Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/323830333a343630303a3a2f33322d3438203d3e203134373534.roa
File:                     323830333a343630303a3a2f33322d3438203d3e203134373534.roa (raw, json)
Hash identifier:          vm6TdEr+aHQ0kC/qbsTZJgFdKu9lYZirWOsuTkYkBwM=
Subject key identifier:   9F:7C:B9:96:87:E5:7F:D2:CE:DE:78:D3:DC:5A:B8:B6:40:54:2D:E9
Certificate issuer:       /CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Certificate serial:       40CC4B42CFA22D674CC41C78A9BA9DC947784F54
Authority key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/323830333a343630303a3a2f33322d3438203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:56:00 +0000
ROA not before:           Tue 04 Feb 2025 18:51:00 +0000
ROA not after:            Tue 03 Feb 2026 18:56:00 +0000
asID:                     14754
IP address blocks:        2803:4600::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cc:4b:42:cf:a2:2d:67:4c:c4:1c:78:a9:ba:9d:c9:47:78:4f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
        Validity
            Not Before: Feb  4 18:51:00 2025 GMT
            Not After : Feb  3 18:56:00 2026 GMT
        Subject: CN=9F7CB99687E57FD2CEDE78D3DC5AB8B640542DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:71:6d:eb:0a:28:00:c8:de:da:fa:c0:28:
                    27:c3:cf:b9:ef:09:f1:72:6f:0b:25:62:c9:44:df:
                    84:cd:7e:e6:79:d6:8f:49:ff:f6:53:79:fb:31:f6:
                    c7:30:c2:0f:07:38:0d:e7:16:cb:87:7e:a4:bd:0d:
                    62:74:c6:f6:43:02:6f:f2:be:5b:a4:c5:70:53:a4:
                    9b:6c:1a:24:61:5d:17:9d:b6:27:e3:f8:75:5c:47:
                    13:73:b1:98:ee:e8:47:ca:f4:b6:26:db:e2:a5:c7:
                    43:30:bb:a7:c9:10:96:29:df:93:0d:51:a7:03:4d:
                    9c:e6:a9:36:dc:42:5c:55:40:86:3a:54:1b:c1:84:
                    47:e6:59:0f:78:36:e8:6e:6a:2a:0c:4d:10:42:ba:
                    af:5f:85:8e:45:8b:29:d7:a3:73:b4:1a:43:24:8c:
                    21:d2:4c:43:55:c3:ec:b9:d5:68:a4:0f:bd:52:8a:
                    99:42:94:15:c6:cb:11:e4:bb:12:5c:31:0d:ba:2a:
                    7d:5b:d5:d2:32:27:cd:33:18:c6:ea:f9:c2:b8:bb:
                    b9:eb:57:0f:6a:49:78:6a:13:f5:ed:25:6b:41:09:
                    64:47:ad:7b:47:2c:ca:47:a0:f9:d0:72:80:87:6f:
                    d0:bf:33:a3:b3:8a:57:d2:22:1f:c7:6b:f4:25:0b:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:B9:96:87:E5:7F:D2:CE:DE:78:D3:DC:5A:B8:B6:40:54:2D:E9
            X509v3 Authority Key Identifier:
                keyid:78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/323830333a343630303a3a2f33322d3438203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:66:e8:03:4f:ca:fb:1b:2a:29:ed:a1:d3:d3:42:18:ab:c3:
         3a:59:e2:dd:89:23:20:1d:ae:0d:56:b3:90:9f:a8:d8:e3:1e:
         f8:74:83:e9:61:58:25:04:26:90:51:a9:c9:78:92:be:9b:85:
         12:04:ab:9a:ca:90:b4:f0:18:4d:80:23:98:b8:d5:63:a0:a3:
         7d:af:7e:11:34:4c:40:d4:c1:55:79:a3:f7:f2:96:eb:a7:9f:
         f8:31:ec:10:0a:2b:8a:c7:be:ea:6e:7e:d8:3e:b4:77:7f:f3:
         85:42:a5:fc:4f:c3:c8:3a:a9:b7:84:69:36:27:31:83:5b:5f:
         ef:fb:d0:9e:dc:b8:81:6e:3f:50:2d:d3:e0:5e:8f:08:97:dd:
         fd:54:c0:46:4e:ce:d4:d3:ae:d9:3f:a0:c6:56:d0:80:1f:0d:
         96:a9:88:72:09:ff:25:07:dc:f4:55:49:9c:eb:86:11:e2:0a:
         b2:cc:03:de:8e:9a:70:bd:6d:cc:95:2b:6a:ea:04:73:be:0b:
         f1:c8:ed:33:ac:6b:0a:04:c1:8b:df:d7:b3:8d:64:c2:7d:a5:
         76:cd:77:85:3c:02:9e:d6:4a:f9:07:02:9b:d3:9e:9f:ba:a3:
         eb:1a:5e:57:ba:c7:7c:38:1b:61:95:02:0e:88:11:b8:03:d1:
         25:03:f9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:07 2025 by rpki-client