Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531373a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a313531373a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          DowSTAfQggNqfoE53/+islMSZ4q/ySQy6dilzjtZopI=
Subject key identifier:   3A:48:94:39:C6:74:F3:15:D0:DF:58:55:9A:03:08:36:3D:99:C0:32
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       601E1DB622581ACB16D4F8018F6D46A995BE4E2E
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531373a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:42 +0000
ROA not before:           Tue 04 Feb 2025 18:15:42 +0000
ROA not after:            Tue 03 Feb 2026 18:20:42 +0000
asID:                     52423
IP address blocks:        2803:6900:1517::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1e:1d:b6:22:58:1a:cb:16:d4:f8:01:8f:6d:46:a9:95:be:4e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:42 2025 GMT
            Not After : Feb  3 18:20:42 2026 GMT
        Subject: CN=3A489439C674F315D0DF58559A0308363D99C032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:95:f3:69:e3:9c:62:3b:e5:66:a9:66:7a:
                    0b:0e:b4:69:c5:6c:26:54:1d:ea:c0:6c:b4:3a:75:
                    a4:a7:28:dd:71:7b:ce:0c:07:53:45:1c:49:59:e2:
                    06:e4:46:0e:c8:b4:3f:91:39:d4:ff:10:ef:5a:0a:
                    44:03:9f:c1:a9:18:eb:0f:37:d9:bc:da:d0:94:98:
                    d9:2a:9f:e5:17:8f:55:30:a2:7c:b7:17:e5:d6:8b:
                    bf:47:2c:63:91:59:c8:fd:1e:17:ba:41:05:02:80:
                    26:8b:c3:2f:8c:27:71:a5:79:27:f3:98:5b:5f:38:
                    01:a0:51:48:05:56:3b:8a:08:fa:63:14:bd:69:c7:
                    6d:5f:ec:aa:e4:69:9a:4e:7f:6d:11:b2:cb:53:8b:
                    74:80:25:6e:27:9a:31:61:d4:47:8a:d3:62:09:84:
                    9e:16:c9:7b:87:61:be:10:df:d6:0c:2c:74:53:c0:
                    d9:88:c0:13:92:c1:81:12:d8:27:c9:92:63:82:1d:
                    a9:80:2c:af:c7:d7:ac:d1:a6:59:64:a4:30:fb:ad:
                    aa:ae:22:fc:2a:54:13:df:1b:6e:bc:2f:26:74:89:
                    b5:24:e5:2b:a0:6f:e5:c0:99:97:2e:44:8b:f7:01:
                    d1:37:27:09:0f:c5:6d:d3:93:49:52:8c:36:c6:23:
                    75:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:94:39:C6:74:F3:15:D0:DF:58:55:9A:03:08:36:3D:99:C0:32
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531373a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1517::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:77:f7:02:97:fb:b7:bc:4b:00:7b:01:b8:9d:aa:27:38:26:
         97:aa:ee:d4:dc:f9:f9:18:b1:78:23:9e:5c:a3:ef:5c:64:fc:
         f4:d5:a0:d9:4c:e1:78:7d:f9:50:b9:4c:63:42:c2:35:67:d6:
         e8:0d:61:15:2c:5d:ea:a4:8a:11:d7:f8:04:9f:3f:f8:69:93:
         6e:da:6f:e8:e0:d3:d3:b3:81:48:d7:a7:86:1a:04:c7:4a:d7:
         7e:ae:de:43:ef:9f:48:f2:d2:39:d1:58:11:08:1b:4a:e8:be:
         67:11:68:a7:38:af:32:c4:f1:47:be:e7:75:75:1a:0f:14:bc:
         2b:99:0f:10:4e:83:53:ee:6c:c8:0e:f0:45:24:30:c5:d4:29:
         d5:db:a5:45:16:bb:4b:8c:e7:27:6e:23:bb:2b:73:62:94:90:
         8d:f4:aa:43:71:b9:4f:66:90:99:c5:6f:dc:14:85:a4:8d:68:
         20:30:20:49:da:db:22:1a:30:c5:38:95:7d:6c:7e:1f:b4:ee:
         82:1e:6f:b6:fd:f8:0b:5e:59:70:7e:d4:99:55:4b:7f:3a:20:
         42:b3:34:f0:d3:39:bd:47:be:0b:75:94:e1:26:19:12:99:8f:
         f2:06:73:f2:aa:06:10:a6:ee:bc:b2:0a:d5:c0:9c:57:17:d6:
         ba:3d:2b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:02 2025 by rpki-client