Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/323830333a653331303a3a2f33322d3634203d3e20323732303634.roa
File:                     323830333a653331303a3a2f33322d3634203d3e20323732303634.roa (raw, json)
Hash identifier:          cPamm8w9z5fRHNjmQp5QHuZr+8oIibQvu3slbYvrpt4=
Subject key identifier:   BB:6C:FE:45:75:70:12:45:50:3D:47:B3:A6:9A:80:CB:8C:8E:B7:5F
Certificate issuer:       /CN=98375F77F0F93F2A707052E2273D5F5F579A325C
Certificate serial:       0720404C51C8D4E97CFD97BD1B3F44DFE6882F72
Authority key identifier: 98:37:5F:77:F0:F9:3F:2A:70:70:52:E2:27:3D:5F:5F:57:9A:32:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98375F77F0F93F2A707052E2273D5F5F579A325C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/323830333a653331303a3a2f33322d3634203d3e20323732303634.roa
Signing time:             Tue 04 Feb 2025 20:06:01 +0000
ROA not before:           Tue 04 Feb 2025 20:01:01 +0000
ROA not after:            Tue 03 Feb 2026 20:06:01 +0000
asID:                     272064
IP address blocks:        2803:e310::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:20:40:4c:51:c8:d4:e9:7c:fd:97:bd:1b:3f:44:df:e6:88:2f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98375F77F0F93F2A707052E2273D5F5F579A325C
        Validity
            Not Before: Feb  4 20:01:01 2025 GMT
            Not After : Feb  3 20:06:01 2026 GMT
        Subject: CN=BB6CFE4575701245503D47B3A69A80CB8C8EB75F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:76:e1:79:c4:c7:ba:25:f0:96:8a:b8:05:
                    fe:2f:73:51:19:1f:26:05:95:51:9e:24:fd:71:44:
                    68:c8:48:77:7e:36:cd:26:fb:ff:73:53:62:30:32:
                    be:4a:cc:77:d5:65:2e:90:5d:a6:e6:2a:28:cc:12:
                    eb:e7:72:23:cd:76:90:89:bf:22:bc:51:65:b5:ad:
                    4a:97:54:71:3a:17:ae:4b:88:91:a6:0e:5d:4c:98:
                    2c:53:1e:0a:9f:be:78:04:2a:00:e1:38:d4:35:8f:
                    c5:44:ad:2e:d9:83:7a:50:2b:1c:b3:d7:3c:4d:b2:
                    b1:3a:94:7c:35:ba:12:7f:e9:17:94:41:21:83:6a:
                    67:86:d3:7b:2f:ef:06:90:7f:1e:70:34:f5:9f:d2:
                    3f:04:48:33:8b:01:64:a4:d0:1b:31:99:df:d2:43:
                    3f:ad:cd:a6:f1:46:57:ef:29:d1:33:b1:09:d6:1c:
                    07:55:9f:7e:a5:e4:9a:30:8c:16:08:44:69:21:dc:
                    54:e3:3e:3c:c2:96:2b:40:70:04:64:b6:50:32:f2:
                    d2:3b:34:5b:72:49:84:31:9f:b9:0d:69:c9:0a:be:
                    6c:71:43:86:ba:2f:b1:ec:41:14:02:af:b7:27:8a:
                    a1:06:31:6d:62:8f:53:c2:25:a7:40:87:ee:2d:01:
                    bf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6C:FE:45:75:70:12:45:50:3D:47:B3:A6:9A:80:CB:8C:8E:B7:5F
            X509v3 Authority Key Identifier:
                keyid:98:37:5F:77:F0:F9:3F:2A:70:70:52:E2:27:3D:5F:5F:57:9A:32:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/98375F77F0F93F2A707052E2273D5F5F579A325C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98375F77F0F93F2A707052E2273D5F5F579A325C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/323830333a653331303a3a2f33322d3634203d3e20323732303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e310::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:84:b2:f5:77:8b:f2:9e:f2:d2:fa:f6:ca:bf:4b:63:92:
         c5:d8:0a:68:be:27:d4:0d:af:92:08:93:9e:2b:29:9e:24:3e:
         52:b0:de:8a:4b:85:01:b9:64:52:83:88:4d:62:2a:f2:c0:24:
         bc:43:d0:8e:af:8d:0b:43:52:6c:78:07:35:dc:e9:b0:6f:fd:
         a6:e9:6e:9e:a4:b5:83:03:9b:82:a0:17:21:63:de:e2:9d:1a:
         96:fe:5c:13:f9:dd:9e:ea:f5:19:d8:ec:4e:d8:78:82:50:da:
         ce:50:90:b7:a9:ea:2c:df:ed:c9:93:14:fe:e3:23:19:87:de:
         33:3b:84:ef:11:ef:2b:61:0a:7e:9e:99:e4:5a:9c:d5:fd:e7:
         f1:01:93:e6:73:e4:16:d3:09:d3:29:6f:41:7e:8d:33:05:bc:
         45:b2:df:11:7a:14:99:aa:53:b4:45:0c:09:ee:48:eb:29:d0:
         31:7b:09:9d:1d:fb:8e:ee:f3:df:e1:21:69:f0:85:97:71:c7:
         7a:25:a0:57:12:72:7c:12:c9:46:19:a3:52:63:b9:78:32:f3:
         48:c0:23:3e:e2:f1:5a:e2:c3:31:b8:30:31:b5:e4:aa:89:60:
         c9:5f:7c:08:7c:88:76:ec:93:1e:7b:61:10:4a:e1:a6:6b:53:
         e9:24:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:57 2025 by rpki-client