Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3a2f33322d3332203d3e20323634373431.roa
File:                     323830333a373734303a3a2f33322d3332203d3e20323634373431.roa (raw, json)
Hash identifier:          kt1KJPzHcreWPmFi7tFr5ruAo3tkbZrNuWnqxVMx0oI=
Subject key identifier:   FD:45:C0:44:72:98:99:51:72:EE:22:FC:2E:A3:EC:C5:0F:9B:61:B9
Certificate issuer:       /CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
Certificate serial:       0CF9761EAF60CABC053E64F434CCAE0B51891A66
Authority key identifier: E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3a2f33322d3332203d3e20323634373431.roa
Signing time:             Tue 04 Feb 2025 18:18:28 +0000
ROA not before:           Tue 04 Feb 2025 18:13:28 +0000
ROA not after:            Tue 03 Feb 2026 18:18:28 +0000
asID:                     264741
IP address blocks:        2803:7740::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f9:76:1e:af:60:ca:bc:05:3e:64:f4:34:cc:ae:0b:51:89:1a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
        Validity
            Not Before: Feb  4 18:13:28 2025 GMT
            Not After : Feb  3 18:18:28 2026 GMT
        Subject: CN=FD45C0447298995172EE22FC2EA3ECC50F9B61B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:a7:b3:86:bc:51:2c:ac:69:e1:2e:bc:f5:
                    94:33:44:7b:0b:4a:57:48:9b:9b:aa:fb:20:53:4d:
                    dd:eb:7d:94:76:d9:3b:98:4e:11:bc:73:56:a4:dc:
                    c8:20:f6:1d:90:39:53:76:4c:4b:a3:72:b0:e6:f4:
                    07:c4:09:9c:4b:f9:cc:93:ce:74:91:fc:0c:0b:28:
                    f1:bd:0c:40:26:fb:de:c6:5c:02:36:99:3f:01:df:
                    a9:3a:a1:67:56:d6:a8:95:c7:86:65:04:41:f3:18:
                    db:c1:f1:e7:1d:ab:4b:15:44:2e:27:2e:51:d3:48:
                    f5:d6:a8:91:a4:d1:c5:ed:1b:cc:54:0a:cb:6c:9f:
                    97:2f:89:da:a3:1a:4e:b8:08:e8:a4:34:c1:15:50:
                    6d:2a:e9:8c:30:d5:00:10:f1:08:ef:9e:2a:29:66:
                    8f:00:9c:92:e6:2b:3e:a7:71:af:62:c4:95:73:81:
                    07:fd:82:d5:d3:79:59:96:be:c1:39:1b:c2:e9:36:
                    33:1d:18:48:93:7d:2c:45:e1:67:69:69:46:65:17:
                    d1:08:70:44:e1:37:27:08:8d:3b:38:05:e0:04:05:
                    ce:e6:b3:15:09:53:5c:d2:f4:e0:56:60:87:3b:f6:
                    a2:67:49:bb:33:43:73:8e:3f:75:26:f5:af:95:d7:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:45:C0:44:72:98:99:51:72:EE:22:FC:2E:A3:EC:C5:0F:9B:61:B9
            X509v3 Authority Key Identifier:
                keyid:E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/323830333a373734303a3a2f33322d3332203d3e20323634373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7740::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:de:50:3b:2d:b1:26:36:3c:7f:2c:32:a6:74:cd:a7:41:
         94:aa:d1:71:b4:cf:53:9c:45:95:ad:4f:12:42:7b:c2:e1:fb:
         d1:9c:ff:cd:43:eb:c7:23:b6:d7:be:d0:67:5a:bb:b6:91:35:
         1b:88:3c:8d:fa:ce:4d:51:02:59:25:d3:3d:ab:83:47:90:f5:
         67:4c:62:d1:0f:3f:80:3a:ed:df:eb:00:19:0f:a4:fe:90:e5:
         1d:f3:d1:8c:f3:15:e2:cf:f4:53:ea:3e:4f:00:11:e4:6b:b8:
         89:a7:4a:8d:ec:1f:a4:8e:9e:ee:60:fc:1f:f8:51:5c:2d:18:
         7f:9d:fe:f5:d6:9d:86:42:40:50:6a:99:70:c3:45:d4:42:bb:
         0e:d6:c7:ab:52:91:ec:b0:cb:f1:29:95:72:0d:9b:33:ea:23:
         7a:13:6c:8b:42:6b:05:8f:aa:1c:fa:13:4a:7b:f8:99:a3:00:
         04:a8:ec:63:93:9c:85:43:e7:95:01:fd:ad:93:87:5d:18:d4:
         cc:f3:3c:f4:76:74:d8:67:b2:ad:d9:a7:8f:6f:5c:c1:ac:32:
         6d:23:62:56:e6:ee:24:e2:91:cf:e3:49:21:fc:24:cf:11:12:
         c7:c6:36:58:4c:dc:28:2b:1e:c4:69:ca:e7:50:5b:85:7f:0a:
         71:5a:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:38 2025 by rpki-client