Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7CDC557A8A274E3FA93FAF2180D41793753137637191F3C46DC9860D5D932A46/0/323830333a396339303a3a2f33322d3438203d3e20323732383338.roa
File:                     323830333a396339303a3a2f33322d3438203d3e20323732383338.roa (raw, json)
Hash identifier:          IZkNK3WcMmIxPHVIePhRI3cJ/3vfINkwgKtOEa0zujw=
Subject key identifier:   BF:64:23:45:E0:8C:19:E3:50:0D:37:A2:5A:88:04:30:67:2F:99:90
Certificate issuer:       /CN=C23C62029A23C1403C9359A3570A34E8A47D6452
Certificate serial:       3B50DF5D7751903903D9BFD46EE1F8A27A1EAB8A
Authority key identifier: C2:3C:62:02:9A:23:C1:40:3C:93:59:A3:57:0A:34:E8:A4:7D:64:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C62029A23C1403C9359A3570A34E8A47D6452.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7CDC557A8A274E3FA93FAF2180D41793753137637191F3C46DC9860D5D932A46/0/323830333a396339303a3a2f33322d3438203d3e20323732383338.roa
Signing time:             Tue 04 Feb 2025 18:32:34 +0000
ROA not before:           Tue 04 Feb 2025 18:27:34 +0000
ROA not after:            Tue 03 Feb 2026 18:32:34 +0000
asID:                     272838
IP address blocks:        2803:9c90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:50:df:5d:77:51:90:39:03:d9:bf:d4:6e:e1:f8:a2:7a:1e:ab:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23C62029A23C1403C9359A3570A34E8A47D6452
        Validity
            Not Before: Feb  4 18:27:34 2025 GMT
            Not After : Feb  3 18:32:34 2026 GMT
        Subject: CN=BF642345E08C19E3500D37A25A880430672F9990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4f:2d:e2:fd:aa:28:5f:9b:8f:fe:cd:6b:4b:
                    ca:7e:ed:17:b0:ae:5d:58:e4:42:bd:2a:27:5e:5b:
                    00:a4:2f:62:c5:46:35:e9:d1:de:f3:a6:0c:c8:14:
                    f4:f7:ab:e7:37:f4:b1:cd:b4:72:18:90:e1:9f:d6:
                    89:45:ae:3d:8d:74:a2:29:dd:3d:96:5d:b0:7c:ea:
                    94:e5:4e:bf:11:2f:be:8a:40:f4:f5:a6:c7:e3:e2:
                    76:f1:1d:f2:a5:57:e8:d8:2a:d2:a7:a3:5a:fd:d9:
                    69:4c:aa:15:5f:60:e3:ac:d5:9f:6d:34:d5:f8:b6:
                    3d:2f:97:85:fc:bc:b5:02:85:89:de:c4:41:8e:83:
                    be:5c:ee:b4:69:33:b5:90:0a:23:09:43:b6:46:4c:
                    d5:2d:1e:94:9f:72:bf:70:88:d4:15:2e:89:41:38:
                    5e:92:e4:da:81:2e:9d:6c:c6:d6:cd:49:5c:70:b8:
                    3c:8f:74:8f:eb:fd:24:fe:28:c0:e4:27:da:38:9e:
                    31:c3:ee:a4:86:4d:a8:a7:69:b2:27:9d:0a:e6:f9:
                    7d:b9:b4:a6:dc:47:65:c5:fa:16:87:64:5d:89:48:
                    63:4a:53:67:a8:e5:db:b3:83:5a:ae:f5:24:7d:86:
                    dd:73:6e:65:9c:10:0f:50:89:f3:4b:0a:92:bf:47:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:64:23:45:E0:8C:19:E3:50:0D:37:A2:5A:88:04:30:67:2F:99:90
            X509v3 Authority Key Identifier:
                keyid:C2:3C:62:02:9A:23:C1:40:3C:93:59:A3:57:0A:34:E8:A4:7D:64:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7CDC557A8A274E3FA93FAF2180D41793753137637191F3C46DC9860D5D932A46/0/C23C62029A23C1403C9359A3570A34E8A47D6452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C23C62029A23C1403C9359A3570A34E8A47D6452.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7CDC557A8A274E3FA93FAF2180D41793753137637191F3C46DC9860D5D932A46/0/323830333a396339303a3a2f33322d3438203d3e20323732383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:80:4f:17:95:bb:9e:fa:c5:dd:60:ab:c5:fb:60:a7:6a:cf:
         e3:67:32:b2:06:9b:33:e0:7a:b1:cd:9b:9a:af:c9:2d:82:d8:
         9a:2c:ab:2b:27:7c:ed:95:f3:0d:15:7c:67:38:35:3d:b0:36:
         23:53:95:0a:a4:3d:94:60:5b:28:3d:22:cd:ac:d0:7d:5f:35:
         2d:2d:18:f4:94:e7:8e:e6:b2:8d:d2:d2:53:ab:1a:00:11:78:
         a2:60:eb:3c:15:21:18:3b:d5:70:d0:3a:9a:6c:ce:52:9f:7d:
         c9:8a:2f:c3:f5:d2:2f:96:75:df:80:82:99:c9:cd:c4:31:6b:
         07:e3:17:d6:a0:be:55:ba:84:eb:19:e2:a6:85:22:d6:09:02:
         f1:3c:e1:4c:ee:38:bc:03:d3:4b:15:76:c9:ca:a8:5a:16:23:
         5e:de:f5:e8:57:f1:e9:72:f2:34:3c:6e:53:df:22:ed:4b:84:
         86:80:1e:88:61:11:a9:ef:06:04:f8:20:40:cb:a3:86:10:b1:
         2c:a0:e8:b3:32:c0:46:7f:32:ba:62:31:3b:55:27:86:2c:aa:
         95:a6:0d:0b:d1:23:c2:64:dd:c1:47:2b:b6:24:86:75:81:e8:
         fe:70:2a:30:05:3b:dc:c9:f9:9d:7b:3a:ba:2a:86:bc:66:8c:
         e5:d9:82:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:54:33 2025 by rpki-client