Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/323830333a363834303a3a2f33322d3438203d3e20323633373638.roa
File:                     323830333a363834303a3a2f33322d3438203d3e20323633373638.roa (raw, json)
Hash identifier:          5i3ZTkvuvqOb/oDHXGTV1FdLrbaHnGWUWTkY56oZYIE=
Subject key identifier:   44:45:36:09:13:7F:7F:B1:B3:59:E5:5D:FF:EC:F8:34:7D:21:58:96
Certificate issuer:       /CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231
Certificate serial:       095512DB4CC676B39F00942D3046C85EA5EF5A97
Authority key identifier: EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/323830333a363834303a3a2f33322d3438203d3e20323633373638.roa
Signing time:             Tue 04 Feb 2025 18:24:00 +0000
ROA not before:           Tue 04 Feb 2025 18:19:00 +0000
ROA not after:            Tue 03 Feb 2026 18:24:00 +0000
asID:                     263768
IP address blocks:        2803:6840::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:55:12:db:4c:c6:76:b3:9f:00:94:2d:30:46:c8:5e:a5:ef:5a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231
        Validity
            Not Before: Feb  4 18:19:00 2025 GMT
            Not After : Feb  3 18:24:00 2026 GMT
        Subject: CN=44453609137F7FB1B359E55DFFECF8347D215896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:cf:fe:14:a0:db:ab:db:de:d2:32:1e:ba:
                    22:27:77:aa:89:2f:50:77:8f:a4:21:29:15:11:8a:
                    36:81:6c:91:be:c6:28:a2:d8:6f:71:3b:ed:c1:73:
                    8d:1f:2a:a6:e1:d3:29:dc:f4:ae:bf:0b:1d:77:d2:
                    be:c7:bf:25:0e:25:c9:76:34:72:61:88:df:41:6a:
                    f6:7c:d9:ab:d9:e7:f6:5f:21:39:b9:ef:7b:9a:cd:
                    82:65:a5:53:47:1a:de:dc:a9:79:81:3b:9e:1e:a1:
                    37:ed:fb:80:29:f0:2b:d5:73:75:d9:9c:8b:60:13:
                    21:76:72:d1:9c:3b:e9:44:3a:86:5e:d8:5c:09:25:
                    51:b0:f2:78:e7:77:22:81:ee:d8:7b:26:67:e0:82:
                    9c:86:08:76:3e:34:2f:ce:a3:82:4f:9b:43:b1:99:
                    2a:4f:a3:ed:18:cf:87:46:b5:03:27:57:b4:af:d0:
                    27:e6:80:26:4c:d2:f2:f0:10:66:c6:43:4d:66:5f:
                    86:54:9f:5d:8b:a3:ee:a1:d1:5d:71:c8:73:b8:9d:
                    4b:13:4f:15:a7:19:e3:1a:88:78:89:0e:9e:11:85:
                    a4:62:e7:a2:9b:f2:44:34:9c:6c:27:41:df:05:8a:
                    e2:8b:46:f2:36:7b:f2:64:2f:d0:c7:31:31:c2:3f:
                    31:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:45:36:09:13:7F:7F:B1:B3:59:E5:5D:FF:EC:F8:34:7D:21:58:96
            X509v3 Authority Key Identifier:
                keyid:EF:3F:FE:AA:A0:9A:4C:FC:C6:35:E4:8A:4C:FC:06:59:BC:BA:42:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3FFEAAA09A4CFCC635E48A4CFC0659BCBA4231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FBE2537717648BE4584E0F63E98CB75116E7872F1ED3854D24B7DEDEA94B5CE/0/323830333a363834303a3a2f33322d3438203d3e20323633373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6840::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:27:45:80:d5:8d:ab:ea:4a:ff:03:18:ef:ab:ed:a0:86:62:
         2b:11:df:fe:ef:bf:0d:3c:69:5a:c8:65:13:02:92:a7:f6:b2:
         e7:66:e9:d5:6b:38:f2:df:6e:47:3e:dc:a2:9b:2d:7e:d4:d2:
         a5:99:eb:53:d9:54:c8:d9:01:a5:22:07:11:aa:d4:52:8f:92:
         0e:ab:a9:c1:cb:ff:8e:c8:06:25:e7:a8:86:2f:ee:81:8f:77:
         cf:d5:30:73:c8:0e:6d:6d:ab:cb:56:a2:a9:29:ff:0c:47:4a:
         29:37:ed:57:69:a9:d5:ff:c2:49:db:3c:72:b0:d3:00:00:da:
         e3:19:d7:dc:4a:a3:39:d6:88:72:48:6b:ec:c3:07:19:59:2f:
         84:eb:6f:9a:8d:4e:ab:8a:86:2e:63:a1:56:e6:6b:95:8f:ec:
         50:05:29:15:7b:94:d0:3c:3d:89:03:43:b3:02:17:5f:68:b0:
         85:e6:2b:60:eb:ed:1d:fc:73:fe:69:23:5a:74:c5:8c:5d:bd:
         9b:f5:60:11:bb:87:cc:cc:9e:06:87:1a:03:60:0f:d5:8d:6d:
         3e:d7:ea:48:52:c6:95:b8:4f:92:89:43:dd:87:27:21:58:a3:
         f3:87:16:29:c9:b9:9c:56:26:71:9f:4f:9c:42:ce:86:83:c2:
         16:94:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:22 2025 by rpki-client