Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa
File:                     323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa (raw, json)
Hash identifier:          9BWQduUrEuz6lDrZ3r9XoLYg4dyAvvWCagY8Pbb4VEs=
Subject key identifier:   A8:B3:64:C1:25:DF:43:9C:E7:AF:A0:27:A9:FC:D5:32:40:12:60:73
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       74D308B598D03332FCAEC212F70C96C8F0027E4A
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa
Signing time:             Tue 04 Feb 2025 18:53:00 +0000
ROA not before:           Tue 04 Feb 2025 18:48:00 +0000
ROA not after:            Tue 03 Feb 2026 18:53:00 +0000
asID:                     272848
IP address blocks:        2803:5200:6413::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d3:08:b5:98:d0:33:32:fc:ae:c2:12:f7:0c:96:c8:f0:02:7e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:48:00 2025 GMT
            Not After : Feb  3 18:53:00 2026 GMT
        Subject: CN=A8B364C125DF439CE7AFA027A9FCD53240126073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:30:1e:b6:df:38:b2:35:78:dc:b1:92:bb:
                    8a:9c:91:e9:53:48:cd:1b:ea:8c:6c:5a:5b:fd:22:
                    3c:69:66:d4:cd:3d:4a:0d:fb:ed:1f:40:98:d2:62:
                    29:9c:b1:49:d7:cd:91:a8:97:53:d4:f4:e2:2b:72:
                    3f:57:ad:39:c1:ae:89:18:a4:8e:ef:5c:52:3b:26:
                    72:ba:e5:17:a8:1c:31:10:a1:8d:53:4e:43:1f:4a:
                    f8:1c:e3:0d:bd:53:fb:a3:61:1a:72:a4:cc:ff:d4:
                    ea:72:4b:f6:da:32:7e:c4:56:34:d1:11:a8:1d:5c:
                    35:5e:ba:a3:0e:13:41:48:26:54:b9:50:8e:df:36:
                    d0:55:a7:9b:a3:33:bd:e9:25:04:24:01:23:4b:a0:
                    c1:60:2c:ba:78:c3:58:82:c6:d5:f4:05:42:be:f4:
                    9a:45:e6:03:9f:7b:66:47:9b:7f:e4:77:64:e9:6b:
                    1a:37:a1:a1:3a:7a:d8:01:2e:aa:ec:8c:a8:8e:49:
                    89:cc:fc:76:e4:4b:ca:1c:19:a3:ba:b0:13:b5:77:
                    85:16:bf:ae:b6:ac:d4:0f:7f:39:55:0b:0a:eb:81:
                    13:e2:95:93:0d:21:8c:63:1a:7c:3e:81:26:0f:44:
                    67:71:06:d1:ed:81:15:e2:d0:4d:a8:b9:32:04:bb:
                    ef:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B3:64:C1:25:DF:43:9C:E7:AF:A0:27:A9:FC:D5:32:40:12:60:73
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/323830333a353230303a363431333a3a2f34382d3438203d3e20323732383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5200:6413::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:2b:9c:53:06:c9:6a:14:2e:2b:54:22:19:4c:67:0a:33:24:
         08:5e:68:d6:55:ae:f0:3d:ae:69:51:62:56:24:00:32:24:cf:
         5f:c2:e6:f3:2b:21:5c:05:40:13:ec:5a:60:4c:b1:6c:11:4c:
         8c:bc:78:88:0d:68:50:0b:59:0f:fc:ca:04:7e:60:eb:0a:84:
         0c:87:e1:84:01:bd:ed:91:58:d6:96:19:b3:63:96:30:5b:88:
         d0:6f:dc:d7:aa:e0:63:3e:fb:33:cf:e1:7f:b1:d4:86:a3:4f:
         3f:d9:66:07:31:06:8f:a4:07:b1:f3:8d:df:59:99:1c:c1:06:
         80:60:12:57:42:31:01:13:60:37:e2:7b:1e:04:fe:ba:a9:65:
         45:bf:3c:25:94:0f:9b:fc:cf:df:f9:e7:6b:7a:fe:bd:d4:ec:
         18:e4:57:cd:a0:8e:b7:ad:8d:18:0e:05:87:ef:17:7b:7f:bb:
         d1:a3:7f:61:41:60:3a:11:b7:2a:65:1e:17:c6:cb:90:e0:54:
         32:c9:10:4d:1e:c9:8c:5d:b5:ee:6e:b1:ac:a3:80:92:6e:36:
         02:ef:d1:43:7a:cd:03:33:91:7a:cd:db:82:5d:e3:f1:52:d0:
         ff:04:24:3b:7a:32:07:e9:9b:78:82:00:e0:d5:21:e9:4c:18:
         ea:b0:6a:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:28 2025 by rpki-client