Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/323830333a363630303a3a2f33302d3634203d3e203238303735.roa
File:                     323830333a363630303a3a2f33302d3634203d3e203238303735.roa (raw, json)
Hash identifier:          mhcQaTQXL1qTzYVflSFOiT6qA8z4F4HHsuahcBJBv58=
Subject key identifier:   BE:03:88:B5:C4:A4:49:B6:68:0F:E3:07:80:CB:39:38:ED:8C:7B:23
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       0C84E276FCB8C41A07729A803AA4044153368155
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/323830333a363630303a3a2f33302d3634203d3e203238303735.roa
Signing time:             Tue 04 Feb 2025 19:58:57 +0000
ROA not before:           Tue 04 Feb 2025 19:53:57 +0000
ROA not after:            Tue 03 Feb 2026 19:58:57 +0000
asID:                     28075
IP address blocks:        2803:6600::/30 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:84:e2:76:fc:b8:c4:1a:07:72:9a:80:3a:a4:04:41:53:36:81:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Feb  4 19:53:57 2025 GMT
            Not After : Feb  3 19:58:57 2026 GMT
        Subject: CN=BE0388B5C4A449B6680FE30780CB3938ED8C7B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:ae:f9:ad:59:1a:10:56:6b:67:0a:1e:50:
                    df:f7:3d:b3:c0:8e:b8:cf:ac:17:db:70:60:ae:2f:
                    47:54:5a:56:30:4f:9a:31:b0:a9:aa:5c:a1:e3:cb:
                    39:3b:a6:34:74:03:85:2e:f9:31:7d:d5:9c:23:f2:
                    18:9b:c6:e1:ea:61:e3:c7:9c:aa:bf:90:a0:81:89:
                    5c:3c:0a:41:f1:a6:49:ef:23:54:32:5a:8e:37:22:
                    62:ed:f0:d5:18:f5:0f:a6:e1:49:b8:dc:55:fb:d4:
                    a1:bf:4b:44:22:00:75:6f:f3:3e:07:72:7d:a1:5d:
                    f9:6f:95:d4:68:50:79:ba:f3:85:90:0b:3c:00:aa:
                    18:b0:8b:bd:9e:1f:8b:b4:db:9b:c3:01:68:9a:1e:
                    24:d5:2d:25:f5:d1:59:ee:07:7e:44:9f:10:76:10:
                    c6:4d:e7:c5:d9:da:e9:ab:67:1a:53:f8:45:73:cc:
                    12:b7:49:b5:b0:e0:30:21:36:11:48:ce:fc:00:54:
                    68:0b:70:53:c4:d7:07:60:29:7b:fe:73:e4:71:24:
                    5f:0f:df:c1:cd:01:15:60:00:87:b4:6f:1a:bb:a8:
                    f2:ce:0f:ff:ed:8a:ac:f3:b6:4d:d8:74:8b:5e:b3:
                    b4:2f:c1:64:1d:ed:96:b7:be:ba:76:7f:3d:2b:09:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:03:88:B5:C4:A4:49:B6:68:0F:E3:07:80:CB:39:38:ED:8C:7B:23
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/323830333a363630303a3a2f33302d3634203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6600::/30

    Signature Algorithm: sha256WithRSAEncryption
         94:40:2b:3f:41:88:b7:2d:4c:85:aa:39:bf:60:b7:4d:3b:fe:
         aa:28:e8:03:7a:72:14:b5:1e:06:2b:90:99:36:b7:0c:75:7f:
         50:1e:47:52:35:6f:84:49:1f:14:a0:5f:ce:14:7f:e4:20:5d:
         65:f3:bd:7a:74:24:34:8c:65:4a:f3:c8:75:43:f7:26:30:29:
         3f:97:dc:59:3d:81:cc:61:ff:53:5b:b0:02:b2:7b:60:47:c5:
         27:2b:4a:55:51:a2:2f:cd:5a:1e:f0:80:16:d4:90:d9:eb:b8:
         eb:f3:93:63:8a:f1:9d:11:8d:da:a0:5d:63:26:7a:36:92:d1:
         ec:bb:be:4a:56:75:e8:87:68:f4:18:f7:b1:69:4d:e6:0f:d5:
         85:b9:c1:6b:60:a7:d8:25:c9:59:ee:63:17:c0:93:e6:db:9d:
         15:11:de:e9:15:10:90:95:27:f9:9c:49:9c:a8:eb:f6:87:9d:
         13:79:32:e9:4d:40:d3:ea:97:7a:65:1e:04:9b:c6:66:cb:c3:
         31:06:e4:5d:df:d1:90:9f:c8:6d:e4:08:d3:e4:8f:70:46:fe:
         55:d7:26:42:bd:d0:f2:d9:f3:ca:58:20:58:79:1d:58:5e:f2:
         aa:67:03:89:97:aa:8c:d5:c7:9e:1d:63:d7:6e:e4:f1:3d:5f:
         1e:2c:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:10 2025 by rpki-client