Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a31323a3a2f34382d3438203d3e20323731383734.roa
File:                     323830333a323534303a31323a3a2f34382d3438203d3e20323731383734.roa (raw, json)
Hash identifier:          Qxd0uUeTJKxY+mHVOU3/caWHMA0XxAZFakSjW6hKXxI=
Subject key identifier:   06:2C:85:F1:AC:90:EA:D7:FA:09:5E:C9:E5:F5:89:D3:59:E2:2B:DE
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       1F9632E00173E5DD3482C956450D636699321FA0
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a31323a3a2f34382d3438203d3e20323731383734.roa
Signing time:             Tue 04 Feb 2025 18:54:38 +0000
ROA not before:           Tue 04 Feb 2025 18:49:38 +0000
ROA not after:            Tue 03 Feb 2026 18:54:38 +0000
asID:                     271874
IP address blocks:        2803:2540:12::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:96:32:e0:01:73:e5:dd:34:82:c9:56:45:0d:63:66:99:32:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Feb  4 18:49:38 2025 GMT
            Not After : Feb  3 18:54:38 2026 GMT
        Subject: CN=062C85F1AC90EAD7FA095EC9E5F589D359E22BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:f4:d3:ed:42:f0:5f:00:25:68:bf:dc:f1:
                    9a:ae:3d:72:0b:3e:f4:b1:94:88:24:ec:7a:ff:47:
                    f7:22:8c:65:2c:53:fd:fc:f5:4c:17:1c:6d:d7:74:
                    1a:66:b0:72:b6:44:fd:41:63:e1:e4:c9:28:04:06:
                    a9:76:cf:0b:61:26:e9:f5:08:6c:f8:80:f1:4c:c2:
                    b2:9e:62:33:b9:58:24:70:f7:24:23:29:9f:96:8d:
                    fa:84:83:e3:cb:c0:a7:ef:66:7d:7e:bc:05:32:b9:
                    8d:bc:b0:d6:2c:08:e1:f3:de:dd:b6:be:45:b4:19:
                    ab:a7:c3:c0:9d:c5:d0:ad:a4:57:78:66:de:be:59:
                    05:0f:c0:be:0e:c7:cf:bc:bf:6b:43:1e:b7:97:48:
                    96:f4:52:81:8c:aa:f2:a2:f4:a7:66:b0:e0:92:cd:
                    c5:b1:54:b9:e1:c9:4d:f3:8d:17:f1:9c:34:8a:79:
                    c0:0c:30:27:1f:14:02:0d:30:b8:11:40:63:98:da:
                    82:d2:1e:ee:73:03:04:be:c4:44:5c:5e:b6:a1:b5:
                    d4:d3:d7:55:1b:aa:34:a6:d7:77:f4:2b:c5:ae:e9:
                    0b:11:d2:00:d9:21:6f:12:19:6d:e8:f4:dd:88:a9:
                    8d:1d:03:39:14:58:f6:7b:18:92:63:0c:fd:83:35:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2C:85:F1:AC:90:EA:D7:FA:09:5E:C9:E5:F5:89:D3:59:E2:2B:DE
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/323830333a323534303a31323a3a2f34382d3438203d3e20323731383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2540:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:5f:fc:56:1a:d8:d8:58:cb:af:5a:5b:18:cb:e0:90:99:95:
         e5:70:95:d0:95:c9:d1:a7:92:5d:2e:40:1c:d1:7f:72:2c:32:
         62:cc:b5:2e:46:11:81:a9:9f:2f:0a:ad:54:ca:ba:b4:49:6c:
         a4:bb:cc:7b:37:75:a6:0a:2b:c0:2a:91:f8:8a:e7:b3:5e:98:
         61:35:20:a2:dc:ce:69:e9:f6:a8:51:e1:c0:db:f7:ff:83:f3:
         32:1d:98:2c:29:ec:a6:40:53:7f:ea:bf:79:67:a9:52:64:86:
         bb:19:50:fc:79:5a:b0:85:5f:34:df:b2:ca:f0:e3:57:aa:76:
         ad:55:c1:ef:cc:44:aa:85:c7:12:72:31:77:ae:82:4d:45:93:
         cc:95:8c:04:b6:42:25:c1:bb:c4:bb:da:52:77:3c:81:e5:55:
         32:d7:a4:ed:dc:7c:6a:99:e1:7a:0b:d4:64:d5:20:5c:f0:32:
         e1:ae:c0:29:b7:e7:c7:a3:56:81:43:90:94:8a:71:9e:db:06:
         4a:9e:10:1d:f9:6d:72:41:80:60:cb:22:db:8c:67:a2:d9:55:
         e3:e0:5b:83:aa:4b:bb:94:0d:f4:da:a1:52:ef:56:27:d9:75:
         eb:6b:8e:c4:06:c0:2b:cf:27:1c:eb:b1:b1:3f:cc:bc:72:97:
         06:8a:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:19 2025 by rpki-client