Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA12844DF7570521B8417BDDA222A294DBB9A75BBB07ADCCFEBF6A504CE63B/0/323830333a343536303a3a2f33322d3438203d3e20323639373537.roa
File:                     323830333a343536303a3a2f33322d3438203d3e20323639373537.roa (raw, json)
Hash identifier:          GxpgLQx4lYnB11+0iRwNrGuAI6l2cfnhbeluDavl9KY=
Subject key identifier:   D9:0A:A5:06:07:2C:61:C2:7B:67:18:89:44:C1:33:1E:F1:26:5D:F8
Certificate issuer:       /CN=EA855D9931507E4E0EBD377A97305C5BA22DF8FB
Certificate serial:       26C550E2C7A51CA536CE4EFA99DCA97B08FC736D
Authority key identifier: EA:85:5D:99:31:50:7E:4E:0E:BD:37:7A:97:30:5C:5B:A2:2D:F8:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA855D9931507E4E0EBD377A97305C5BA22DF8FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/60EA12844DF7570521B8417BDDA222A294DBB9A75BBB07ADCCFEBF6A504CE63B/0/323830333a343536303a3a2f33322d3438203d3e20323639373537.roa
Signing time:             Tue 04 Feb 2025 18:01:59 +0000
ROA not before:           Tue 04 Feb 2025 17:56:59 +0000
ROA not after:            Tue 03 Feb 2026 18:01:59 +0000
asID:                     269757
IP address blocks:        2803:4560::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:50:e2:c7:a5:1c:a5:36:ce:4e:fa:99:dc:a9:7b:08:fc:73:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA855D9931507E4E0EBD377A97305C5BA22DF8FB
        Validity
            Not Before: Feb  4 17:56:59 2025 GMT
            Not After : Feb  3 18:01:59 2026 GMT
        Subject: CN=D90AA506072C61C27B67188944C1331EF1265DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:f7:19:43:c8:a4:52:76:ff:c1:81:90:cf:
                    d2:7c:3c:10:33:0b:b6:73:84:c1:bd:f6:18:91:e7:
                    1d:e4:79:3d:18:77:cd:a3:49:f7:5d:96:7d:5d:7c:
                    60:40:05:85:1f:18:05:1e:c7:de:18:e5:0e:bb:48:
                    67:5c:dd:7c:37:e3:1c:9f:26:e2:f1:9a:2f:f8:0c:
                    ce:fc:a8:85:78:ba:21:2f:6e:0f:41:96:f3:19:21:
                    00:04:ef:21:9c:be:73:7e:61:f4:37:04:37:a6:f4:
                    3b:c7:f2:41:71:9f:f1:8b:0f:0c:fc:a7:94:91:c2:
                    c2:58:d2:9d:42:a1:fa:7a:b2:23:15:e7:f4:44:72:
                    34:88:2a:9a:79:97:2f:58:8e:5b:6a:66:1b:6e:19:
                    96:3a:3c:fe:79:b8:43:51:c0:0b:82:96:e9:59:bd:
                    33:4a:59:03:b2:f3:9e:da:06:a7:d7:52:a2:a7:22:
                    6e:b8:0d:e1:8d:30:41:6e:ed:5f:50:b5:44:42:2e:
                    cb:d9:ac:7a:b2:86:f4:51:bf:fe:60:04:21:bb:a7:
                    59:96:e9:0b:ca:25:2f:fd:1d:bd:53:c6:58:cf:6d:
                    8f:68:70:57:3d:f1:e4:9c:86:38:a0:72:97:32:dc:
                    ab:50:23:ea:d1:f0:cb:02:2b:70:7f:d1:4c:5b:7b:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0A:A5:06:07:2C:61:C2:7B:67:18:89:44:C1:33:1E:F1:26:5D:F8
            X509v3 Authority Key Identifier:
                keyid:EA:85:5D:99:31:50:7E:4E:0E:BD:37:7A:97:30:5C:5B:A2:2D:F8:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/60EA12844DF7570521B8417BDDA222A294DBB9A75BBB07ADCCFEBF6A504CE63B/0/EA855D9931507E4E0EBD377A97305C5BA22DF8FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA855D9931507E4E0EBD377A97305C5BA22DF8FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA12844DF7570521B8417BDDA222A294DBB9A75BBB07ADCCFEBF6A504CE63B/0/323830333a343536303a3a2f33322d3438203d3e20323639373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4560::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:03:d2:d2:3f:ec:cf:5b:d1:68:a2:4f:51:4a:1c:34:2e:39:
         3e:67:97:94:4a:af:24:6f:a6:18:b6:d7:6c:4c:50:03:aa:10:
         48:21:ab:21:4d:e1:5c:3a:34:47:a1:e9:b9:d7:2d:e1:30:0e:
         cf:29:e0:41:b0:99:24:57:3e:95:0b:e9:e6:72:1f:af:b6:1f:
         88:71:1d:ce:a9:2c:8c:59:d9:6f:b0:4f:87:63:7f:41:3a:bc:
         97:75:93:e6:d4:d5:45:3b:a9:b7:da:15:73:41:1b:be:6f:18:
         5e:d0:92:83:1c:4d:9e:2a:25:9d:3b:5c:8e:c7:d4:d1:cf:7e:
         da:98:ba:62:74:fe:5b:1a:44:f6:74:d2:1a:61:48:c4:82:76:
         2c:ab:dc:9a:d7:af:55:80:3a:c5:9a:16:cf:68:eb:1a:16:05:
         aa:fe:b0:ee:95:b4:a9:ab:3d:24:8e:cf:ac:05:e5:10:13:4f:
         59:d6:18:42:52:c2:39:10:9a:5e:4d:2a:30:f7:08:bd:e4:b9:
         79:83:5f:13:23:b0:a8:2b:d1:33:1d:90:5b:9f:cf:52:a3:85:
         b9:eb:21:29:d8:9a:27:8b:99:91:15:b3:e2:db:4e:72:63:bd:
         f6:59:8d:47:a5:de:af:6c:53:13:9e:f4:10:95:d4:9b:fa:1c:
         18:2b:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:20:26 2025 by rpki-client