Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa
File:                     323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa (raw, json)
Hash identifier:          +f9wBHWWXUo6nz5JfHrC4dnKHikzdeKDvNXNjfi7UZ0=
Subject key identifier:   A4:3F:B9:C0:39:A0:AA:7D:18:76:7C:42:7E:44:29:E8:53:46:7A:E2
Certificate issuer:       /CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
Certificate serial:       2CA57B3C5F8BBB51EA60786B450CF01433BB5D2B
Authority key identifier: 16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa
Signing time:             Tue 04 Feb 2025 18:29:17 +0000
ROA not before:           Tue 04 Feb 2025 18:24:17 +0000
ROA not after:            Tue 03 Feb 2026 18:29:17 +0000
asID:                     273113
IP address blocks:        2803:6850:9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a5:7b:3c:5f:8b:bb:51:ea:60:78:6b:45:0c:f0:14:33:bb:5d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642A8D6C14F94500E7FF6111DCC5D5107143798
        Validity
            Not Before: Feb  4 18:24:17 2025 GMT
            Not After : Feb  3 18:29:17 2026 GMT
        Subject: CN=A43FB9C039A0AA7D18767C427E4429E853467AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:92:4f:c2:46:8f:04:12:d6:8f:45:34:81:
                    59:cf:fd:fe:f7:b6:01:65:f7:a6:56:ec:2c:07:92:
                    c5:d8:75:1d:67:5b:5f:35:c4:f4:95:fb:8d:48:f0:
                    7f:47:53:e7:9a:6d:69:86:e7:99:60:07:a0:61:70:
                    00:ee:5e:6b:9d:eb:6e:29:7d:eb:44:bf:62:02:c2:
                    43:9a:ca:ab:6f:05:9e:5b:14:26:74:bf:d1:2f:40:
                    dd:9b:5f:55:21:7f:da:6c:13:96:e8:1d:30:a8:b8:
                    c6:74:51:34:47:9e:e5:54:a8:f2:60:2a:6a:b0:b9:
                    c8:a5:0d:ab:e6:17:60:61:18:be:95:28:39:a3:56:
                    b6:fb:56:fa:b1:23:fc:6d:bb:42:51:51:1e:fe:e0:
                    10:97:64:19:f8:0c:d4:9d:b4:56:33:4a:6e:97:c5:
                    7d:c8:10:6f:83:9b:78:aa:f1:d7:6d:44:8b:9a:a9:
                    46:7b:16:be:c6:15:32:ca:b6:e4:fd:c0:ca:9f:41:
                    03:ca:3d:74:f2:83:ef:8e:7b:59:03:ee:c5:71:9b:
                    3d:01:a5:c4:0c:98:ac:ed:de:4b:f6:07:f1:d9:31:
                    22:51:b7:4f:4d:aa:2a:81:77:ec:b6:ec:7e:55:26:
                    de:5a:3b:2f:cf:44:80:08:44:db:b8:80:26:91:70:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3F:B9:C0:39:A0:AA:7D:18:76:7C:42:7E:44:29:E8:53:46:7A:E2
            X509v3 Authority Key Identifier:
                keyid:16:42:A8:D6:C1:4F:94:50:0E:7F:F6:11:1D:CC:5D:51:07:14:37:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1642A8D6C14F94500E7FF6111DCC5D5107143798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8E7E39E7D390C8FC7CA81144BFE08B122B427B0A0513324D744447A43C76A3A9/0/323830333a363835303a393a3a2f34382d3438203d3e20323733313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6850:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:33:3f:53:0d:60:37:7b:79:39:6e:33:38:dc:53:65:64:c4:
         3b:db:fc:bf:9a:93:69:3e:98:cf:b5:b6:a5:2c:07:61:b6:54:
         af:c5:ab:5d:6c:fb:15:34:06:b7:fe:1a:7d:0b:a8:26:ef:38:
         82:e7:3e:da:07:31:1a:19:cd:5c:16:50:c4:b9:13:20:96:0c:
         07:d7:28:84:50:92:3b:c6:94:40:24:ae:f2:a7:15:9c:c9:77:
         96:92:14:1d:b2:60:8b:5e:76:26:0d:a9:53:79:01:4c:c6:ea:
         ed:4f:a4:b9:62:68:b2:dd:96:70:e1:59:8f:fa:28:21:14:00:
         54:73:8e:9b:7b:2b:ac:62:06:e8:74:34:ce:c8:cf:66:aa:18:
         49:be:dd:c1:a5:50:99:74:d2:91:af:eb:60:58:83:ea:1d:1b:
         cd:03:ad:29:70:f2:6a:c2:d8:b9:0d:32:03:13:67:a2:92:92:
         42:d5:a6:44:09:ff:b8:9b:c6:69:ad:8d:87:3e:8e:8d:ef:72:
         f1:83:c3:68:13:c4:be:85:7d:a1:c2:37:66:60:c8:31:3e:c5:
         66:1d:f7:f2:ad:30:bd:22:95:8b:97:2f:09:ac:c5:10:83:83:
         fd:20:bd:52:39:a5:2c:79:e4:76:a7:cb:55:68:5c:76:0a:5f:
         1e:0b:e4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:57:25 2025 by rpki-client