Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130333a3a2f34382d3438203d3e20323639373336.roa
File:                     323830333a383936303a3130333a3a2f34382d3438203d3e20323639373336.roa (raw, json)
Hash identifier:          qE1cXgPGQE/sLJDIJw7Mo9299IXyKv4aJysuRIE0Jq8=
Subject key identifier:   0A:3B:F8:AB:DC:3B:9C:63:EF:EE:47:74:EC:DF:B7:C5:9A:5D:18:FF
Certificate issuer:       /CN=FCB083EE5CFFAFB10962A859AA22652832710154
Certificate serial:       6ED7BFAA351D7AB8464F1FC446A452A8BCE44651
Authority key identifier: FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130333a3a2f34382d3438203d3e20323639373336.roa
Signing time:             Tue 04 Feb 2025 19:58:53 +0000
ROA not before:           Tue 04 Feb 2025 19:53:53 +0000
ROA not after:            Tue 03 Feb 2026 19:58:53 +0000
asID:                     269736
IP address blocks:        2803:8960:103::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d7:bf:aa:35:1d:7a:b8:46:4f:1f:c4:46:a4:52:a8:bc:e4:46:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB083EE5CFFAFB10962A859AA22652832710154
        Validity
            Not Before: Feb  4 19:53:53 2025 GMT
            Not After : Feb  3 19:58:53 2026 GMT
        Subject: CN=0A3BF8ABDC3B9C63EFEE4774ECDFB7C59A5D18FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:5c:eb:c0:24:5a:5e:33:85:5c:de:14:5b:
                    f5:85:35:59:db:35:f8:20:0e:08:8d:1d:65:7d:8f:
                    d6:f1:6e:ef:bf:a5:cc:e7:a9:a9:fa:08:4b:7b:af:
                    eb:77:7f:e3:24:07:bd:91:04:07:8a:21:8a:d5:3a:
                    37:47:5d:5c:d0:34:d1:82:71:3b:1d:1a:44:d9:96:
                    1b:0f:ee:79:a0:a4:69:17:3e:36:aa:ff:76:c9:ee:
                    c3:36:57:56:a7:b6:b9:f4:15:3c:4d:35:d1:d2:b2:
                    0e:6c:33:a4:da:3c:5e:10:12:0c:28:74:8f:ae:57:
                    bc:db:c8:31:8e:86:b0:74:9c:34:29:43:0a:c1:58:
                    ff:d9:80:ae:92:40:71:0a:0f:07:64:f6:49:a1:f8:
                    c5:d3:af:9e:6e:ec:4c:c9:51:c6:7e:1d:7b:de:ad:
                    bd:c2:c3:f2:d9:ae:82:be:2e:6d:b8:d6:df:5f:bd:
                    8a:f7:53:fb:f9:43:e9:f4:ab:cb:11:d7:76:36:f1:
                    b6:aa:dd:10:a7:0b:9f:9c:ef:0a:ad:34:64:f4:c1:
                    af:19:5b:20:d1:d1:a1:3f:ba:d9:cb:a8:0f:5d:fb:
                    bd:c8:1e:ea:c6:3d:0a:4b:8c:40:cc:5d:e0:9b:70:
                    6d:06:ee:7c:37:5e:47:7e:fa:e7:ce:65:f3:19:80:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3B:F8:AB:DC:3B:9C:63:EF:EE:47:74:EC:DF:B7:C5:9A:5D:18:FF
            X509v3 Authority Key Identifier:
                keyid:FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/323830333a383936303a3130333a3a2f34382d3438203d3e20323639373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8960:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:fd:07:ae:24:89:ab:3e:18:92:7c:b8:30:04:af:48:30:5f:
         f4:b2:7a:8d:8d:da:1e:19:5e:63:4b:02:c9:15:f2:3a:c1:71:
         b5:10:29:ce:53:79:a1:32:8d:15:bd:4d:72:9c:d6:c8:5d:16:
         0f:ec:78:ee:19:34:d3:55:61:e4:d3:db:97:41:e4:cc:32:1f:
         63:a9:7f:c5:4d:79:9a:1a:d2:c1:db:c7:1e:39:4c:7c:d1:7a:
         82:22:c9:b5:99:74:a4:8f:67:45:d5:5b:33:ff:0d:94:7f:ab:
         fb:bd:4d:68:3b:5b:76:b9:87:98:c3:90:28:c8:97:cb:be:65:
         61:9d:0e:8e:9c:56:4e:0e:b6:8e:a3:fa:39:3c:ff:bd:65:18:
         98:75:8d:7b:3b:29:8e:ac:cd:b0:f0:38:39:73:45:23:15:31:
         84:f0:b9:94:a1:d2:85:2d:27:28:86:83:54:ca:5b:5f:da:9e:
         47:bc:2a:97:9b:1c:f4:f7:61:99:51:82:c1:94:e7:05:e6:75:
         4f:47:70:d8:50:92:80:dc:51:01:e6:c8:57:50:6a:e3:9a:5a:
         c5:a7:11:c7:47:2f:8a:c7:95:f9:4e:ca:06:a8:40:30:b0:1f:
         30:66:98:2e:27:d5:b2:55:20:9b:92:03:95:82:25:8a:12:49:
         ab:b7:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:07 2025 by rpki-client