Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f33322d3332203d3e20323032343030.roa
File:                     323830333a323931303a3a2f33322d3332203d3e20323032343030.roa (raw, json)
Hash identifier:          vXBeiX0779zyYiv7AgTDoRl0d0OxYkwmULkPIj2weJA=
Subject key identifier:   A6:E8:BE:5C:C1:19:62:E1:EB:5D:BE:1D:A6:2C:8D:74:9B:C8:1F:93
Certificate issuer:       /CN=57A629CEA654B6DF75A8F8D31C9F9809008350C8
Certificate serial:       288F3E7A6AAC8FE2196F24E788E6F806981A050A
Authority key identifier: 57:A6:29:CE:A6:54:B6:DF:75:A8:F8:D3:1C:9F:98:09:00:83:50:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f33322d3332203d3e20323032343030.roa
Signing time:             Tue 04 Feb 2025 18:55:07 +0000
ROA not before:           Tue 04 Feb 2025 18:50:07 +0000
ROA not after:            Tue 03 Feb 2026 18:55:07 +0000
asID:                     202400
IP address blocks:        2803:2910::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8f:3e:7a:6a:ac:8f:e2:19:6f:24:e7:88:e6:f8:06:98:1a:05:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A629CEA654B6DF75A8F8D31C9F9809008350C8
        Validity
            Not Before: Feb  4 18:50:07 2025 GMT
            Not After : Feb  3 18:55:07 2026 GMT
        Subject: CN=A6E8BE5CC11962E1EB5DBE1DA62C8D749BC81F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:d9:c3:0c:28:e1:61:45:07:0d:22:24:34:
                    ff:bb:b4:58:90:88:41:82:16:f0:7e:c6:c3:85:5a:
                    a9:5a:12:d8:26:b9:d4:0c:f7:b6:9e:6c:02:ff:e8:
                    fa:a0:0d:21:e2:16:bf:46:bc:9d:17:ba:38:3e:9d:
                    8a:71:14:48:7b:8e:d6:c0:66:81:1a:93:a3:e1:93:
                    61:4e:2e:90:23:46:44:2b:1f:18:13:2f:d2:ed:39:
                    c4:5b:dc:86:68:a4:0d:ff:9a:da:85:ef:68:da:54:
                    50:23:dd:e3:26:e8:78:1e:48:cf:46:d5:72:1c:6a:
                    ed:bd:1b:1f:4d:5d:54:47:ef:72:7f:9e:bf:dc:57:
                    40:cb:b6:f3:f4:02:58:26:23:39:7d:12:ab:97:97:
                    07:04:f3:89:8c:92:db:df:9d:4e:05:65:b0:49:f1:
                    06:56:a5:f3:41:e6:91:b0:4f:83:0d:1f:43:36:d7:
                    8c:43:4b:2c:e6:6d:9d:40:fa:c6:01:c7:cb:3e:e2:
                    ba:ff:9c:ba:3c:84:a2:b3:13:69:8a:e9:f4:9f:01:
                    2b:6e:5a:54:0c:56:f1:f4:5f:fa:e0:df:10:f2:b8:
                    9c:bc:b7:bf:b4:9a:d1:62:2e:03:d9:54:d4:64:a6:
                    86:32:d0:e6:8a:3d:3d:61:3c:3a:fd:28:5d:e2:50:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E8:BE:5C:C1:19:62:E1:EB:5D:BE:1D:A6:2C:8D:74:9B:C8:1F:93
            X509v3 Authority Key Identifier:
                keyid:57:A6:29:CE:A6:54:B6:DF:75:A8:F8:D3:1C:9F:98:09:00:83:50:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A629CEA654B6DF75A8F8D31C9F9809008350C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C98E03E47130C5E83459F504FB83C9AD53BF23FB9DB43A7DA3492B1CB3A9984/0/323830333a323931303a3a2f33322d3332203d3e20323032343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2910::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:ec:3b:01:b3:8b:a5:09:d6:b1:6d:0a:91:56:57:92:f1:03:
         56:bd:2b:cc:06:27:b9:1d:d4:eb:55:d6:24:1e:e5:c1:07:98:
         7f:72:c5:61:01:a9:19:e9:14:91:52:38:44:1e:f6:ac:e8:2b:
         89:d0:59:e8:07:7e:cc:c9:59:15:61:fe:5b:6d:8b:69:32:ad:
         dd:8c:b1:eb:fe:5d:0c:62:c9:ca:52:71:26:65:f7:0d:a6:67:
         85:2c:39:dc:76:af:5d:02:77:57:42:97:ac:91:e6:b8:5d:14:
         8a:f2:a4:f5:62:25:5d:0a:97:fe:3e:94:e6:a5:c8:50:c2:cc:
         30:7a:a4:56:fb:10:8a:63:8e:11:5d:ec:f3:81:50:ca:8b:af:
         c9:8f:9d:53:b5:69:69:ee:de:c6:e0:48:7b:8a:72:2a:e8:d9:
         cb:1b:6d:ae:e5:28:d2:5f:ce:bf:a6:0b:b7:a0:0e:da:22:c4:
         a6:d0:2e:a2:13:7e:f2:24:2e:d1:a6:76:f6:65:7c:23:4f:3a:
         84:64:2b:a6:d9:65:5b:a8:44:36:c8:21:98:d2:6d:7a:9b:95:
         75:02:aa:8e:96:59:2e:3e:b5:e5:aa:6b:f2:a4:6d:82:c7:e8:
         8f:99:d9:35:ba:2e:0c:4f:b6:e8:c1:ef:cd:50:8a:27:f1:59:
         77:dc:1a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:50 2025 by rpki-client