Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/323830333a393038303a3a2f33322d3438203d3e20323632313436.roa
File:                     323830333a393038303a3a2f33322d3438203d3e20323632313436.roa (raw, json)
Hash identifier:          AXIvrSHaJvR0PoPzVHYJYEp81eRjYLVrThwqycrI+vI=
Subject key identifier:   D4:0D:A1:AD:23:BC:34:5A:59:25:97:2E:B1:DC:CF:EC:FA:A9:04:61
Certificate issuer:       /CN=E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683
Certificate serial:       038B91CABCB0F2B9DBBE75E800A6F94879451440
Authority key identifier: E8:9E:A7:20:75:24:FF:2A:C1:EC:7B:A9:F4:DB:06:11:6C:C6:D6:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/323830333a393038303a3a2f33322d3438203d3e20323632313436.roa
Signing time:             Tue 04 Feb 2025 18:48:59 +0000
ROA not before:           Tue 04 Feb 2025 18:43:59 +0000
ROA not after:            Tue 03 Feb 2026 18:48:59 +0000
asID:                     262146
IP address blocks:        2803:9080::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:8b:91:ca:bc:b0:f2:b9:db:be:75:e8:00:a6:f9:48:79:45:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683
        Validity
            Not Before: Feb  4 18:43:59 2025 GMT
            Not After : Feb  3 18:48:59 2026 GMT
        Subject: CN=D40DA1AD23BC345A5925972EB1DCCFECFAA90461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:cf:78:6a:b9:06:71:19:64:28:8e:a8:ae:
                    45:a8:a3:1c:11:2b:fb:13:90:69:b7:01:03:da:d8:
                    ec:b6:b3:01:5d:c5:d1:7d:59:f4:26:62:28:65:41:
                    ef:eb:97:68:00:82:40:f0:94:bb:84:98:03:c7:87:
                    7f:7e:da:ee:35:e1:74:4c:35:3b:38:4e:86:56:d9:
                    d5:93:27:62:6b:c9:0f:0b:11:62:f9:32:8f:76:10:
                    d1:2e:eb:36:74:98:ea:56:c5:06:72:11:ac:f3:bb:
                    be:73:55:40:e6:91:51:d2:02:04:4b:9e:0c:5e:45:
                    e9:94:a4:3e:a5:94:a2:7f:4f:d9:ce:73:4d:13:09:
                    70:42:21:5f:ac:c0:c3:c2:e9:16:f2:bc:79:b2:8d:
                    a7:c4:39:e1:d8:ab:d7:82:04:8a:4a:16:df:79:5c:
                    69:51:bc:04:f4:71:7c:fc:0a:0d:e1:c7:c1:39:f8:
                    9d:0f:77:fd:7e:f8:5c:f7:c0:ff:d0:33:cb:19:0c:
                    79:50:57:52:cd:57:ec:fd:7e:9a:e0:f0:2a:3a:e1:
                    4c:c6:da:29:23:98:54:98:5d:99:9e:60:03:f8:43:
                    54:6c:65:8a:5b:88:fd:98:87:d9:84:93:24:4d:52:
                    1f:68:c7:0e:57:31:05:c6:c7:d1:f5:99:ff:a5:7f:
                    8f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0D:A1:AD:23:BC:34:5A:59:25:97:2E:B1:DC:CF:EC:FA:A9:04:61
            X509v3 Authority Key Identifier:
                keyid:E8:9E:A7:20:75:24:FF:2A:C1:EC:7B:A9:F4:DB:06:11:6C:C6:D6:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/323830333a393038303a3a2f33322d3438203d3e20323632313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9080::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:85:97:07:4f:98:54:d1:5e:b7:50:f7:8a:8b:9c:3d:50:ca:
         59:76:ba:26:c1:6c:41:44:bb:a3:d2:d9:8e:5d:ee:30:26:73:
         43:28:b5:ec:e2:ae:7b:24:4a:ab:b9:18:29:29:ff:f6:15:dd:
         bf:f6:d6:6a:09:3d:99:5e:14:71:ff:3c:7f:fc:fa:a7:13:96:
         42:4b:ad:21:31:ed:89:bb:d9:f9:82:78:1a:7e:68:44:a1:1c:
         98:19:bc:1d:27:d6:8e:4c:84:65:64:77:e4:3e:1d:32:1b:36:
         30:1f:14:2d:1a:ab:2c:94:39:cb:7b:1f:ca:a6:b8:cd:05:62:
         a8:a6:05:f5:40:72:bf:98:d9:58:92:dd:2c:fb:4a:6d:12:4b:
         eb:b1:b4:f5:3c:c1:7a:4b:a3:b7:cd:14:b8:af:b7:6c:bf:d5:
         e7:9e:38:b0:a8:bc:77:30:3a:9b:9d:b1:d8:cc:b5:5d:1c:3c:
         e3:1d:05:1e:cf:9c:57:f4:fc:35:a7:bf:45:6c:d5:62:ab:43:
         02:50:31:6f:8f:d0:c5:5b:2e:4a:5a:55:50:aa:63:bd:0f:fd:
         77:aa:18:06:a5:6c:12:92:ca:f4:0c:75:dd:96:a0:f1:25:17:
         c0:0f:22:78:95:6d:8f:bf:57:a3:60:c8:e5:f5:e2:f7:02:69:
         c1:de:18:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:25:35 2025 by rpki-client