:19 +0000
ROA not after:            Tue 03 Feb 2026 18:32:19 +0000
asID:                     272877
IP address blocks:        2803:2a90:600::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f8:81:77:e9:76:84:cc:71:bd:6c:a8:7f:08:59:e1:c9:a5:14:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Feb  4 18:27:19 2025 GMT
            Not After : Feb  3 18:32:19 2026 GMT
        Subject: CN=CE21CE6DD7A8BEFED8EBBC950DB994C0B927391C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ad:b9:94:57:c1:de:af:b4:56:47:87:09:e0:
                    45:a9:29:47:02:ec:24:6f:de:60:5f:fb:57:b5:47:
                    42:f4:b4:07:2e:43:d1:f1:7b:b2:20:45:f3:23:a8:
                    5a:04:05:07:64:75:d0:0b:12:7c:5e:6e:fc:3b:66:
                    ed:cb:fe:81:17:96:e8:8a:e2:64:40:a9:c1:ce:26:
                    09:85:98:c1:7a:ab:43:71:0b:94:a9:c5:4c:fe:4b:
                    a6:b9:ec:dc:bc:9d:29:0c:63:9e:75:70:14:1e:39:
                    d1:fa:63:6a:73:02:0f:a2:f4:a7:85:b3:0c:bb:38:
                    a8:e5:a1:e6:92:b4:e6:ea:4c:0b:99:19:1f:2f:be:
                    8d:3c:02:f6:d4:d7:be:46:e5:1f:93:33:4f:74:10:
                    57:91:e9:e7:d8:cd:77:2e:db:96:ad:c4:43:41:fb:
                    19:0d:6c:56:6b:2b:f2:b0:e3:8f:2e:ea:ef:a8:ac:
                    45:30:04:21:28:df:ea:3c:18:9c:00:fe:e0:c2:b3:
                    3d:11:85:a3:e2:af:04:81:a5:b3:06:77:92:8b:66:
                    73:b8:52:08:2d:51:0e:62:7d:75:09:49:c9:9d:c3:
                    29:50:5b:d2:72:bd:73:79:37:a2:0d:06:6a:ba:1b:
                    c8:96:03:9d:f9:4d:98:10:ea:46:42:8a:9f:b5:e1:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:21:CE:6D:D7:A8:BE:FE:D8:EB:BC:95:0D:B9:94:C0:B9:27:39:1C
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a3630303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:8d:72:58:49:51:1b:fb:3c:c9:fd:ad:57:62:ff:52:ad:80:
         c9:0c:89:d7:9a:a4:81:3c:57:6c:d3:1a:87:23:82:0d:a0:0a:
         47:68:df:95:ab:11:69:6e:ba:87:e2:f3:02:a9:02:3b:71:80:
         a4:25:4f:9e:ba:70:bb:33:7f:7b:6c:75:df:4c:5f:b5:e8:12:
         7c:2d:21:30:21:45:91:eb:e6:fc:1d:c0:d3:e9:25:30:f3:d5:
         cb:14:f5:01:db:71:df:3e:9e:3f:99:8a:d1:44:ee:4f:f6:95:
         79:76:41:63:98:5f:1b:01:29:53:69:d3:eb:6c:59:74:37:ca:
         7f:39:5f:5e:32:91:f8:eb:42:6d:38:d0:1a:c0:a3:74:4b:da:
         a5:91:fd:b1:6f:72:81:a5:c6:6f:76:79:9d:eb:4e:5d:56:7f:
         96:39:d7:7a:92:49:5a:3b:af:0d:c7:41:80:97:32:e2:8d:d8:
         8a:56:98:0b:85:48:83:11:d3:8c:0e:21:71:59:d4:13:4a:e0:
         d3:bc:90:01:66:0b:d7:11:41:65:fb:da:53:0e:a3:13:84:f0:
         a1:a9:7b:6b:1b:8b:17:c9:1e:fb:a6:b7:32:7b:d3:1a:7d:b9:
         88:0d:91:ed:5e:8b:21:23:f6:c3:4d:38:8b:5d:44:8d:ad:ad:
         fd:1d:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:50 2025 by rpki-client