Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a3a2f33322d3438203d3e20323730313732.roa
File:                     323030313a313230333a3a2f33322d3438203d3e20323730313732.roa (raw, json)
Hash identifier:          UUnY9T7pnTA56LjpA/SIoBja3UNkuEMxwxomJNqdbUs=
Subject key identifier:   0C:CB:F5:5E:19:FE:57:74:DF:F6:C5:1D:32:7A:EA:AE:7E:B5:91:33
Certificate issuer:       /CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
Certificate serial:       1DED53F38C5D81743825CC59AC916E0CB9713657
Authority key identifier: 73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a3a2f33322d3438203d3e20323730313732.roa
Signing time:             Mon 17 Mar 2025 16:12:09 +0000
ROA not before:           Mon 17 Mar 2025 16:07:09 +0000
ROA not after:            Mon 16 Mar 2026 16:12:09 +0000
asID:                     270172
IP address blocks:        2001:1203::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ed:53:f3:8c:5d:81:74:38:25:cc:59:ac:91:6e:0c:b9:71:36:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0
        Validity
            Not Before: Mar 17 16:07:09 2025 GMT
            Not After : Mar 16 16:12:09 2026 GMT
        Subject: CN=0CCBF55E19FE5774DFF6C51D327AEAAE7EB59133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:27:3d:59:d6:d2:e1:5e:77:c8:84:6e:f6:
                    13:e2:95:27:c0:6c:05:49:bc:4f:30:0f:58:89:e1:
                    4e:ee:e8:d3:99:99:ef:5b:32:f9:78:e9:03:ff:94:
                    06:a8:a8:5e:e4:30:5b:33:17:d6:37:6a:77:da:28:
                    89:37:9b:37:0c:5a:59:a8:9e:91:42:07:c1:98:b6:
                    0c:08:8b:b9:54:5e:15:b7:3a:39:82:74:0c:c1:5c:
                    e3:2a:43:e1:03:91:51:e9:d6:c5:b4:7a:a5:89:40:
                    a9:60:ff:a5:c3:c2:29:06:b4:5d:03:9d:b2:6d:ac:
                    d0:75:8e:a2:62:ba:c0:2a:9e:85:2f:9b:3e:68:ed:
                    a9:6e:a3:0a:5b:79:41:67:16:d5:dc:2c:91:e6:b3:
                    aa:b9:25:82:2f:ce:97:7a:fb:f7:fc:4b:c9:04:91:
                    b1:75:13:a7:be:45:1e:9c:7c:87:1e:96:08:5f:a7:
                    7a:03:71:b3:08:d1:80:cc:a9:43:e2:f8:53:9c:7a:
                    cc:58:ee:1a:62:36:c9:8a:7e:d9:8a:94:59:da:28:
                    ed:63:fe:89:14:85:b4:f1:b7:6c:43:6e:88:59:a1:
                    57:d7:d0:d9:52:70:fc:ee:7d:49:4a:87:9b:0b:f6:
                    52:5a:b3:20:fd:a8:aa:f5:7f:45:b2:de:34:2b:b4:
                    77:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CB:F5:5E:19:FE:57:74:DF:F6:C5:1D:32:7A:EA:AE:7E:B5:91:33
            X509v3 Authority Key Identifier:
                keyid:73:AA:8F:CE:40:3A:C6:B0:83:BE:28:2B:03:DF:B4:0E:2E:6C:DF:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73AA8FCE403AC6B083BE282B03DFB40E2E6CDFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5909993A0F90E8EF828C00B65974A9D989559DECF18DA778414DC76A554393/0/323030313a313230333a3a2f33322d3438203d3e20323730313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1203::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:65:86:f6:4a:1e:a2:af:7c:30:95:02:bd:8b:8f:4b:61:de:
         cf:ca:fb:a1:a2:da:2f:1e:81:02:7d:4c:9c:5c:c2:25:69:18:
         12:c7:8a:59:2b:3f:d1:b5:35:2b:43:72:6f:dc:3a:e9:42:08:
         81:13:6a:6d:ea:96:cf:1b:78:73:94:08:90:49:c6:92:d4:e1:
         03:b5:ea:80:0d:63:32:97:d5:3e:99:9e:51:2c:b9:d7:f0:52:
         2c:df:e8:91:96:b2:47:a6:b9:04:d2:3f:f3:db:6f:f6:41:59:
         b8:a2:42:17:bf:9a:ab:36:6c:d3:50:2d:15:74:54:b3:8b:50:
         79:24:8a:0f:0e:e2:b0:db:9f:b9:29:b3:44:e7:e5:a0:ad:69:
         af:45:57:34:d1:c6:92:38:04:fd:aa:1a:6b:c9:75:52:bd:e0:
         35:d9:a3:97:fb:7e:94:5e:18:65:c1:d6:63:c7:d5:47:3a:3c:
         b3:34:7a:51:3f:ac:cb:24:a1:ab:8b:96:c5:56:01:1b:c0:8a:
         a6:fc:a1:fa:14:1e:e8:b9:8d:2c:6d:6e:89:77:04:eb:5d:78:
         1b:40:48:aa:e6:42:65:0a:f6:6d:e0:62:8b:3f:c6:29:24:cc:
         ba:db:43:b1:cd:bb:c2:f3:b9:53:a8:1f:a1:97:d8:07:28:21:
         85:05:9a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:47 2025 by rpki-client