Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/678910287DB30E95BB634036271485D91041A498EDC277A95898C5BC8DD82AC7/0/323830333a633631303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a633631303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          /3kHKEdN0ZAUxkEDnTJFjhte75Oex5AQWI6yVvGhxEI=
Subject key identifier:   59:31:C4:FB:26:DD:F6:CC:A6:75:C5:60:E4:C6:E3:D4:ED:25:F2:D9
Certificate issuer:       /CN=4F7A09024DBFDCE425E0AF48A86DA754BF686A0F
Certificate serial:       4952EC088A7978BB38C5C59389D53CB1A92B918F
Authority key identifier: 4F:7A:09:02:4D:BF:DC:E4:25:E0:AF:48:A8:6D:A7:54:BF:68:6A:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F7A09024DBFDCE425E0AF48A86DA754BF686A0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/678910287DB30E95BB634036271485D91041A498EDC277A95898C5BC8DD82AC7/0/323830333a633631303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:31:25 +0000
ROA not before:           Tue 04 Feb 2025 18:26:25 +0000
ROA not after:            Tue 03 Feb 2026 18:31:25 +0000
asID:                     264668
IP address blocks:        2803:c610::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:52:ec:08:8a:79:78:bb:38:c5:c5:93:89:d5:3c:b1:a9:2b:91:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F7A09024DBFDCE425E0AF48A86DA754BF686A0F
        Validity
            Not Before: Feb  4 18:26:25 2025 GMT
            Not After : Feb  3 18:31:25 2026 GMT
        Subject: CN=5931C4FB26DDF6CCA675C560E4C6E3D4ED25F2D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:b7:cb:f8:44:22:15:ea:40:40:8d:7b:b2:
                    1a:f9:bb:92:d2:0d:5c:ef:cf:b4:e5:8f:34:42:8b:
                    52:3e:6c:51:45:16:42:de:15:4d:0c:42:05:7d:ec:
                    d8:6f:1b:55:b9:99:be:3e:d7:da:5c:4b:37:e2:25:
                    8b:1e:5c:b1:0a:3d:70:30:6c:58:2f:69:57:bf:10:
                    3c:71:89:3c:45:2a:4b:57:b4:b8:7b:0a:36:f2:48:
                    eb:66:68:3f:ff:30:04:aa:1e:66:77:27:47:50:99:
                    02:53:d3:b1:67:f5:2a:dd:f6:a1:fc:53:a9:ce:8c:
                    6b:cf:34:59:a7:d4:78:14:d0:bb:a1:df:d3:4c:aa:
                    bf:bd:51:c2:d3:7b:09:d0:80:10:c6:5c:fb:1e:1b:
                    19:63:4b:db:5b:d3:99:75:1d:7d:1a:be:b1:82:6f:
                    04:44:2b:ff:21:b5:ab:d7:31:8f:f5:7c:71:a0:4c:
                    e2:d1:84:8f:1f:ff:63:1f:31:14:ba:7d:9d:98:55:
                    36:2c:49:e0:01:49:8d:f8:d5:e1:6c:1f:02:a6:06:
                    f3:bc:0f:0c:0b:de:bf:96:cb:90:1d:fd:24:fc:f0:
                    28:f2:6c:2a:4b:2f:d1:cf:12:26:a8:50:b4:2d:2b:
                    53:b9:df:c0:73:ab:33:a2:b0:1e:23:67:90:d6:fd:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:31:C4:FB:26:DD:F6:CC:A6:75:C5:60:E4:C6:E3:D4:ED:25:F2:D9
            X509v3 Authority Key Identifier:
                keyid:4F:7A:09:02:4D:BF:DC:E4:25:E0:AF:48:A8:6D:A7:54:BF:68:6A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/678910287DB30E95BB634036271485D91041A498EDC277A95898C5BC8DD82AC7/0/4F7A09024DBFDCE425E0AF48A86DA754BF686A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F7A09024DBFDCE425E0AF48A86DA754BF686A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/678910287DB30E95BB634036271485D91041A498EDC277A95898C5BC8DD82AC7/0/323830333a633631303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c610::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:d1:bf:e6:93:74:1e:fc:60:86:5b:e3:84:59:e8:a2:35:bd:
         84:54:54:d7:c2:de:96:2f:59:b2:34:69:26:0d:3a:16:0b:29:
         70:70:4c:bb:c0:4e:53:a1:ba:ee:d7:70:b6:26:f0:e2:7f:69:
         36:ba:9f:44:f2:1c:4a:7d:f7:23:7c:31:f5:a7:c2:36:51:b1:
         1e:5f:06:17:8e:26:18:4b:25:bf:f7:3f:d4:8a:18:8b:80:d4:
         f3:d0:17:79:a2:30:c8:fe:4f:24:a8:fa:1b:5e:d4:2d:95:84:
         a2:c4:14:7a:68:bb:68:e0:e7:df:fa:7f:60:28:de:7e:63:80:
         6e:d9:e8:06:86:34:1d:55:89:c4:73:33:45:40:91:45:5a:b0:
         89:c6:0b:67:51:1f:21:3a:24:df:b8:2c:03:1b:3b:36:18:af:
         6c:86:61:2e:85:76:37:c3:1e:db:7f:6b:74:a4:88:76:30:8d:
         cb:77:16:fa:e9:81:54:10:fa:4b:84:38:43:26:82:42:61:99:
         1c:d4:9d:49:29:ac:10:16:dc:1d:da:de:bb:18:e5:8e:65:95:
         12:cd:5b:51:bf:65:ba:59:2f:c4:7e:2d:83:94:ad:a7:0f:14:
         38:fd:b9:90:b4:6e:24:22:f0:55:18:30:fb:66:a6:d4:be:c0:
         41:0e:17:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:40 2025 by rpki-client