Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/323830303a6266303a3a2f33322d3438203d3e203237393437.roa
File:                     323830303a6266303a3a2f33322d3438203d3e203237393437.roa (raw, json)
Hash identifier:          trvpPCa0cblvppEkuhqcIFv3uuTBGbl/xlFsQ4t0gVY=
Subject key identifier:   E5:8A:2E:9E:B3:7F:06:55:1B:CC:C5:8E:21:FF:15:E8:CB:48:81:DD
Certificate issuer:       /CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
Certificate serial:       045AF4AB70C6BD21DA054309EB727BE98621DF04
Authority key identifier: 63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/323830303a6266303a3a2f33322d3438203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 20:01:57 +0000
ROA not before:           Tue 04 Feb 2025 19:56:57 +0000
ROA not after:            Tue 03 Feb 2026 20:01:57 +0000
asID:                     27947
IP address blocks:        2800:bf0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5a:f4:ab:70:c6:bd:21:da:05:43:09:eb:72:7b:e9:86:21:df:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639E50C67AC676F9C8404AC3A746CC4B724483E3
        Validity
            Not Before: Feb  4 19:56:57 2025 GMT
            Not After : Feb  3 20:01:57 2026 GMT
        Subject: CN=E58A2E9EB37F06551BCCC58E21FF15E8CB4881DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7c:98:b0:3c:74:bc:6b:f7:26:13:01:87:1e:
                    33:db:43:fc:85:7b:5b:6e:cb:7f:71:84:53:e2:fb:
                    31:ec:07:1c:f1:d9:38:c5:e9:7a:91:89:05:e7:32:
                    11:62:c2:49:98:f6:8c:b8:77:7a:d5:6e:8e:e7:7a:
                    86:d4:0b:55:b5:7f:31:12:f7:34:9f:6b:52:38:80:
                    af:9b:a2:e6:96:fa:24:51:f8:65:f0:5a:21:d7:bd:
                    bc:80:0b:40:fa:78:b6:1c:67:07:85:49:70:84:f3:
                    ac:aa:52:c6:63:02:26:b3:cb:27:cf:cf:d6:b5:b1:
                    4a:d4:e5:01:0a:de:66:85:02:8e:5b:09:e2:77:d0:
                    62:76:9e:db:f2:96:00:ea:7b:b3:96:cf:d9:03:f8:
                    dc:18:67:4c:cc:f6:a8:30:ff:45:a1:94:8d:68:c1:
                    5a:47:53:18:6d:88:34:39:b3:91:2e:86:09:17:d9:
                    94:e5:88:d2:0c:21:b6:14:90:0e:1f:57:bf:80:a8:
                    86:59:0d:37:c2:47:a2:ee:0a:87:7b:da:42:04:74:
                    dc:62:c6:ad:91:cc:b0:82:46:79:68:c3:5e:eb:bb:
                    ab:5a:d5:b0:cc:f3:25:02:4d:52:18:ab:d5:94:a3:
                    d8:33:f0:f3:87:ad:dc:3c:17:b1:c1:13:33:be:2c:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8A:2E:9E:B3:7F:06:55:1B:CC:C5:8E:21:FF:15:E8:CB:48:81:DD
            X509v3 Authority Key Identifier:
                keyid:63:9E:50:C6:7A:C6:76:F9:C8:40:4A:C3:A7:46:CC:4B:72:44:83:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/639E50C67AC676F9C8404AC3A746CC4B724483E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A7E9C6F49D37CAC4E698A4CEA7B1D069C6A263B3A2B414F1E18703C030A4FC9/0/323830303a6266303a3a2f33322d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:64:20:78:68:b2:7f:7d:fc:3b:55:fc:e3:9f:95:db:43:64:
         6d:3e:6d:0c:d9:46:e2:c9:c9:eb:7c:6b:ea:fb:99:fe:1b:2a:
         b0:2e:22:cb:15:b7:0c:e0:17:d0:65:60:92:9f:08:a2:38:23:
         85:98:d7:38:e0:44:4d:43:b4:23:9a:78:4d:34:52:86:fe:01:
         55:f2:36:e6:f7:99:ba:5f:82:18:d4:50:e1:b5:8c:d1:ba:67:
         ca:cb:fb:6c:59:cd:09:78:c3:b6:c3:ae:4e:8a:72:d2:c6:0e:
         ef:27:d9:96:86:da:86:1f:8f:6a:4d:70:9e:3e:ec:bf:ac:11:
         03:0b:af:d0:f8:0f:2a:74:35:a2:72:36:37:91:c0:83:ca:7b:
         fa:70:3d:fa:37:28:1b:81:d1:79:8b:08:ba:35:f0:b7:af:38:
         15:1c:60:b5:3d:a3:3d:10:dc:d0:32:55:ce:96:c9:a9:34:71:
         a6:ee:1e:eb:8a:a5:55:54:ce:17:8a:bd:5e:9c:51:4a:eb:45:
         f4:22:ec:ab:22:be:86:26:d2:72:ed:ad:b1:db:a2:f9:41:c5:
         47:6e:ad:00:31:5a:61:44:2d:b0:0f:88:e5:2b:c8:ff:0b:ce:
         08:56:5a:83:85:17:f6:0a:5d:80:2d:bb:91:03:fd:04:63:68:
         8b:34:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:00 2025 by rpki-client