Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a3a2f33322d3334203d3e20323639383034.roa
File:                     323830333a623561303a3a2f33322d3334203d3e20323639383034.roa (raw, json)
Hash identifier:          NemBlA+qOE+wDSDj5H+gC8f0S+1PzQyP+GJia2FpKSc=
Subject key identifier:   92:B8:0C:58:AE:A6:BE:3B:C5:33:65:CB:31:85:EB:38:82:A7:60:4F
Certificate issuer:       /CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
Certificate serial:       57664B59FCB03E50F95937849355CE42179AE776
Authority key identifier: 6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a3a2f33322d3334203d3e20323639383034.roa
Signing time:             Tue 04 Feb 2025 18:07:36 +0000
ROA not before:           Tue 04 Feb 2025 18:02:36 +0000
ROA not after:            Tue 03 Feb 2026 18:07:36 +0000
asID:                     269804
IP address blocks:        2803:b5a0::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:66:4b:59:fc:b0:3e:50:f9:59:37:84:93:55:ce:42:17:9a:e7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
        Validity
            Not Before: Feb  4 18:02:36 2025 GMT
            Not After : Feb  3 18:07:36 2026 GMT
        Subject: CN=92B80C58AEA6BE3BC53365CB3185EB3882A7604F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:c6:e9:bc:b2:b0:d9:f3:95:80:77:99:49:
                    ac:7d:a0:42:b3:c8:67:21:24:fc:20:87:33:4d:1e:
                    0d:45:39:db:f8:62:86:2c:1e:fb:75:fa:01:10:70:
                    4e:1d:66:93:45:71:b4:b5:a3:c7:40:7e:34:eb:ed:
                    fc:d0:6d:85:54:01:a9:d1:0c:d2:23:3d:d0:26:ce:
                    06:28:96:ee:60:f9:81:a8:8e:db:23:af:34:83:04:
                    be:ea:4d:2f:96:7e:9e:1b:7b:b6:f7:d2:9f:5e:ed:
                    dc:d1:ab:e1:cc:ed:c9:f7:42:5b:a9:24:c6:d3:fe:
                    8d:f1:4f:47:a4:d8:b3:da:03:f2:ca:c8:7a:ed:61:
                    00:e6:d4:dd:55:d3:3c:4b:eb:27:26:2c:fb:13:08:
                    32:2e:1e:c9:df:93:c0:48:94:64:d5:9d:4b:3b:27:
                    ce:ad:cd:50:22:fb:b9:d8:05:34:9e:cf:ef:ed:e3:
                    38:66:ef:22:db:53:62:3a:c4:22:65:2a:38:5e:8d:
                    06:92:94:33:4e:9f:d9:10:e4:61:86:6c:8e:1d:1d:
                    1c:a4:4c:ff:92:7c:d0:9d:d9:f6:75:28:e0:75:a0:
                    a1:99:df:a2:65:dc:4b:c9:5b:fd:2c:54:de:48:67:
                    6c:ce:8c:98:cd:cb:54:ea:e4:d3:dc:11:5b:4f:59:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B8:0C:58:AE:A6:BE:3B:C5:33:65:CB:31:85:EB:38:82:A7:60:4F
            X509v3 Authority Key Identifier:
                keyid:6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/323830333a623561303a3a2f33322d3334203d3e20323639383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:5c:7f:86:36:b4:8a:39:30:90:18:fa:b2:de:d3:e2:9e:8f:
         26:76:2b:33:0e:72:b4:35:53:8e:d4:23:45:73:a9:46:14:91:
         65:68:d6:40:45:b4:42:04:b6:ba:66:53:58:b0:c3:fa:3b:e4:
         86:28:e0:22:ac:96:ac:3a:23:d6:30:04:9e:c7:37:67:bf:7d:
         bc:72:2c:b2:99:15:88:ec:2d:3b:4b:1f:f3:e5:7b:0d:98:78:
         37:3f:ad:e3:0a:aa:25:e8:fa:75:d9:1e:d5:13:6c:82:aa:64:
         00:12:2d:a1:21:eb:6b:f2:3c:d7:7b:4e:22:85:7d:be:6b:ce:
         d1:4b:89:38:d2:b1:cc:01:58:a4:cb:83:e1:cc:02:75:4f:4b:
         7f:6a:fe:b1:0e:9a:43:cb:a5:34:07:d0:1f:be:bd:19:73:fd:
         a9:95:74:fb:e8:95:2e:81:d0:d8:33:12:d7:22:99:7c:f5:59:
         5e:52:7a:4d:a1:55:48:46:04:de:66:f1:8d:66:89:c9:b7:8d:
         17:fe:30:99:03:ae:5a:45:52:bc:aa:76:87:43:0c:dd:5d:04:
         da:65:23:55:8c:f2:b1:19:47:0d:db:77:55:be:50:e2:64:8f:
         0e:b3:27:ea:1e:2f:4f:d3:ce:a6:dc:0e:b8:5f:96:54:f2:91:
         d7:5c:8e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:56:34 2025 by rpki-client