Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa
File:                     323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa (raw, json)
Hash identifier:          KIEkSXBUvkmvlZFj8qpbSneQUu3idX7opP395FmRaIQ=
Subject key identifier:   83:E3:25:C8:08:17:C8:B4:0D:58:E2:27:B9:4D:4E:8C:2D:C0:91:3E
Certificate issuer:       /CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
Certificate serial:       0559145F1F95C3BE244E95B80DF7F8A8E507FF93
Authority key identifier: 8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 18:11:59 +0000
ROA not before:           Tue 04 Feb 2025 18:06:59 +0000
ROA not after:            Tue 03 Feb 2026 18:11:59 +0000
asID:                     262186
IP address blocks:        2803:6a60:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:59:14:5f:1f:95:c3:be:24:4e:95:b8:0d:f7:f8:a8:e5:07:ff:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F9641F341B31782AAD44DE41EE0CD970FF9ECD5
        Validity
            Not Before: Feb  4 18:06:59 2025 GMT
            Not After : Feb  3 18:11:59 2026 GMT
        Subject: CN=83E325C80817C8B40D58E227B94D4E8C2DC0913E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:93:27:8a:dc:67:2b:6e:99:ee:24:8b:e6:
                    b6:4f:38:95:78:e0:fb:b1:72:5d:a1:94:ed:69:ca:
                    fa:e2:50:2b:b8:c9:f4:c2:f5:7b:db:fc:04:77:ce:
                    a7:07:93:24:d2:22:72:d6:04:db:1b:aa:bb:aa:dc:
                    a5:56:c0:9f:1e:7c:84:c7:83:8d:5f:b1:fc:a7:63:
                    75:d6:a5:4a:a6:3b:6c:08:40:c0:96:b1:18:c7:35:
                    59:f0:8a:0e:38:bd:7f:6c:c2:82:70:22:92:d3:e4:
                    22:2a:47:6f:98:56:8d:ce:07:58:88:e4:08:41:c8:
                    ac:41:b1:22:93:0d:92:92:8b:ec:88:8e:ba:5d:35:
                    2c:4e:43:fc:65:4e:78:04:59:b2:cd:88:cb:1c:21:
                    9b:36:7c:81:04:50:e8:dd:8c:28:15:92:f8:a2:a1:
                    ff:90:9b:eb:b4:33:77:a9:72:d7:1b:2e:f2:e8:35:
                    0a:81:27:ee:7e:29:3c:b3:b9:7f:22:a1:b8:7a:71:
                    69:05:35:74:44:da:7a:a1:fb:75:4d:37:4b:7a:00:
                    c6:da:ff:bc:d6:92:95:7e:d0:1b:20:dd:66:c3:18:
                    14:84:36:ea:b0:18:92:fe:85:73:7a:a2:11:57:d3:
                    b4:5c:b6:c3:21:26:d9:cf:2c:a4:58:ab:66:8b:2b:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E3:25:C8:08:17:C8:B4:0D:58:E2:27:B9:4D:4E:8C:2D:C0:91:3E
            X509v3 Authority Key Identifier:
                keyid:8F:96:41:F3:41:B3:17:82:AA:D4:4D:E4:1E:E0:CD:97:0F:F9:EC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F9641F341B31782AAD44DE41EE0CD970FF9ECD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3D39BA4B81A3C02B854CC247F4CFE53525BF2423F298B8C535A065BBF091990/0/323830333a366136303a333a3a2f34382d3438203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a60:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:a7:67:4c:f0:b6:86:b0:27:aa:05:15:b4:ae:44:27:9b:
         f3:ce:71:f4:9d:17:73:ff:4f:84:97:ba:ee:ab:6f:c7:ec:10:
         ce:c6:dd:d4:37:6a:b4:8b:36:bb:10:85:ad:c5:35:cf:74:3b:
         17:82:05:28:ad:9f:82:0d:0e:c4:cc:23:26:6d:8c:5e:a5:4a:
         e7:88:82:e9:5a:9d:8b:eb:26:15:14:76:98:08:ee:c5:8c:7c:
         74:e6:27:ef:01:24:92:36:39:4f:9c:9c:00:39:bc:37:e7:f0:
         6a:fc:e9:66:b4:73:3d:d6:c9:9f:7f:d8:9b:39:24:d3:9e:9f:
         2a:43:33:82:bd:e6:35:99:ea:f9:cc:ea:99:d3:be:ff:cf:86:
         0b:47:f1:88:e6:ae:63:9b:5f:1d:31:0d:fa:ce:6f:0d:fc:ae:
         6e:c9:f9:22:8f:a9:9f:3f:49:1f:1e:64:ae:e8:b5:b9:a3:da:
         71:23:e7:1e:be:84:19:de:98:b6:16:c7:71:4f:11:8f:a0:9f:
         c5:ed:e6:10:b7:d8:fb:69:51:dd:e9:7d:74:ec:c8:21:e7:11:
         0c:6e:ab:e0:e3:ca:07:54:1f:87:68:08:9c:1c:44:2c:e6:2a:
         dc:ad:92:4b:2f:10:53:ee:95:5d:a8:1e:16:a5:ff:d0:e3:60:
         c3:b6:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:09 2025 by rpki-client