Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431323a3a2f34382d3438203d3e20323732383438.roa
File:                     323830333a353230303a363431323a3a2f34382d3438203d3e20323732383438.roa (raw, json)
Hash identifier:          kn1dSTnTzbtRYjl7xgAycLz4N3rW488j0jZtRGK7V5c=
Subject key identifier:   3C:BF:2F:77:61:2D:9B:70:CD:FF:FC:64:51:51:9C:CB:49:0E:AE:49
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       0EED0825296DD3DC6DC09710863D7E82D8DD11FB
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431323a3a2f34382d3438203d3e20323732383438.roa
Signing time:             Tue 04 Feb 2025 18:53:02 +0000
ROA not before:           Tue 04 Feb 2025 18:48:02 +0000
ROA not after:            Tue 03 Feb 2026 18:53:02 +0000
asID:                     272848
IP address blocks:        2803:5200:6412::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ed:08:25:29:6d:d3:dc:6d:c0:97:10:86:3d:7e:82:d8:dd:11:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:48:02 2025 GMT
            Not After : Feb  3 18:53:02 2026 GMT
        Subject: CN=3CBF2F77612D9B70CDFFFC6451519CCB490EAE49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:e3:f9:9a:21:7b:80:0c:9c:a3:53:8b:72:
                    9e:8e:08:b8:d3:9f:97:b5:d2:12:8e:8c:92:84:4f:
                    94:1b:3d:64:ab:0d:c9:18:6e:51:e8:f8:10:75:c4:
                    85:f3:5b:42:13:81:36:f5:81:c2:d0:4b:b4:39:e2:
                    55:61:17:ce:d6:9a:3f:24:57:57:95:88:78:e9:5c:
                    a3:58:80:85:b2:98:69:ad:17:0e:2d:9f:44:cc:72:
                    e6:8a:60:59:99:81:3c:3d:51:45:a9:9e:35:6e:be:
                    6d:df:92:0b:73:66:51:fc:1b:53:f4:5d:d1:83:b8:
                    10:56:05:ba:48:fc:5d:9c:1a:e4:bb:d3:da:bd:4f:
                    bb:6f:79:5d:93:58:4e:9a:3e:4d:25:ea:86:e5:fb:
                    cb:12:72:85:9e:f7:32:b6:c1:52:96:f2:48:11:56:
                    c0:87:de:ec:b1:7c:54:21:6b:98:27:b3:00:3a:f9:
                    aa:62:33:06:94:b4:24:12:6d:7c:b1:4a:ae:6e:43:
                    34:dd:88:be:b5:0f:f6:3f:7a:9d:fd:05:a9:78:4d:
                    03:05:0c:16:84:1c:72:a0:df:9a:1f:22:1c:73:aa:
                    b3:99:f5:d6:ac:2a:93:8c:78:05:fa:27:bc:18:a4:
                    15:b1:bd:0a:70:31:17:db:e2:f2:fd:03:9d:e2:6f:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BF:2F:77:61:2D:9B:70:CD:FF:FC:64:51:51:9C:CB:49:0E:AE:49
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431323a3a2f34382d3438203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5200:6412::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:6c:11:34:f5:0a:c4:da:e1:41:7b:eb:4d:13:58:a9:49:f2:
         ef:05:e2:02:d3:c9:23:d1:60:49:ba:20:48:e1:13:64:8f:db:
         6d:88:f2:e6:e3:11:48:2c:b0:e5:c5:4d:44:19:21:0b:8e:ff:
         23:c9:16:58:b2:55:03:a0:39:43:c1:86:b3:0e:4c:41:ef:18:
         3a:17:ee:dc:8e:70:14:ff:d7:a9:91:90:3a:43:c9:cb:9a:14:
         2a:fe:38:4b:17:df:31:2c:35:b7:74:96:90:82:0f:cc:a2:8f:
         6b:9b:fe:b1:7a:01:fc:22:95:91:eb:60:64:96:88:5f:21:5d:
         40:f7:4e:61:f7:37:0a:a6:12:4a:3b:9b:4d:20:4a:48:3f:d8:
         9f:0a:98:9a:42:d9:9c:f0:5e:78:fb:a3:70:46:ca:3d:78:78:
         ed:2f:c7:bf:1c:ba:e1:ba:cd:61:e5:48:39:7f:32:11:28:ef:
         6e:40:85:2f:c7:f0:be:37:63:87:54:5a:09:be:c2:90:58:65:
         46:8f:4a:54:6d:68:89:8f:67:13:b1:bc:1c:30:f6:30:2d:9f:
         e8:81:5b:35:91:c2:b3:ab:98:4d:5d:ff:9b:b6:31:00:02:3b:
         46:25:fc:7b:7b:b3:ab:69:3f:be:b2:b3:d7:52:f4:5d:c5:cc:
         d5:2b:33:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:25:41 2025 by rpki-client