Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82B4C75123E272130CF64240C39EA6FFC195C1843748EC079416BA4A787F4CE6/0/323830333a346136303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a346136303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          HjnVt3e5mr8sjhNGPIl3Cpz6ON74rOE/JI64AkgiT3Q=
Subject key identifier:   48:C6:0B:F8:AB:20:E1:83:E2:B1:A2:38:B1:DB:05:B4:AA:84:78:E9
Certificate issuer:       /CN=480123246439ED8773D61BEAC2230BFA389F0E23
Certificate serial:       6BD82176D0B5C8A43645BD567B76A31610A83E02
Authority key identifier: 48:01:23:24:64:39:ED:87:73:D6:1B:EA:C2:23:0B:FA:38:9F:0E:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/480123246439ED8773D61BEAC2230BFA389F0E23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82B4C75123E272130CF64240C39EA6FFC195C1843748EC079416BA4A787F4CE6/0/323830333a346136303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:43:36 +0000
ROA not before:           Tue 04 Feb 2025 18:38:36 +0000
ROA not after:            Tue 03 Feb 2026 18:43:36 +0000
asID:                     52468
IP address blocks:        2803:4a60::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d8:21:76:d0:b5:c8:a4:36:45:bd:56:7b:76:a3:16:10:a8:3e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480123246439ED8773D61BEAC2230BFA389F0E23
        Validity
            Not Before: Feb  4 18:38:36 2025 GMT
            Not After : Feb  3 18:43:36 2026 GMT
        Subject: CN=48C60BF8AB20E183E2B1A238B1DB05B4AA8478E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:7a:34:81:c7:f3:0e:52:74:5c:41:d7:58:
                    0e:6c:e7:95:bb:39:43:d0:e6:b0:9e:ee:5f:25:05:
                    eb:de:10:ed:48:e7:96:7b:58:9c:90:4d:b9:46:1c:
                    8b:bf:1b:26:5e:a7:16:d3:c1:bd:c3:af:9d:47:d3:
                    f6:f8:0b:af:3d:85:2d:54:2f:f9:98:59:15:f8:16:
                    6e:4f:ed:9a:79:1a:41:fe:74:5f:26:11:df:be:01:
                    a5:dd:10:b4:88:a6:2d:d8:20:03:2b:36:9e:34:e7:
                    0b:02:84:92:f4:65:6c:41:ad:83:30:63:ec:74:c8:
                    f2:1a:47:26:c6:27:c2:7b:02:82:0e:9b:4b:f8:80:
                    aa:55:1d:de:e9:76:26:0e:9b:e9:1a:1d:e7:de:91:
                    6c:44:99:42:a3:27:91:51:dc:c0:cf:1d:0b:10:58:
                    90:03:8a:c8:ee:3c:ef:47:7d:49:83:31:7d:06:43:
                    3d:c1:bb:c9:74:64:c9:c6:b7:bd:f3:ce:90:b7:77:
                    7d:79:1e:ee:3c:ee:0b:55:10:46:78:bd:76:d8:e2:
                    13:55:93:da:50:0e:86:79:d7:55:e4:f1:22:33:59:
                    82:d9:d4:ef:74:1a:8c:44:ee:2a:e0:d4:ac:b1:5b:
                    33:bd:79:1a:29:4e:7f:68:2b:6d:be:d5:66:1e:e8:
                    bc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C6:0B:F8:AB:20:E1:83:E2:B1:A2:38:B1:DB:05:B4:AA:84:78:E9
            X509v3 Authority Key Identifier:
                keyid:48:01:23:24:64:39:ED:87:73:D6:1B:EA:C2:23:0B:FA:38:9F:0E:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82B4C75123E272130CF64240C39EA6FFC195C1843748EC079416BA4A787F4CE6/0/480123246439ED8773D61BEAC2230BFA389F0E23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/480123246439ED8773D61BEAC2230BFA389F0E23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82B4C75123E272130CF64240C39EA6FFC195C1843748EC079416BA4A787F4CE6/0/323830333a346136303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:59:31:f2:d6:6d:2c:69:cc:43:77:2a:3f:5a:33:e3:a8:77:
         b6:95:d8:1d:80:28:36:b8:a6:9b:85:59:b4:9e:eb:02:04:38:
         4d:10:fc:d3:9d:d2:87:ff:63:99:79:4e:35:e7:77:70:f1:00:
         d7:3b:49:a5:05:e3:0d:61:89:de:5c:a9:4d:67:45:7d:88:3e:
         ca:36:45:13:a5:d3:23:b9:78:ac:90:6a:c3:b8:34:cf:d6:a3:
         22:02:44:85:64:df:64:87:e0:c3:19:29:c5:8c:79:49:0a:d6:
         9c:a6:c2:0f:a2:db:a1:4f:5a:4b:70:f1:f1:e2:70:41:ec:18:
         a9:af:fc:86:06:92:ec:03:f3:c9:e0:ad:e1:95:e8:4d:9f:41:
         d1:05:5c:3a:22:c4:cc:74:ba:c9:7f:03:db:2b:11:9f:3e:cc:
         b6:4d:36:27:77:c1:57:53:75:15:1b:8c:53:0c:64:99:fe:12:
         63:e0:7a:a2:5b:7e:0e:95:3d:97:cc:ab:aa:f2:db:22:47:25:
         db:da:27:44:5b:15:bc:ec:92:3f:e8:ac:8a:b8:97:38:3e:55:
         e5:63:1f:af:64:38:88:eb:15:1a:94:e9:d6:bb:4b:f1:dd:e2:
         d1:07:6d:1f:37:56:7f:10:bc:2b:72:2b:e0:e4:5e:56:5e:c8:
         e4:13:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:41 2025 by rpki-client