Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/323830333a616230303a3a2f33322d3634203d3e203532343731.roa
File:                     323830333a616230303a3a2f33322d3634203d3e203532343731.roa (raw, json)
Hash identifier:          y7eXHjDtv9P7QTQdc4pxDl0c5rcLvr0jgI5z2aVo26E=
Subject key identifier:   79:99:51:63:76:E7:F3:B4:6B:72:F7:B3:6F:98:9E:8B:12:F3:69:51
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       5313C17CC414ACFD33A056E01CCF551A7C74EDFE
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/323830333a616230303a3a2f33322d3634203d3e203532343731.roa
Signing time:             Tue 04 Feb 2025 18:17:09 +0000
ROA not before:           Tue 04 Feb 2025 18:12:09 +0000
ROA not after:            Tue 03 Feb 2026 18:17:09 +0000
asID:                     52471
IP address blocks:        2803:ab00::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:13:c1:7c:c4:14:ac:fd:33:a0:56:e0:1c:cf:55:1a:7c:74:ed:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Feb  4 18:12:09 2025 GMT
            Not After : Feb  3 18:17:09 2026 GMT
        Subject: CN=7999516376E7F3B46B72F7B36F989E8B12F36951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:85:55:44:71:aa:c6:43:cf:35:b2:ec:c6:
                    73:7a:7a:1e:41:89:57:ef:17:f1:52:98:ad:34:cc:
                    21:8d:0b:ae:1b:03:45:8d:03:32:15:77:9f:de:5b:
                    3e:eb:62:5d:ae:78:7c:71:47:ff:43:a1:9a:0d:b7:
                    ce:f2:ea:64:a0:6d:ea:61:ae:8a:b7:e5:33:54:20:
                    ba:f0:4c:77:a5:2c:1a:b9:41:0e:cd:5d:71:bc:ce:
                    a8:08:b2:9c:ed:bf:6a:2f:1c:98:d6:1f:34:9d:72:
                    c5:63:d7:fd:3c:80:d2:78:fc:e4:87:38:d1:6f:91:
                    f2:d7:c7:fa:70:59:6a:da:d6:8d:7c:d5:d1:fd:ab:
                    45:57:42:a0:d7:1c:a4:1b:ed:4f:7f:11:76:02:08:
                    c5:32:af:73:02:f2:0b:39:b3:f2:74:40:04:f0:35:
                    a9:ac:f3:b3:95:d6:34:31:04:f0:0b:8a:e8:fd:bc:
                    d0:8c:9e:4b:1d:a5:49:c4:5c:ba:fc:fb:26:59:e5:
                    e5:3c:ce:b1:ff:9b:f5:7b:0d:60:c9:d4:4e:3a:31:
                    22:a2:d2:a0:63:ad:be:11:bd:b4:c1:46:45:4a:fe:
                    88:aa:b8:23:a6:57:13:e1:1a:f3:77:cf:ce:1b:c0:
                    31:93:f5:83:d0:12:04:2b:48:02:9c:0f:c3:f7:c7:
                    62:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:99:51:63:76:E7:F3:B4:6B:72:F7:B3:6F:98:9E:8B:12:F3:69:51
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/323830333a616230303a3a2f33322d3634203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ab00::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:e4:f1:f9:6d:94:1e:46:6c:6e:b4:85:be:63:46:8c:74:
         2a:34:3f:a8:f1:45:bf:38:19:da:bb:58:a6:3d:29:3e:73:cc:
         5e:58:48:01:07:5d:e9:00:70:94:1e:76:9f:78:6a:b5:e6:22:
         8d:6e:81:2b:5a:91:ff:80:71:05:1b:15:12:34:46:77:48:85:
         72:36:ee:c1:bd:21:c3:f2:62:72:ec:73:e0:4c:06:35:1c:a0:
         1a:06:12:96:ab:3c:f6:92:0c:f2:ee:ad:65:93:20:1e:58:b0:
         54:64:b0:39:52:8b:42:7e:4d:92:58:0f:50:2f:ad:1f:0f:79:
         63:57:0d:e7:c0:79:a8:0e:c0:bf:d9:e1:2d:e6:a7:76:5f:44:
         89:d1:f1:4a:94:ea:17:6c:58:7d:bc:50:1a:9a:e9:6a:e0:ab:
         2b:78:fe:82:b4:f7:85:8e:ce:c3:9f:c8:f5:89:6b:7b:60:55:
         15:11:88:cb:4f:0f:d9:6d:11:13:ef:34:99:e6:18:6a:6d:86:
         52:14:36:6d:bc:3c:f9:7f:3a:9c:aa:16:05:62:46:89:49:69:
         fe:fb:5c:98:41:38:8f:5b:fe:18:e6:45:fe:20:68:d2:01:76:
         5a:f4:42:0c:54:9a:0c:ec:ea:16:e4:52:c1:3c:e7:5f:17:6f:
         dd:c7:71:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:20:23 2025 by rpki-client