Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/789E8C4A8D8DB412BFB13F85C139ADEED0CEEA6CE19568962E35C32FB3AADADD/0/323830333a633435303a3a2f33322d3332203d3e20323733313236.roa
File:                     323830333a633435303a3a2f33322d3332203d3e20323733313236.roa (raw, json)
Hash identifier:          j1pVoTESbP3e1m5h5aJkRgQVhFA9MzMALkyRME14Wpo=
Subject key identifier:   3F:F2:64:D6:0B:05:9D:D4:7A:08:0C:38:F0:C2:5F:04:A0:7D:25:68
Certificate issuer:       /CN=C100C847F30EF569808A7AD42BF87A8AF5842CB1
Certificate serial:       F29BAF01967FF8F080B5B25261AC6BAE7F79D6
Authority key identifier: C1:00:C8:47:F3:0E:F5:69:80:8A:7A:D4:2B:F8:7A:8A:F5:84:2C:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C100C847F30EF569808A7AD42BF87A8AF5842CB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/789E8C4A8D8DB412BFB13F85C139ADEED0CEEA6CE19568962E35C32FB3AADADD/0/323830333a633435303a3a2f33322d3332203d3e20323733313236.roa
Signing time:             Tue 04 Feb 2025 18:31:26 +0000
ROA not before:           Tue 04 Feb 2025 18:26:26 +0000
ROA not after:            Tue 03 Feb 2026 18:31:26 +0000
asID:                     273126
IP address blocks:        2803:c450::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f2:9b:af:01:96:7f:f8:f0:80:b5:b2:52:61:ac:6b:ae:7f:79:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C100C847F30EF569808A7AD42BF87A8AF5842CB1
        Validity
            Not Before: Feb  4 18:26:26 2025 GMT
            Not After : Feb  3 18:31:26 2026 GMT
        Subject: CN=3FF264D60B059DD47A080C38F0C25F04A07D2568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3c:bc:23:62:d4:73:4d:ec:8e:46:43:41:70:
                    37:84:76:cc:99:e9:66:20:aa:b5:1f:b1:97:a5:bf:
                    97:e6:6d:a0:cc:ec:8e:7e:80:bd:5e:80:31:99:bb:
                    89:83:85:a1:e3:d6:02:4d:ca:6a:c3:87:86:78:a8:
                    35:93:07:49:fa:60:97:41:fd:7c:c4:0f:6c:e3:db:
                    fa:02:66:02:3d:47:44:7b:82:7d:a2:dc:50:1b:bb:
                    6b:a1:b9:63:e6:42:73:61:5c:91:61:97:20:3a:ef:
                    26:4a:df:ae:5a:7c:7d:64:33:1d:13:61:98:ab:8f:
                    54:d7:9e:07:4d:4c:16:a2:06:36:58:ab:2a:e6:5e:
                    8f:4b:9e:04:43:6a:32:8c:df:2f:80:c1:60:e8:cd:
                    47:bb:04:0e:d9:6c:3a:99:b0:5d:fe:5d:6c:71:bb:
                    c1:42:1a:7e:05:70:0b:e6:c0:e4:c6:b8:d6:f0:2a:
                    6d:07:de:df:af:72:48:7d:ea:7c:52:df:22:f6:f6:
                    1d:b7:36:c3:89:d7:38:8c:6b:60:ab:fd:b2:7b:a6:
                    2f:1e:a2:17:af:c8:51:6a:18:c9:fe:c6:0d:30:df:
                    9d:01:aa:87:f4:78:f3:31:8f:e9:53:b9:0a:b5:a6:
                    aa:1e:0f:ea:34:4f:6a:68:92:80:ed:3d:ff:d1:c7:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F2:64:D6:0B:05:9D:D4:7A:08:0C:38:F0:C2:5F:04:A0:7D:25:68
            X509v3 Authority Key Identifier:
                keyid:C1:00:C8:47:F3:0E:F5:69:80:8A:7A:D4:2B:F8:7A:8A:F5:84:2C:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/789E8C4A8D8DB412BFB13F85C139ADEED0CEEA6CE19568962E35C32FB3AADADD/0/C100C847F30EF569808A7AD42BF87A8AF5842CB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C100C847F30EF569808A7AD42BF87A8AF5842CB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/789E8C4A8D8DB412BFB13F85C139ADEED0CEEA6CE19568962E35C32FB3AADADD/0/323830333a633435303a3a2f33322d3332203d3e20323733313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c450::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:8e:0f:01:18:90:98:22:61:73:f8:bc:10:4d:1b:26:03:11:
         5e:ab:5f:24:c6:8f:83:fa:0e:67:af:e9:c7:14:a4:d5:da:74:
         f0:97:a3:58:89:9d:a1:dc:83:0f:c7:3d:5b:7b:2d:ca:9f:8b:
         99:fe:75:e5:af:a8:de:c3:13:66:ea:9b:99:a9:02:cc:eb:62:
         af:19:bb:38:33:71:7c:d5:02:ca:c8:47:02:2a:82:dc:d3:8d:
         1b:31:27:00:4b:c7:4c:a2:b2:4a:2c:dd:de:ca:4e:33:06:53:
         e6:21:01:f5:94:42:ed:c0:b5:14:79:cc:6b:9d:9b:52:f6:1c:
         9d:af:3f:6a:0b:78:8e:3f:5b:f2:e6:e0:9c:82:5b:46:68:76:
         f4:ec:f3:20:d7:87:87:8c:9b:7e:48:56:03:db:98:c1:c8:0c:
         a2:dc:10:df:73:24:f4:45:03:a3:77:43:b9:04:34:be:0a:fc:
         c7:04:3a:09:de:7a:75:f5:75:ea:24:4c:1b:4c:f0:7d:d6:96:
         5c:7a:66:bb:87:cd:f9:c6:b6:bd:ed:97:68:c0:da:49:b2:fb:
         06:d7:c9:33:87:96:b4:3a:a2:8c:b7:0b:d8:28:f9:45:e4:89:
         91:0b:f1:99:07:73:93:3b:56:83:89:65:f7:b5:65:ac:c1:83:
         3b:7b:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:39 2025 by rpki-client