Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3230303a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3230303a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          vcVhyhW+ccm50y0kucHySUvwgY0tbEj0vHRqMOAmBec=
Subject key identifier:   4E:92:CF:3B:C6:1D:1A:F5:54:CC:22:8A:48:B8:B2:93:40:AC:AB:C1
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       2FA43071B1F309F689B9A0D35320EA7A022EE115
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3230303a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:40 +0000
ROA not before:           Tue 04 Feb 2025 18:15:40 +0000
ROA not after:            Tue 03 Feb 2026 18:20:40 +0000
asID:                     52423
IP address blocks:        2803:6900:200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a4:30:71:b1:f3:09:f6:89:b9:a0:d3:53:20:ea:7a:02:2e:e1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:40 2025 GMT
            Not After : Feb  3 18:20:40 2026 GMT
        Subject: CN=4E92CF3BC61D1AF554CC228A48B8B29340ACABC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:97:4e:04:32:55:2a:77:be:67:51:07:73:
                    c3:8d:64:72:5c:46:5c:35:97:92:4d:89:f5:9a:e2:
                    96:da:d0:3f:13:d4:90:45:dc:8c:21:54:69:c3:b7:
                    6b:d8:07:13:9c:be:94:6e:e0:2e:c6:18:df:3a:53:
                    1a:84:08:d8:bb:73:9f:2e:41:3c:99:53:47:5d:47:
                    0f:3b:10:5a:bb:c0:8e:42:c7:26:93:9b:0f:d1:97:
                    b6:ea:40:ca:d2:d8:97:ca:65:d5:27:44:f9:48:77:
                    5b:93:54:73:58:f6:03:9c:08:4a:3b:1b:0c:98:b2:
                    5f:e5:c4:ef:4a:1d:b1:95:22:0f:18:f1:e7:90:67:
                    09:68:4f:59:49:ad:aa:1b:3c:32:e4:69:cb:9d:86:
                    97:15:ff:5f:ac:5a:af:d1:90:a8:c7:0b:1f:1f:29:
                    67:96:ea:d5:e5:28:9d:0e:48:85:a1:d2:d1:ea:53:
                    76:0b:32:b0:27:61:f1:b6:d0:e2:f0:66:70:3e:83:
                    74:ed:d3:c1:39:cc:fd:90:06:07:f0:e0:81:37:87:
                    56:11:f6:63:4b:2f:12:f4:37:09:6f:32:d1:ae:73:
                    67:6a:b3:42:6d:38:aa:dc:41:2c:c7:a4:2a:f6:0c:
                    cd:42:41:8f:ea:1a:ae:f3:07:c3:2f:7b:67:39:a2:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:CF:3B:C6:1D:1A:F5:54:CC:22:8A:48:B8:B2:93:40:AC:AB:C1
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3230303a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:f4:e9:3c:68:fb:05:09:80:35:31:e2:4d:00:c6:31:e3:4a:
         46:c4:94:93:87:6a:d6:a2:58:1e:fa:ce:9f:42:df:10:d9:7b:
         8a:23:df:8b:91:99:81:70:9b:a2:76:07:86:11:e1:1f:fb:29:
         ed:66:6e:23:b1:ca:60:82:4c:8b:59:c6:06:c3:0b:e5:2f:2b:
         43:53:7c:f8:9d:68:c6:52:72:26:69:01:57:51:fe:e4:12:38:
         19:05:55:cf:c7:c0:14:ba:56:f3:20:8d:97:48:83:a3:87:e1:
         f2:ec:40:a0:1d:9f:42:d0:0c:12:c4:93:1c:36:5b:e9:55:84:
         fe:b1:95:eb:4f:6e:fd:f0:45:06:64:5f:e7:77:fe:3f:44:6b:
         fb:43:6e:38:e9:23:2b:fb:0e:dc:62:2a:57:a0:ac:4a:3f:8c:
         84:14:eb:93:74:4b:b1:b7:67:c2:d9:ac:22:91:c0:41:c6:16:
         7b:09:f1:91:ed:10:86:f1:21:a4:1d:b0:aa:f7:3a:7f:6c:aa:
         09:fc:3c:f7:16:9f:46:24:82:31:76:f0:db:43:9d:29:8c:e5:
         a6:b1:db:28:21:7d:85:0e:f3:37:c3:61:21:e6:a9:33:d8:5f:
         33:11:b1:29:21:cd:fe:aa:74:1b:8d:c8:a2:55:ae:ef:f5:7b:
         9e:ff:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:02 2025 by rpki-client