Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a6130303a3a2f34302d3430203d3e20323732383737.roa
File:                     323830333a326139303a6130303a3a2f34302d3430203d3e20323732383737.roa (raw, json)
Hash identifier:          AvV0JsNyY/dxyxq4zIZbpRpJnz5KuV+xLBqRcQRDFXU=
Subject key identifier:   B8:7B:96:EA:D3:5F:82:47:C2:53:84:08:D1:71:F3:FA:9A:4D:B7:28
Certificate issuer:       /CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
Certificate serial:       476BED9EEE60B924140FB24BFEE417E24AC2917D
Authority key identifier: E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a6130303a3a2f34302d3430203d3e20323732383737.roa
Signing time:             Tue 04 Feb 2025 18:32:18 +0000
ROA not before:           Tue 04 Feb 2025 18:27:18 +0000
ROA not after:            Tue 03 Feb 2026 18:32:18 +0000
asID:                     272877
IP address blocks:        2803:2a90:a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6b:ed:9e:ee:60:b9:24:14:0f:b2:4b:fe:e4:17:e2:4a:c2:91:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19BC5FA671BC143D11A298D8E45D012F8B59DB8
        Validity
            Not Before: Feb  4 18:27:18 2025 GMT
            Not After : Feb  3 18:32:18 2026 GMT
        Subject: CN=B87B96EAD35F8247C2538408D171F3FA9A4DB728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:d0:a9:4e:fe:6b:56:75:f2:05:a8:ba:08:
                    f6:91:0d:3d:40:43:c2:6e:6e:22:d0:69:6d:b0:40:
                    fa:d0:d3:88:ca:df:68:9c:ad:bd:98:2e:2b:5e:50:
                    de:32:d7:f3:92:da:69:18:06:15:0d:f0:7c:7b:27:
                    de:07:5c:cf:e0:ec:3d:11:a2:d6:4e:a7:7f:6c:0b:
                    c2:3e:f7:d2:08:a6:1d:d1:4c:f6:97:fe:71:0b:29:
                    24:41:7a:2b:e0:ea:c3:f4:98:dd:61:84:00:07:a2:
                    34:61:87:0c:68:72:d9:ba:13:47:f1:0e:14:e7:34:
                    39:b3:06:b9:46:2d:61:37:fe:71:36:ef:20:7f:33:
                    6d:23:c4:8c:4a:17:51:76:5d:de:44:89:07:5d:f2:
                    57:f2:d9:7b:31:67:65:8c:04:46:d7:ef:1e:c9:57:
                    5d:dd:61:38:35:1d:79:6c:be:78:5a:33:cd:1e:26:
                    b5:c4:3c:2f:31:6a:a5:d3:65:1a:81:af:e2:a4:18:
                    f7:52:99:18:08:eb:47:bd:31:c0:74:42:cb:30:39:
                    cc:b7:a5:d6:99:35:d3:69:4e:2b:4b:85:c6:4c:71:
                    60:be:57:e2:98:42:60:a4:3d:1d:29:39:96:ca:77:
                    a0:51:ef:da:87:6f:52:dd:63:9e:f4:ba:68:e4:dc:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7B:96:EA:D3:5F:82:47:C2:53:84:08:D1:71:F3:FA:9A:4D:B7:28
            X509v3 Authority Key Identifier:
                keyid:E1:9B:C5:FA:67:1B:C1:43:D1:1A:29:8D:8E:45:D0:12:F8:B5:9D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E19BC5FA671BC143D11A298D8E45D012F8B59DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5972D5CC3498C9D38CCA4EDED1834EFA9897C62416814DECD3DD848AA977377A/0/323830333a326139303a6130303a3a2f34302d3430203d3e20323732383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:18:17:20:72:3d:34:b4:71:6f:cf:3a:50:e2:13:db:8b:ce:
         14:98:5f:85:8b:6a:62:37:c0:54:16:f4:6a:a3:9e:7a:e9:38:
         d2:02:0f:eb:13:df:91:d8:73:32:11:05:da:65:d0:6b:91:85:
         0c:e6:9a:1f:1c:94:6f:b2:af:a7:9d:51:7b:34:e5:10:f5:18:
         5f:39:59:5d:e9:25:f2:0e:90:87:a3:8f:5b:ac:05:ec:e6:7f:
         9c:3d:19:16:1c:fb:4a:48:56:3a:f4:1f:0e:61:88:ab:65:e6:
         3f:5b:07:1a:09:45:d6:1b:29:65:03:60:a8:5f:97:69:32:04:
         dc:53:2d:d3:89:00:3d:9f:01:04:23:54:a1:fe:37:f8:7a:5b:
         89:64:ed:b8:2f:c4:79:85:6b:de:f5:c0:9b:1d:37:00:51:6a:
         3c:23:fb:2d:e8:60:cf:79:bc:f9:59:3c:08:87:2b:34:51:35:
         3c:04:3c:a1:cf:8b:fd:59:6e:ef:d0:71:62:4f:20:ea:ed:cb:
         74:06:2a:ca:d2:12:2a:eb:86:10:8f:9b:a0:07:4e:db:9d:51:
         bc:bb:0d:1f:b9:ab:35:2d:a5:7f:91:bb:16:d1:1f:67:e4:fe:
         32:de:2a:db:dc:34:1b:8f:22:23:b7:28:c2:6e:94:21:67:2d:
         a7:d4:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:21 2025 by rpki-client