Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa
File:                     323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa (raw, json)
Hash identifier:          gCZ4bHFHVZ7vwPhXk9TtXqNikycJJuxyWHRExLwQjxY=
Subject key identifier:   67:58:C8:55:02:05:FD:D3:46:66:59:5A:7A:3F:72:CF:50:3C:E9:EA
Certificate issuer:       /CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
Certificate serial:       7040D78A9052E454D8E61B66334E7A3B15CBE043
Authority key identifier: 5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa
Signing time:             Tue 04 Feb 2025 18:46:52 +0000
ROA not before:           Tue 04 Feb 2025 18:41:52 +0000
ROA not after:            Tue 03 Feb 2026 18:46:52 +0000
asID:                     271927
IP address blocks:        2803:ea10:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:40:d7:8a:90:52:e4:54:d8:e6:1b:66:33:4e:7a:3b:15:cb:e0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC74DB2E733289AD330B5CC47EFF7E610D2236E
        Validity
            Not Before: Feb  4 18:41:52 2025 GMT
            Not After : Feb  3 18:46:52 2026 GMT
        Subject: CN=6758C8550205FDD34666595A7A3F72CF503CE9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:77:ac:10:f0:ca:50:e1:10:59:da:9f:97:8c:
                    88:d1:62:93:41:cf:ff:30:83:b0:fe:7d:99:d6:cb:
                    c0:91:2a:bb:c8:d5:56:27:92:f4:99:1a:9f:a7:e3:
                    de:f6:f0:33:14:43:35:1e:e7:07:c6:67:f0:38:92:
                    1d:9f:51:05:f8:14:10:3a:62:e5:22:e2:4a:48:a1:
                    6d:95:fc:08:13:2d:e9:63:c8:d0:ff:46:e3:9c:f7:
                    62:55:7f:ba:1e:f4:cb:fe:14:5e:b1:30:12:f6:1e:
                    2d:a0:fc:4e:b4:0e:35:2f:68:78:32:9c:1f:c3:eb:
                    b0:76:95:89:9d:55:e4:50:19:2b:a2:ee:84:04:b1:
                    00:b8:f5:e1:5a:f0:ba:f8:12:f5:3e:d1:fd:f7:74:
                    52:33:5d:9c:ce:60:d7:2f:9e:cc:06:78:c9:7d:55:
                    f5:8a:e5:0b:2b:68:02:b6:60:a1:21:a4:3c:d2:92:
                    ec:0d:cc:b3:95:a7:e9:8d:2a:82:13:fe:e1:6b:f0:
                    13:e1:13:32:c6:57:ec:8c:d6:0b:82:db:38:72:93:
                    5f:2c:42:03:1c:ec:14:df:c0:c7:d7:28:30:5d:a3:
                    05:ef:d5:b9:24:49:0a:ec:66:0e:5f:c8:18:c6:66:
                    a5:d4:b9:a3:74:1d:49:49:e9:6b:ea:72:7c:22:e3:
                    ac:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:58:C8:55:02:05:FD:D3:46:66:59:5A:7A:3F:72:CF:50:3C:E9:EA
            X509v3 Authority Key Identifier:
                keyid:5A:C7:4D:B2:E7:33:28:9A:D3:30:B5:CC:47:EF:F7:E6:10:D2:23:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5AC74DB2E733289AD330B5CC47EFF7E610D2236E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8995BF863751A5C60951770258DFE4F82DB7390E62C1B7625A5E1F4190120A9/0/323830333a656131303a343a3a2f34382d3438203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:de:77:28:bd:ce:e3:11:a4:c3:4c:7c:ec:ba:4b:bc:58:7c:
         ef:7a:fd:06:65:40:a0:37:73:d9:f1:76:e6:99:63:29:bd:7e:
         af:11:e9:5e:29:36:b2:5a:7d:09:48:73:3f:26:df:ef:1b:d1:
         8f:9c:13:72:af:a7:96:d4:48:3a:d8:40:bb:e1:a5:1e:ba:f6:
         e9:ac:30:6a:bc:95:c2:e2:78:d7:e6:a9:ea:e1:23:99:23:8d:
         bd:17:d1:4c:38:45:e1:f1:9f:c4:d6:5b:30:ea:2d:bc:0c:cb:
         6c:28:9e:ae:b4:06:a1:f0:f4:da:8b:88:da:a7:02:b5:f4:fa:
         7a:cf:f3:a3:50:60:42:69:c1:3b:71:90:ee:85:82:e7:9e:5a:
         59:1d:02:33:96:52:fb:7f:56:af:2e:a3:d9:5a:7e:fb:99:b4:
         95:9f:31:f0:46:12:a9:2b:fc:75:92:51:df:74:2e:95:31:4b:
         90:3f:74:16:29:a8:21:8b:e3:ac:a3:e9:21:c0:9c:f7:87:0d:
         e3:08:a1:85:c5:1a:d5:0c:39:ba:a5:8a:98:ce:33:da:3d:7d:
         15:4d:17:6c:94:21:0a:c2:1d:83:f3:db:36:03:77:9c:e8:36:
         55:60:e0:0a:6b:79:46:31:b3:7c:e7:bb:aa:3a:5a:c4:7b:bf:
         cd:ee:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:53 2025 by rpki-client