Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/323830333a343636303a3a2f33322d3332203d3e203237363930.roa
File:                     323830333a343636303a3a2f33322d3332203d3e203237363930.roa (raw, json)
Hash identifier:          v+ORj9eACeUpimHDeMYNjlOiv810W7GhDOdiJYUgSQ0=
Subject key identifier:   C6:83:57:93:9A:2F:45:B9:A0:E4:2C:F7:98:94:66:ED:F0:1F:A7:1A
Certificate issuer:       /CN=1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4
Certificate serial:       53FBE803129765E0AF2D29AFE07C8ADDBE626044
Authority key identifier: 1E:E3:7C:2D:AC:75:5F:08:D0:FA:EB:B8:2A:BC:33:D2:30:F2:C7:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/323830333a343636303a3a2f33322d3332203d3e203237363930.roa
Signing time:             Tue 04 Feb 2025 18:21:32 +0000
ROA not before:           Tue 04 Feb 2025 18:16:32 +0000
ROA not after:            Tue 03 Feb 2026 18:21:32 +0000
asID:                     27690
IP address blocks:        2803:4660::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fb:e8:03:12:97:65:e0:af:2d:29:af:e0:7c:8a:dd:be:62:60:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4
        Validity
            Not Before: Feb  4 18:16:32 2025 GMT
            Not After : Feb  3 18:21:32 2026 GMT
        Subject: CN=C68357939A2F45B9A0E42CF7989466EDF01FA71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9b:ce:01:df:58:2e:ff:12:99:11:2d:66:cc:
                    a8:5b:69:5a:c1:cb:0e:3c:e9:28:32:e2:78:9f:17:
                    a6:e3:f8:1c:70:ae:4e:4e:d9:22:10:60:d1:ed:04:
                    2f:7f:9b:1f:fe:75:08:ba:8a:63:fa:c0:e3:0f:7e:
                    72:a8:a3:e4:72:98:c9:48:87:7c:83:56:3b:82:76:
                    ae:fa:c0:0a:56:4f:1f:6b:7b:a2:97:e1:d9:38:2c:
                    b1:3d:32:e9:47:da:20:cf:6a:ae:eb:22:85:34:0a:
                    9f:43:1e:a0:aa:c4:dd:70:d4:c4:e8:a5:bf:94:14:
                    ec:32:82:01:88:3e:b4:1f:01:0a:16:f2:e6:5f:cd:
                    f4:cf:0e:8e:3a:79:40:cc:8b:ba:c1:47:9c:dd:66:
                    a9:35:16:bc:88:e1:1f:a5:c3:86:dd:14:82:02:c1:
                    33:1b:ae:f7:66:67:97:38:45:fc:ca:b8:e0:97:69:
                    2c:55:00:e9:a6:82:45:70:85:0d:e2:df:b0:5c:ff:
                    aa:4c:3e:fc:25:00:44:24:fd:f3:47:89:b4:26:cc:
                    bd:46:c6:b2:b9:05:3f:69:90:05:4c:4e:a7:53:85:
                    9d:01:2e:bb:1e:41:17:23:7e:29:17:62:ae:43:12:
                    ba:26:44:24:58:0d:00:67:b5:b1:21:cf:bc:2a:7c:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:83:57:93:9A:2F:45:B9:A0:E4:2C:F7:98:94:66:ED:F0:1F:A7:1A
            X509v3 Authority Key Identifier:
                keyid:1E:E3:7C:2D:AC:75:5F:08:D0:FA:EB:B8:2A:BC:33:D2:30:F2:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/323830333a343636303a3a2f33322d3332203d3e203237363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4660::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:7f:98:59:3c:f0:a2:d0:a2:db:bd:f3:87:b4:86:ec:76:81:
         6c:82:9b:5c:61:c2:9b:54:91:b2:81:03:ab:b8:e7:ee:58:f1:
         c9:1e:bf:51:30:db:99:dc:25:68:3a:2c:73:41:a1:19:e4:09:
         38:40:ca:33:f2:8e:8f:02:5a:7f:1a:6d:0f:fc:9a:63:21:21:
         a3:ed:55:85:1c:50:95:7b:e6:08:22:04:e8:47:9d:d0:cf:7e:
         e7:ae:b8:26:4c:89:f6:08:58:fd:f6:aa:f1:c8:79:67:65:8b:
         25:d0:27:06:a1:32:74:17:ef:48:1f:33:f6:a9:ae:57:e5:e5:
         f8:38:3d:74:1b:f1:45:85:56:a9:95:b4:fc:21:21:87:93:db:
         40:f2:f2:b4:ef:54:f5:14:30:a3:95:14:f3:21:53:46:09:4f:
         0d:85:dc:6d:69:cb:83:0a:42:9c:d7:9b:9d:c4:d6:36:a6:1e:
         f9:8a:51:d7:a2:a7:0f:c6:c8:73:d4:1f:86:44:2a:5e:c8:15:
         ec:42:84:66:fc:be:cb:7b:a2:e1:bb:9b:ed:8e:21:5e:91:71:
         db:fa:c6:5e:c1:26:46:0f:23:49:4d:97:88:ee:c9:29:f4:6d:
         d2:08:e3:86:fa:c2:af:0f:41:69:97:1b:05:80:12:89:39:30:
         19:cd:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:59:04 2025 by rpki-client