Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a313a3a2f34382d3438203d3e20323733303038.roa
File:                     323830333a623539303a313a3a2f34382d3438203d3e20323733303038.roa (raw, json)
Hash identifier:          oiEsiQ+3S5h8iAdu5lZgIPF0vhjbaBQjQprhERlnrsQ=
Subject key identifier:   C7:42:30:A2:6B:A2:6A:62:E1:89:A1:36:10:74:D1:AB:64:F4:2F:D1
Certificate issuer:       /CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
Certificate serial:       22291377BDE9F57D60D30D2FE7FABA2C139B11CF
Authority key identifier: D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a313a3a2f34382d3438203d3e20323733303038.roa
Signing time:             Tue 04 Feb 2025 18:08:55 +0000
ROA not before:           Tue 04 Feb 2025 18:03:55 +0000
ROA not after:            Tue 03 Feb 2026 18:08:55 +0000
asID:                     273008
IP address blocks:        2803:b590:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:29:13:77:bd:e9:f5:7d:60:d3:0d:2f:e7:fa:ba:2c:13:9b:11:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D68C275AE349DFCD32C558419A7893BADFF5F3F8
        Validity
            Not Before: Feb  4 18:03:55 2025 GMT
            Not After : Feb  3 18:08:55 2026 GMT
        Subject: CN=C74230A26BA26A62E189A1361074D1AB64F42FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:9d:b3:08:09:d4:e4:db:7d:19:31:dc:82:
                    0d:66:86:82:ad:ba:c3:a0:31:59:66:42:f7:74:00:
                    0e:8d:19:cd:47:d5:24:d0:e3:31:cc:ae:cd:5f:0a:
                    f3:67:56:bb:48:ba:ee:59:89:56:7f:e8:dc:c2:98:
                    fa:25:9b:0c:05:87:21:13:54:30:56:8b:1a:e3:7b:
                    30:3c:21:57:6b:5a:85:60:d7:51:e4:da:0e:a5:40:
                    63:77:81:45:1c:46:59:93:2a:69:b2:45:87:4e:ac:
                    b3:bf:11:f7:7d:44:e5:4c:e6:5d:27:e9:69:c8:9e:
                    7b:8b:95:0c:36:ce:44:2c:aa:32:42:10:cc:74:61:
                    b8:2f:94:28:80:a8:aa:1e:e9:b9:e5:cb:0d:3b:8b:
                    af:20:fb:3e:d7:69:86:bc:4c:50:e6:67:ed:62:ec:
                    da:c1:9c:09:03:56:3e:f0:dc:e5:08:85:74:6e:5b:
                    c5:13:4b:c8:be:c7:d7:d7:a0:61:64:4c:23:53:18:
                    1c:cd:ce:2d:57:fa:70:70:0a:1f:82:c3:86:aa:e4:
                    5f:a8:ef:c6:0f:8e:e0:9f:b1:b2:e2:b7:f0:dc:18:
                    c4:0d:e2:39:c3:e9:65:61:4a:ad:2d:97:d1:b0:3c:
                    16:e9:32:cf:ca:92:0b:13:98:19:7a:7f:dd:e1:f2:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:42:30:A2:6B:A2:6A:62:E1:89:A1:36:10:74:D1:AB:64:F4:2F:D1
            X509v3 Authority Key Identifier:
                keyid:D6:8C:27:5A:E3:49:DF:CD:32:C5:58:41:9A:78:93:BA:DF:F5:F3:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D68C275AE349DFCD32C558419A7893BADFF5F3F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/802672FE15624BDF705C3588B1C7767DD409D7594E5A7CC8FD3A384F7AA4E7EF/0/323830333a623539303a313a3a2f34382d3438203d3e20323733303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b590:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:79:af:5a:e9:3d:47:88:f3:c7:55:18:8a:32:5a:9a:8c:b7:
         7f:75:ae:56:9d:e0:1c:08:1b:08:4c:73:aa:6a:2a:1a:9b:27:
         84:aa:78:43:5f:10:01:ed:70:72:85:6f:b7:5a:e6:5c:84:d2:
         50:63:bf:44:67:c1:4f:ec:15:c9:bb:d0:17:fd:7e:6a:2d:5b:
         0b:92:4b:4c:dd:4b:8a:50:96:9d:73:c4:e8:dc:58:59:eb:5d:
         12:d5:6b:08:d3:3f:d8:0a:8f:4e:54:1b:52:c0:53:c8:f6:78:
         eb:c9:28:8a:c8:4e:61:e8:8e:1c:f7:56:0c:7a:ce:ae:56:76:
         5f:80:19:99:60:4c:80:f5:b5:ed:aa:0b:9f:35:86:ff:e8:00:
         4a:f7:68:e1:aa:2f:bc:44:1d:a9:86:96:bf:3b:14:12:1d:04:
         5c:20:0c:e8:26:0a:8b:ec:ee:b7:c1:74:05:c5:7a:1d:cb:97:
         f4:5b:15:86:fe:cf:c1:48:99:83:ff:3f:42:67:e1:5c:6b:69:
         89:aa:1a:b3:8f:b2:01:62:65:b3:7d:1c:e0:cc:d3:c0:5f:e8:
         7c:10:06:e0:68:02:5a:4a:07:4a:fa:22:0c:7a:b1:54:53:85:
         55:5e:30:3d:78:30:00:a0:5a:e1:58:b3:e9:3b:1e:95:24:4e:
         33:8f:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:17:25 2025 by rpki-client