Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/323830333a353434303a3a2f33322d3438203d3e20323634373338.roa
File:                     323830333a353434303a3a2f33322d3438203d3e20323634373338.roa (raw, json)
Hash identifier:          6T4qsaj5euYUCuhuGIIrTjYW0hqCAz+OH3m23uUAsKs=
Subject key identifier:   31:2F:7B:91:E8:13:53:36:3C:56:0B:45:C0:CF:F3:CE:F5:67:D6:2B
Certificate issuer:       /CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4
Certificate serial:       0117F8CE0B5A16DFE8DA7C164EEA907EA3B306AD
Authority key identifier: B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/323830333a353434303a3a2f33322d3438203d3e20323634373338.roa
Signing time:             Tue 04 Feb 2025 18:21:30 +0000
ROA not before:           Tue 04 Feb 2025 18:16:30 +0000
ROA not after:            Tue 03 Feb 2026 18:21:30 +0000
asID:                     264738
IP address blocks:        2803:5440::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:17:f8:ce:0b:5a:16:df:e8:da:7c:16:4e:ea:90:7e:a3:b3:06:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4
        Validity
            Not Before: Feb  4 18:16:30 2025 GMT
            Not After : Feb  3 18:21:30 2026 GMT
        Subject: CN=312F7B91E81353363C560B45C0CFF3CEF567D62B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:18:e6:04:2d:3f:64:e4:fe:87:a4:25:01:
                    fe:7f:b3:0b:3e:8b:84:39:36:f2:c2:7e:e7:e5:9f:
                    26:9a:60:8b:d8:ad:89:73:c6:69:00:b3:8b:a8:64:
                    de:36:bf:16:36:f9:21:bd:a4:d5:a1:23:b1:ac:69:
                    80:3b:9a:0e:10:50:52:a8:b1:cc:83:1c:da:98:d4:
                    c8:fc:c3:fe:bc:cc:69:04:b0:38:a8:b8:17:b0:99:
                    d0:55:64:9a:8f:b4:33:83:d3:ee:7d:a8:e8:68:9f:
                    37:2e:31:cd:86:2e:35:22:31:aa:4d:bc:2b:c7:4a:
                    84:6b:be:d0:0c:18:f9:25:84:79:16:6d:14:85:a8:
                    e4:93:0b:84:96:e5:f2:a6:ab:38:f1:cd:80:21:27:
                    5f:0e:2a:72:50:f9:a7:ec:0d:a9:83:3d:55:b8:bb:
                    7c:0c:89:46:26:ef:6e:2c:27:3e:da:20:6c:9c:8c:
                    02:3d:82:38:30:35:7f:48:24:da:d0:92:bd:28:02:
                    91:83:59:67:45:75:45:0e:af:b7:80:79:d7:86:b0:
                    a4:38:39:66:c4:7d:2b:f8:28:b9:95:6b:ca:3f:0e:
                    1d:6e:f9:0a:2f:ea:a2:7c:b1:4c:c6:6c:4b:6a:16:
                    c5:c6:bd:dc:20:7e:9d:f9:82:82:69:1d:08:19:34:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2F:7B:91:E8:13:53:36:3C:56:0B:45:C0:CF:F3:CE:F5:67:D6:2B
            X509v3 Authority Key Identifier:
                keyid:B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/323830333a353434303a3a2f33322d3438203d3e20323634373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5440::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:02:8e:a7:c8:ed:bf:f4:77:13:21:5e:b7:dd:21:6c:a2:b5:
         72:2a:16:4a:76:c8:f7:f0:26:e0:fd:dc:99:be:88:c1:17:8e:
         44:e5:4e:2b:10:e2:a4:29:10:b8:4a:3a:d0:cc:16:6a:83:32:
         0d:de:c9:26:bb:2e:73:cd:07:94:f4:89:36:01:58:1b:c0:1d:
         9a:83:61:a7:92:83:06:0f:e5:96:fe:a1:29:77:6e:93:bb:51:
         5f:e5:1a:ad:c8:c4:bf:f3:54:2d:79:36:1e:8a:e6:66:b8:6c:
         48:42:88:45:0c:64:95:86:35:d3:e5:aa:54:52:21:49:7c:86:
         46:65:e2:11:03:52:ee:2b:a2:63:7c:cf:73:99:b0:94:66:a7:
         a6:98:fb:23:46:57:e2:4b:0b:24:de:f4:03:f4:18:71:05:c4:
         60:cf:b7:9a:87:d5:96:76:09:ba:89:f7:c3:9f:f9:8e:a4:e0:
         de:24:9d:1e:27:ae:af:10:f9:b1:35:ed:4d:c2:10:fc:2b:e5:
         bb:9f:b7:3d:6e:90:49:59:9d:22:5f:f9:5b:27:23:65:7d:b7:
         e4:99:be:48:d7:4e:61:02:40:96:3b:bb:64:51:e7:ca:63:bf:
         74:db:10:c2:bc:fb:b3:7b:65:e1:b9:ad:9c:b6:07:6b:a8:fa:
         49:cc:ea:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:10 2025 by rpki-client