Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937353a3a2f34382d3438203d3e20323731383432.roa
File:                     323830333a623065303a393937353a3a2f34382d3438203d3e20323731383432.roa (raw, json)
Hash identifier:          RI6wCoSEqucgnbZJTN2RX6duEb5Jdrw7+ryd7b7ZkXs=
Subject key identifier:   6E:07:15:13:C9:1C:58:73:19:A8:7F:63:47:F5:7F:4D:35:B4:16:4F
Certificate issuer:       /CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
Certificate serial:       4E536BD86C0BD7062531F43F4591B25D2D9C7A56
Authority key identifier: B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937353a3a2f34382d3438203d3e20323731383432.roa
Signing time:             Tue 04 Feb 2025 18:13:18 +0000
ROA not before:           Tue 04 Feb 2025 18:08:18 +0000
ROA not after:            Tue 03 Feb 2026 18:13:18 +0000
asID:                     271842
IP address blocks:        2803:b0e0:9975::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:53:6b:d8:6c:0b:d7:06:25:31:f4:3f:45:91:b2:5d:2d:9c:7a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9661B0E7FC75ED767D18B56FC749BAED21FC195
        Validity
            Not Before: Feb  4 18:08:18 2025 GMT
            Not After : Feb  3 18:13:18 2026 GMT
        Subject: CN=6E071513C91C587319A87F6347F57F4D35B4164F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:cf:67:27:56:cd:ae:cb:37:d7:f4:6c:83:
                    09:8b:cf:e2:0c:30:91:8c:19:3e:30:80:b5:11:99:
                    40:5b:c8:84:6e:9a:4d:36:49:72:0d:da:78:f8:c6:
                    78:44:ff:f1:71:c0:8e:3d:4f:7e:79:0f:16:cd:f8:
                    1a:4c:7b:64:3d:7b:17:4c:c4:bf:74:25:b4:10:f8:
                    71:3d:08:5a:59:9a:8b:43:b9:3e:1a:3e:a1:81:92:
                    0c:41:b3:60:70:7f:4a:d8:44:dd:67:12:ed:4a:f7:
                    3a:d5:48:1b:0f:6e:e2:87:f0:64:5f:08:a7:2f:14:
                    5e:18:22:a0:33:4c:88:91:93:1b:ec:c7:70:c7:78:
                    8a:6f:fe:a1:d7:5c:bb:db:7f:50:74:a4:19:45:88:
                    9d:d0:81:96:8c:b4:ae:21:14:64:6e:98:2f:d2:ef:
                    f2:7a:0f:ae:dd:2f:c3:27:bd:d3:0f:25:00:3e:92:
                    b2:7b:71:71:ee:dc:5d:f4:1f:29:c7:f2:9e:b3:ad:
                    25:fa:dc:02:db:39:43:b8:6b:7e:4d:b3:ac:35:7d:
                    02:ef:7b:3e:13:d8:e7:38:34:e1:d4:8a:38:4a:c5:
                    76:aa:7f:a6:6b:9d:86:0e:e3:bc:b4:02:fc:d9:cf:
                    64:eb:73:ac:9a:90:d0:08:e9:f3:64:4b:ef:b0:0c:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:07:15:13:C9:1C:58:73:19:A8:7F:63:47:F5:7F:4D:35:B4:16:4F
            X509v3 Authority Key Identifier:
                keyid:B9:66:1B:0E:7F:C7:5E:D7:67:D1:8B:56:FC:74:9B:AE:D2:1F:C1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9661B0E7FC75ED767D18B56FC749BAED21FC195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67236B4CCEFBC43821AA42D45D1AF2A3747087F6A0476701E6F0A871E1E15BBF/0/323830333a623065303a393937353a3a2f34382d3438203d3e20323731383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b0e0:9975::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:e4:bb:70:10:99:13:81:b7:41:d8:83:28:34:09:25:ff:87:
         44:b0:21:aa:e9:3b:b8:65:25:71:25:85:cb:87:51:8c:21:2d:
         ac:3e:8d:01:56:51:bc:bd:04:db:60:d0:60:a4:98:b7:23:f4:
         c7:d9:21:a7:ae:48:96:90:d1:78:fc:92:d4:5d:12:e6:14:ab:
         65:c9:fb:ef:3d:d3:09:a4:6d:ed:4d:aa:db:a6:68:9f:4c:ec:
         97:b6:d8:c6:1d:70:95:5f:2d:6e:f4:93:0b:86:fc:8e:1d:52:
         8a:04:62:65:ef:d1:ea:58:1f:17:c8:af:0c:eb:8d:dd:40:f5:
         84:d9:1c:2c:33:e7:95:d8:e4:be:f0:1a:72:38:7d:cc:e4:2c:
         88:de:19:38:ff:bc:8d:90:58:0f:84:6b:b6:7c:0f:91:99:4d:
         4f:b3:3a:30:6f:9f:bb:f2:50:7b:29:e2:fc:92:74:13:f0:60:
         49:5c:d1:ea:f4:34:75:b4:9a:b7:b1:25:18:ca:9b:ab:06:04:
         ff:c5:44:dc:ec:fb:3b:42:db:af:4c:e8:c8:96:69:9a:05:7a:
         eb:b5:43:bc:fd:ba:96:a3:a2:a6:f7:48:cb:67:92:a3:23:da:
         8b:ad:24:2c:12:9c:b6:91:26:d0:be:c8:1b:83:e5:88:4f:c1:
         0e:20:34:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:48 2025 by rpki-client