Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABB7B7A44C06E52E4EE2E749975216FE8D6DE52FF7F1320753FF314169223D9E/0/323830333a633861303a3a2f33322d3430203d3e20323636383031.roa
File:                     323830333a633861303a3a2f33322d3430203d3e20323636383031.roa (raw, json)
Hash identifier:          6xJBoGSB3yM7JKzqFGz2wVBeBp0tHzKpkRnnwMN3SNM=
Subject key identifier:   F4:6B:E1:99:3C:18:05:1F:FD:8C:B5:C4:F1:F8:7D:2E:DE:62:EE:33
Certificate issuer:       /CN=A976892EB2868451AD737028E727E3BF1896C150
Certificate serial:       5FE38A1C70D93506C97210561B22FE691E166463
Authority key identifier: A9:76:89:2E:B2:86:84:51:AD:73:70:28:E7:27:E3:BF:18:96:C1:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A976892EB2868451AD737028E727E3BF1896C150.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABB7B7A44C06E52E4EE2E749975216FE8D6DE52FF7F1320753FF314169223D9E/0/323830333a633861303a3a2f33322d3430203d3e20323636383031.roa
Signing time:             Tue 04 Feb 2025 20:06:46 +0000
ROA not before:           Tue 04 Feb 2025 20:01:46 +0000
ROA not after:            Tue 03 Feb 2026 20:06:46 +0000
asID:                     266801
IP address blocks:        2803:c8a0::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e3:8a:1c:70:d9:35:06:c9:72:10:56:1b:22:fe:69:1e:16:64:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A976892EB2868451AD737028E727E3BF1896C150
        Validity
            Not Before: Feb  4 20:01:46 2025 GMT
            Not After : Feb  3 20:06:46 2026 GMT
        Subject: CN=F46BE1993C18051FFD8CB5C4F1F87D2EDE62EE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:db:c1:06:fb:11:c3:92:fb:c7:09:75:28:
                    fd:77:39:06:99:3d:70:ed:25:e8:a9:47:ac:6c:ea:
                    40:c4:63:ce:ce:32:d7:13:23:df:3d:0d:f0:6e:f9:
                    d8:7d:1e:99:f9:de:a2:53:97:ed:bc:36:29:64:cc:
                    4a:e0:52:c8:35:cc:81:ea:fe:25:42:4a:f6:18:14:
                    0c:ba:b3:f5:10:10:41:5a:9a:a0:40:45:d7:14:e7:
                    f9:ab:3a:00:32:3e:57:28:66:c0:6e:83:3f:19:46:
                    76:da:db:96:31:11:3b:75:34:e5:0b:20:62:ac:7d:
                    14:22:e9:e9:5f:7a:de:23:12:81:e4:43:0f:c8:18:
                    0f:7d:9d:c4:28:27:d8:83:46:48:bd:a1:f6:6d:4f:
                    23:a0:93:a1:ba:ff:a5:84:17:47:a3:ec:8c:61:a1:
                    70:21:b1:e9:99:76:5d:01:64:31:41:da:25:1f:88:
                    1f:1d:00:8a:6e:8e:61:03:c3:40:5d:c0:6b:4b:a7:
                    32:71:4c:c7:18:37:01:6a:68:d5:99:f8:f4:ca:a2:
                    e5:a1:64:a2:7b:a0:ed:37:fa:6e:a7:98:53:05:97:
                    b8:6d:00:46:8f:31:ab:81:77:82:d1:5f:ba:fb:c3:
                    38:5a:95:e6:4e:05:fd:f4:03:e1:31:42:22:48:3b:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6B:E1:99:3C:18:05:1F:FD:8C:B5:C4:F1:F8:7D:2E:DE:62:EE:33
            X509v3 Authority Key Identifier:
                keyid:A9:76:89:2E:B2:86:84:51:AD:73:70:28:E7:27:E3:BF:18:96:C1:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABB7B7A44C06E52E4EE2E749975216FE8D6DE52FF7F1320753FF314169223D9E/0/A976892EB2868451AD737028E727E3BF1896C150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A976892EB2868451AD737028E727E3BF1896C150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABB7B7A44C06E52E4EE2E749975216FE8D6DE52FF7F1320753FF314169223D9E/0/323830333a633861303a3a2f33322d3430203d3e20323636383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:6f:1c:fa:c6:30:b6:7c:99:5d:47:db:38:0a:fd:21:f3:b7:
         99:f5:c7:e6:15:f9:1a:dd:a2:6c:e8:cb:31:ce:16:64:b8:9d:
         71:84:73:14:4e:e6:d1:39:e8:e2:8c:77:0c:d7:7b:8b:93:23:
         14:b1:2a:e5:f8:a0:6f:15:78:8b:d6:ba:09:1e:04:37:e7:bc:
         10:5a:2c:bf:97:fc:09:ce:3b:d8:4a:08:e2:0e:b9:3a:6d:0b:
         0a:be:97:ab:f7:9c:4a:54:1d:dd:fb:cf:8a:e5:0f:8b:3c:c2:
         b1:3d:e6:33:63:b0:33:5d:73:c6:00:47:0d:96:c7:58:cc:77:
         02:b1:7d:82:fb:71:4c:ae:79:4a:bb:2c:c5:b2:c3:b0:9c:08:
         d6:f2:eb:a2:5f:5a:d7:e5:2e:4d:6a:39:fa:3d:b8:70:9c:85:
         6c:23:28:1d:6e:59:d2:0f:a3:df:7a:75:4d:fb:60:08:e2:62:
         77:c6:3c:e3:ec:7f:58:f4:cc:5d:18:00:46:c9:ee:df:c7:b3:
         bf:10:4b:df:8a:09:2b:a0:cd:ce:8a:a8:e2:eb:17:43:e5:82:
         43:a7:c6:ac:c6:fb:db:04:68:09:f0:d5:44:05:c9:91:b6:96:
         40:a4:03:ce:4a:c6:a0:bd:e9:af:cd:60:5b:95:89:a0:9e:98:
         63:b7:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:07 2025 by rpki-client