Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/323830333a633339303a3a2f33322d3438203d3e20323733303133.roa
File:                     323830333a633339303a3a2f33322d3438203d3e20323733303133.roa (raw, json)
Hash identifier:          lDnjpbO7/tGbG8jh0+fryDKYSvl34wfFaaYjg+KmMs0=
Subject key identifier:   77:25:0D:0A:61:BE:C1:54:A5:B9:0F:4C:EC:3A:02:6A:DC:9A:4E:A0
Certificate issuer:       /CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
Certificate serial:       19F7949BDA7A82FF6C2235D454AC8A783F9EB3DD
Authority key identifier: 31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/323830333a633339303a3a2f33322d3438203d3e20323733303133.roa
Signing time:             Tue 04 Feb 2025 18:39:23 +0000
ROA not before:           Tue 04 Feb 2025 18:34:23 +0000
ROA not after:            Tue 03 Feb 2026 18:39:23 +0000
asID:                     273013
IP address blocks:        2803:c390::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f7:94:9b:da:7a:82:ff:6c:22:35:d4:54:ac:8a:78:3f:9e:b3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9
        Validity
            Not Before: Feb  4 18:34:23 2025 GMT
            Not After : Feb  3 18:39:23 2026 GMT
        Subject: CN=77250D0A61BEC154A5B90F4CEC3A026ADC9A4EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:bd:c7:62:c3:71:e4:72:98:f1:eb:6a:a9:
                    b4:b7:30:ed:80:6a:64:9e:aa:c7:1f:8b:0b:57:45:
                    41:0e:ae:a2:74:d3:8e:5a:44:cd:bd:e2:39:9f:75:
                    d2:5a:7e:06:65:57:f2:12:61:36:86:bb:91:fd:85:
                    96:06:df:f5:6b:3d:e3:55:2e:b6:7d:bb:13:78:e7:
                    26:08:10:5c:de:3b:4d:65:cf:42:0b:77:14:04:84:
                    f5:2f:ee:4b:a6:f5:97:ff:b0:b6:4b:51:d5:ea:fd:
                    86:35:f3:73:cb:82:8e:06:67:d6:35:9b:05:8b:b3:
                    6d:4a:7c:6d:b4:35:9a:9b:fd:74:3e:98:09:dc:50:
                    ec:ff:ec:33:b6:92:6e:51:1e:12:aa:fa:bd:ec:aa:
                    02:7d:4a:af:ca:03:c5:89:02:c1:ab:1a:b5:e5:8b:
                    3a:19:17:03:8c:14:55:d9:10:d0:06:57:06:74:ee:
                    6f:12:41:18:75:c7:1c:5b:d6:79:6d:46:13:d6:53:
                    c2:43:34:e9:fa:79:66:47:8d:7b:01:ed:20:da:0f:
                    a2:78:b1:4f:44:6d:2b:d5:91:e9:b6:13:29:f3:b4:
                    c9:6c:6d:a3:be:6f:b8:c8:5d:f6:f3:e4:ed:3d:d0:
                    4e:2c:59:09:14:c9:97:75:61:33:c2:b4:27:5b:de:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:0D:0A:61:BE:C1:54:A5:B9:0F:4C:EC:3A:02:6A:DC:9A:4E:A0
            X509v3 Authority Key Identifier:
                keyid:31:DB:F2:C4:90:8B:5E:E6:D3:D3:4A:E4:DE:B8:17:0B:E6:2F:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31DBF2C4908B5EE6D3D34AE4DEB8170BE62F23A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8AB333B3B320917476A9914BFFE9F3EFA4A273E2CF54837E0F7F2542699C58AB/0/323830333a633339303a3a2f33322d3438203d3e20323733303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c390::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:60:71:fd:ac:92:a0:07:30:c3:e7:dc:30:c3:9e:43:e4:6a:
         c6:42:37:e4:6a:b3:4e:b5:9c:d5:a9:03:c2:75:51:ca:30:81:
         01:b6:b1:ef:78:a7:dc:cf:df:e1:5b:2f:ef:b7:c0:fd:09:ad:
         b3:42:3c:84:7a:33:19:c2:f7:9d:ac:61:73:c7:1c:63:16:0f:
         2f:f3:f6:78:03:b4:96:50:63:42:9d:a8:95:39:62:1f:cb:2b:
         cb:5d:a1:c7:46:af:07:14:06:bb:86:fc:24:9b:4c:56:06:c4:
         b6:d2:40:68:cc:fe:36:7d:db:a9:45:68:85:bf:d2:ba:2c:9d:
         41:40:19:fd:5c:b9:46:8a:62:fc:c4:01:60:2d:db:24:3a:65:
         33:bd:b0:20:8d:c8:c6:9d:8f:5d:bf:e8:0d:e0:67:79:48:4f:
         3b:f7:90:09:fe:8f:7f:98:37:35:f7:10:c9:90:86:33:bd:6c:
         22:d0:42:6b:73:27:e0:b1:8b:1b:e8:ab:90:45:d7:8b:88:89:
         62:4b:3a:2c:dd:9a:35:03:28:75:0b:4c:3e:f3:7b:06:0a:a1:
         db:49:00:fd:08:c7:34:66:e2:ff:82:77:41:4a:ba:f5:5c:51:
         9b:12:be:6e:94:b0:60:55:32:f5:88:68:a9:0c:05:76:53:6c:
         2f:d2:28:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:44 2025 by rpki-client