Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/323830333a386236303a3a2f33322d3332203d3e20323639373938.roa
File:                     323830333a386236303a3a2f33322d3332203d3e20323639373938.roa (raw, json)
Hash identifier:          mVv4/0KDqjDGglEPUUhC13rwj0vWkIJ1s0RxMil4+/c=
Subject key identifier:   1F:E1:A4:6F:50:FA:BF:E4:0E:E7:2D:E8:A5:1A:4A:28:2B:FC:D8:28
Certificate issuer:       /CN=EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED
Certificate serial:       4A3A454677B940F7EC28F59A5E4512B8CAED99A4
Authority key identifier: EA:7A:F6:DB:EB:46:9C:DF:D2:0B:7B:6B:09:28:D4:CC:B4:7C:D6:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/323830333a386236303a3a2f33322d3332203d3e20323639373938.roa
Signing time:             Tue 04 Feb 2025 18:36:53 +0000
ROA not before:           Tue 04 Feb 2025 18:31:53 +0000
ROA not after:            Tue 03 Feb 2026 18:36:53 +0000
asID:                     269798
IP address blocks:        2803:8b60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3a:45:46:77:b9:40:f7:ec:28:f5:9a:5e:45:12:b8:ca:ed:99:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED
        Validity
            Not Before: Feb  4 18:31:53 2025 GMT
            Not After : Feb  3 18:36:53 2026 GMT
        Subject: CN=1FE1A46F50FABFE40EE72DE8A51A4A282BFCD828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:9a:ba:92:9e:52:74:b1:c4:32:a5:c2:57:
                    ab:64:be:5e:97:a3:c4:6f:5a:4f:60:a2:aa:8c:21:
                    0b:13:e5:97:0e:28:16:02:5b:c1:5d:e9:b9:8d:8c:
                    72:3b:19:20:5e:50:8d:54:a3:1a:0e:7b:f5:eb:dd:
                    16:d0:9c:a8:77:b0:62:e2:a6:13:54:84:eb:81:03:
                    dc:87:e9:44:03:7c:4c:60:34:f0:c2:cc:27:c7:6a:
                    5f:84:68:91:2e:9c:b1:47:91:f2:47:28:a0:b6:a8:
                    cf:28:b2:b0:47:da:1f:e6:d9:50:04:55:15:25:a9:
                    5d:fb:a9:cc:15:87:48:a7:30:78:29:10:8d:4c:61:
                    56:9e:9e:80:71:a9:03:31:53:e9:63:9c:bf:52:5e:
                    bc:aa:79:e0:de:15:b6:1e:31:3c:f3:0b:be:95:3c:
                    af:98:76:60:29:3b:40:23:63:58:eb:3f:00:f0:61:
                    37:fa:3a:13:8d:60:e8:b3:a5:47:60:59:23:7c:cf:
                    6d:68:32:5b:e4:32:0b:2b:64:ff:40:77:8b:6f:79:
                    a2:8e:40:75:3c:a2:ba:14:1a:52:a9:96:2b:ed:db:
                    fb:07:87:47:d1:f1:88:48:d6:65:b4:1a:f3:46:67:
                    63:b7:8e:80:a2:2b:27:c6:75:9a:3a:0d:73:56:c2:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E1:A4:6F:50:FA:BF:E4:0E:E7:2D:E8:A5:1A:4A:28:2B:FC:D8:28
            X509v3 Authority Key Identifier:
                keyid:EA:7A:F6:DB:EB:46:9C:DF:D2:0B:7B:6B:09:28:D4:CC:B4:7C:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/323830333a386236303a3a2f33322d3332203d3e20323639373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:be:da:41:f1:33:67:33:e9:aa:f0:39:34:2f:ea:89:58:ad:
         f9:ce:ff:c9:f9:95:1c:53:09:14:71:d1:21:f4:33:7c:fd:ab:
         c4:81:67:5f:1f:29:24:92:6f:73:3d:31:b6:85:94:e5:4b:88:
         df:be:ab:3e:df:53:21:34:d0:f5:56:5d:2f:c9:37:e7:fb:de:
         cb:ec:3b:cc:15:9a:12:43:21:fc:d2:ae:63:85:fb:56:0c:94:
         34:eb:bb:b5:f1:bc:9a:f8:75:87:6d:4c:28:90:c4:94:e6:1d:
         46:b6:53:ef:bc:c9:eb:ea:1f:7b:85:e9:51:c3:1d:d2:a9:cd:
         3d:d4:ae:a3:7f:67:de:2c:f7:06:27:3b:e3:b7:fc:ec:00:72:
         c1:c2:e9:31:67:d1:59:b2:ff:cf:a1:a9:74:1a:7e:fd:32:2f:
         3a:84:27:85:5a:d3:3a:23:40:57:18:30:da:bf:5a:44:ac:58:
         d9:d6:89:f7:f4:91:bb:ca:b3:b7:df:07:40:b8:38:05:a0:aa:
         24:df:c7:f3:e6:8e:7e:7f:31:a5:c0:bb:f6:ac:33:09:95:10:
         e1:10:ed:a3:68:cf:ba:55:f5:0b:34:02:a5:e8:6b:94:e5:5b:
         e5:0b:0a:3e:9a:3e:67:9c:7d:48:8f:af:26:88:5d:ee:89:c9:
         0f:c1:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:05 2025 by rpki-client