Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/323830333a623231303a3a2f33322d3438203d3e20323731393134.roa
File:                     323830333a623231303a3a2f33322d3438203d3e20323731393134.roa (raw, json)
Hash identifier:          nPYs1LAUtneZaSPxqG+96dMVcUHTCYWlbH/P+rIJnY0=
Subject key identifier:   84:04:8E:4D:D8:77:F0:C4:89:5A:0E:23:43:B6:B5:52:55:7B:C8:87
Certificate issuer:       /CN=20AE62643C64442088545A3D5BA49A68A414B159
Certificate serial:       018FB4017E935B501D1D214871BECEFE87F22BCE
Authority key identifier: 20:AE:62:64:3C:64:44:20:88:54:5A:3D:5B:A4:9A:68:A4:14:B1:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AE62643C64442088545A3D5BA49A68A414B159.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/323830333a623231303a3a2f33322d3438203d3e20323731393134.roa
Signing time:             Tue 04 Feb 2025 19:58:04 +0000
ROA not before:           Tue 04 Feb 2025 19:53:04 +0000
ROA not after:            Tue 03 Feb 2026 19:58:04 +0000
asID:                     271914
IP address blocks:        2803:b210::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b4:01:7e:93:5b:50:1d:1d:21:48:71:be:ce:fe:87:f2:2b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20AE62643C64442088545A3D5BA49A68A414B159
        Validity
            Not Before: Feb  4 19:53:04 2025 GMT
            Not After : Feb  3 19:58:04 2026 GMT
        Subject: CN=84048E4DD877F0C4895A0E2343B6B552557BC887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:f8:0d:b4:47:85:a2:b7:09:52:b9:ca:aa:
                    e0:78:7c:d8:e3:b6:b7:b3:1f:0b:1e:14:83:ee:96:
                    6a:41:ba:19:0c:5c:fd:9d:2d:d5:3b:b3:67:a1:d3:
                    bf:e5:8d:1e:eb:07:af:93:e7:13:01:4d:df:a6:fe:
                    05:a8:09:ba:7e:c2:50:f7:50:97:22:89:1c:3e:df:
                    29:d5:08:0c:53:33:cb:8f:e0:a4:82:59:c3:be:82:
                    d8:30:da:d7:65:2d:27:14:99:7c:87:1d:41:6d:c2:
                    e4:fe:7c:2a:ff:62:81:75:19:42:bd:d7:63:75:2a:
                    cc:e5:4e:e7:1a:96:7d:68:4c:fa:40:5b:a6:e9:5b:
                    bf:4c:0d:09:42:57:05:08:42:6b:d6:a1:47:6a:ab:
                    4b:1b:08:28:51:c3:5b:d4:f3:47:0e:b2:3e:35:36:
                    a7:35:2b:67:6a:92:c6:b7:58:c5:e0:ce:a5:c0:f0:
                    71:d9:93:7f:73:f7:e1:ce:88:1c:ab:1f:ed:7c:d6:
                    b6:92:30:de:43:30:b5:b9:93:35:16:85:32:2c:94:
                    2e:bf:1b:fa:51:dd:3a:6d:e8:11:51:d8:09:86:4c:
                    5f:a8:4f:a7:33:27:6d:08:1f:fa:c6:21:48:69:48:
                    c5:28:70:17:8c:e6:18:7d:6c:48:11:5e:80:e1:50:
                    0c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:04:8E:4D:D8:77:F0:C4:89:5A:0E:23:43:B6:B5:52:55:7B:C8:87
            X509v3 Authority Key Identifier:
                keyid:20:AE:62:64:3C:64:44:20:88:54:5A:3D:5B:A4:9A:68:A4:14:B1:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/20AE62643C64442088545A3D5BA49A68A414B159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AE62643C64442088545A3D5BA49A68A414B159.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF6C9D067570ABC220776D150A4763A1414D6D4430ED5AA666F755F396A8A6A5/0/323830333a623231303a3a2f33322d3438203d3e20323731393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b210::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:eb:87:8f:49:17:d8:69:51:6b:61:47:3d:be:58:4a:3b:72:
         63:7a:4e:5d:ee:f9:b0:f7:30:be:5f:26:54:9c:3a:f9:f8:9e:
         d9:e3:d4:58:50:b9:0f:5b:1c:68:b0:e2:01:16:e3:34:19:83:
         72:a8:f7:4f:a9:43:c2:1a:a6:1a:c8:17:5d:bd:1d:83:6d:20:
         87:dc:48:b4:76:15:18:60:4f:59:91:e2:74:4e:a9:bd:62:ca:
         61:a4:c2:a9:af:94:6b:15:4c:6a:0e:f0:32:62:f9:a0:78:61:
         00:74:ed:78:c7:97:7b:be:ba:b8:54:35:d6:64:a0:2b:41:d4:
         d1:62:3b:08:29:d3:4d:e8:32:f1:55:31:9a:8d:7c:de:9c:40:
         86:bb:01:a2:96:ab:10:06:1d:7f:55:8a:84:90:cd:4e:8d:88:
         c9:e9:c8:e4:6b:de:1d:0d:a3:6c:9e:59:97:8f:a3:a6:78:b1:
         44:2b:70:a0:77:aa:e0:ba:06:c7:42:51:07:7f:04:fc:94:ba:
         1d:98:0d:06:4f:03:4e:96:03:b2:b1:a2:eb:7f:5a:d2:0e:e1:
         4d:46:f3:a9:1a:b6:a5:13:0d:c7:97:33:69:81:a8:57:76:48:
         6e:74:2e:8c:9f:4d:94:9b:c2:02:24:19:e2:12:2f:09:d2:89:
         a1:9d:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:02 2025 by rpki-client