Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3535393a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3535393a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          Ei3Lpocei41rkSKfMmfC6NDR4wYy/I+vkASPNpZ6AhU=
Subject key identifier:   C7:D0:A1:9A:7B:3F:5C:FB:4C:B7:60:AD:5A:06:90:9C:8A:88:89:13
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       43902628C10210230D9326AEDB0AAF1E610A7C29
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3535393a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:47 +0000
ROA not before:           Tue 04 Feb 2025 18:15:47 +0000
ROA not after:            Tue 03 Feb 2026 18:20:47 +0000
asID:                     52423
IP address blocks:        2803:6900:559::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:90:26:28:c1:02:10:23:0d:93:26:ae:db:0a:af:1e:61:0a:7c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:47 2025 GMT
            Not After : Feb  3 18:20:47 2026 GMT
        Subject: CN=C7D0A19A7B3F5CFB4CB760AD5A06909C8A888913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:27:26:5e:6f:54:90:a0:14:ac:91:d4:59:0d:
                    b4:49:a0:f7:fd:24:86:0f:8e:f9:3c:ed:fe:7a:d7:
                    98:b9:0e:31:a1:20:76:29:29:ff:96:6c:76:be:fa:
                    97:52:56:86:35:77:47:59:33:e4:a0:0b:a7:99:13:
                    2e:db:30:38:dd:4b:0c:36:bb:4a:bd:c7:ab:17:18:
                    1e:78:88:f2:7b:3a:f2:ea:b2:76:d9:a8:f6:33:ef:
                    b2:c0:c1:43:d5:5b:0f:a2:6c:61:a2:6f:2d:e6:8f:
                    1d:c7:58:d5:82:3b:1a:01:d1:44:b1:98:3e:6f:95:
                    4c:e7:c4:28:9c:0c:f4:f4:51:66:a4:da:e8:8f:37:
                    5c:cf:e9:ef:b3:b3:5b:aa:7c:8f:92:f9:72:32:3f:
                    97:04:2b:cf:95:32:f7:0d:9e:4e:a6:38:cf:9d:3c:
                    17:a5:80:21:32:6c:54:11:3a:35:3b:56:08:62:8a:
                    e3:25:4f:9e:da:49:12:3c:a5:d9:2c:50:75:9a:53:
                    c9:82:7d:79:17:82:e1:78:da:ab:89:41:8b:92:52:
                    4c:b8:1a:4a:be:47:1a:7a:13:22:1d:1f:43:5a:8f:
                    69:96:0e:00:26:21:4c:c0:8c:ca:b4:a0:00:99:c3:
                    a5:24:36:c1:b6:22:6d:20:0b:29:b0:1f:f0:a2:66:
                    b5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D0:A1:9A:7B:3F:5C:FB:4C:B7:60:AD:5A:06:90:9C:8A:88:89:13
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3535393a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:559::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:47:1d:9a:88:b8:72:3e:12:6b:20:01:cf:ad:c8:d0:07:fb:
         91:5d:5d:ad:f3:cc:29:a8:cb:5f:ff:5b:45:c2:8a:d9:6f:4d:
         c7:32:9a:38:9a:64:46:de:d2:44:dd:a9:da:ff:ca:94:b9:c8:
         8c:d4:eb:51:99:02:8d:75:ac:29:45:bf:b3:76:b9:df:22:c7:
         cd:c3:21:c9:56:0e:66:b7:41:e4:dd:1b:3b:4d:8c:7b:3c:f2:
         c2:86:6f:13:ac:0a:03:6e:d4:56:5a:7a:4f:48:e1:99:d0:32:
         f5:30:b9:86:34:d9:33:8a:cf:c2:07:b8:d1:68:47:08:86:e5:
         01:db:d2:84:28:37:0f:ed:89:06:69:7b:cf:63:f0:96:09:f6:
         49:2d:a4:a0:b0:66:2f:7f:8a:a1:3c:53:96:a0:01:c7:77:9b:
         35:19:b1:ff:36:79:c5:8b:60:a7:a9:f0:5c:80:36:23:4b:cb:
         6d:67:3f:12:1a:df:d5:16:47:8f:52:6b:ae:39:88:d7:85:b7:
         18:26:25:2f:c0:57:65:3e:d9:e6:60:47:c6:e0:1b:64:44:07:
         ea:ae:ec:43:30:21:01:6b:e9:ee:48:e7:c0:f9:74:59:74:89:
         8c:96:19:6d:d3:f7:f8:82:9c:c2:e8:22:77:c1:29:fc:92:c4:
         72:51:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:11 2025 by rpki-client