Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323632353839.roa
File:                     323830333a616561303a3a2f33322d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          6UyiGfinTzH/hU/n/bU/lpFyKKe7fLUqxhB+iEylph0=
Subject key identifier:   69:05:61:CD:42:F5:D2:24:7B:A3:6A:AC:08:35:AB:79:A2:09:8A:C2
Certificate issuer:       /CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Certificate serial:       0D2C6EEB7B97D43391C10141EB247309C8FA4503
Authority key identifier: 02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:45:48 +0000
ROA not before:           Tue 04 Feb 2025 18:40:48 +0000
ROA not after:            Tue 03 Feb 2026 18:45:48 +0000
asID:                     262589
IP address blocks:        2803:aea0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2c:6e:eb:7b:97:d4:33:91:c1:01:41:eb:24:73:09:c8:fa:45:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
        Validity
            Not Before: Feb  4 18:40:48 2025 GMT
            Not After : Feb  3 18:45:48 2026 GMT
        Subject: CN=690561CD42F5D2247BA36AAC0835AB79A2098AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c4:fd:8c:3c:be:e0:7b:76:7c:0d:6a:2d:b1:
                    a5:8c:83:5b:6c:59:29:8f:15:51:bf:10:93:e5:a6:
                    5f:a7:f2:b0:01:7d:a0:c5:f1:fc:22:80:82:73:b4:
                    85:f1:3e:53:20:0f:34:49:bf:63:40:2c:ca:25:8a:
                    c0:2e:b9:5b:93:e5:c4:19:63:ac:21:8d:b3:0c:42:
                    84:d8:5c:01:af:84:d0:ed:e1:d8:cc:35:d9:23:3b:
                    96:a8:47:96:4e:78:a9:75:bd:e5:21:90:9f:a9:a0:
                    c2:44:80:c9:37:d5:0b:a1:82:a9:bc:31:44:77:36:
                    22:a2:7b:c1:a8:2d:65:f3:0f:7b:c1:ee:e7:b1:4e:
                    a9:1a:34:71:cf:aa:a5:26:4d:a2:b5:30:6a:63:2e:
                    63:1a:67:fb:34:7d:3a:3d:18:18:fc:87:2c:e5:ac:
                    9e:aa:c0:1a:9b:78:75:a3:ff:67:6b:e9:be:e5:a4:
                    82:0b:c4:fe:7a:89:0a:ad:65:69:72:e2:7e:6c:03:
                    ac:0e:f3:6b:a9:1c:aa:95:11:89:0d:16:80:a5:c9:
                    da:be:89:74:1d:e3:84:54:9f:86:d0:e8:bb:5a:e6:
                    e7:9a:88:7d:85:79:bf:f5:20:d7:a4:01:3f:4b:40:
                    30:65:61:2d:7e:d8:d8:de:98:1b:2e:84:b3:03:00:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:05:61:CD:42:F5:D2:24:7B:A3:6A:AC:08:35:AB:79:A2:09:8A:C2
            X509v3 Authority Key Identifier:
                keyid:02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/323830333a616561303a3a2f33322d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:c7:a0:f2:b5:85:5a:76:c4:2f:ee:aa:b2:ff:57:4c:c2:ee:
         a2:e4:bf:11:00:be:ea:d3:56:54:64:7e:72:a6:9c:df:d5:d8:
         bf:d4:83:82:19:7e:11:a5:66:d5:35:22:da:6f:bd:05:12:7a:
         e1:a3:91:a9:e1:8f:ef:9e:c7:9c:bc:5e:01:39:a7:bd:78:09:
         d4:37:2f:b3:67:ba:ab:da:2f:61:59:23:2a:2a:96:ae:be:eb:
         04:4b:01:d8:38:4c:9f:13:86:10:9f:a6:d2:ee:7b:0f:46:5f:
         35:2c:17:de:c3:00:8e:6a:03:02:62:20:21:28:8b:8a:a3:a3:
         f4:83:54:c7:7c:d4:4f:08:19:26:64:0b:df:03:bf:a7:2f:ff:
         dc:dd:69:2e:62:99:27:d9:0d:f4:ff:05:63:9a:d6:16:39:4c:
         77:d8:8b:30:e8:d2:57:6a:04:72:ed:8b:2b:b8:54:64:51:0d:
         ed:f3:c8:86:08:ba:08:52:04:c7:62:26:27:ba:2a:cd:b4:04:
         1c:06:df:53:46:98:4e:6e:cb:15:2b:3c:c8:5f:51:c2:45:22:
         18:85:6e:e8:9a:17:34:32:e9:b4:ae:42:a6:9a:b3:94:39:37:
         0b:a0:ab:56:97:9f:70:69:58:a1:09:e5:8e:2b:cb:3c:74:6c:
         54:a2:82:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:48 2025 by rpki-client