Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBFF44AD729E5CB57D46B28E36D5626B8B3B7DDD3B61642C8231B6750BB89D5E/0/323830333a386334303a3a2f33322d3332203d3e20323633373839.roa
File:                     323830333a386334303a3a2f33322d3332203d3e20323633373839.roa (raw, json)
Hash identifier:          BfHa/hvuKUHDVQefgSbsUpKFcjwKThsUuqzytToTaOA=
Subject key identifier:   84:AE:E0:F6:13:12:E6:81:CF:1E:A4:45:86:A8:AC:B8:54:ED:C8:33
Certificate issuer:       /CN=DA177D3E573B23B5A1C25781D96D90D3EA02130C
Certificate serial:       7E7623CF5293BAB390249F2EA3F16AD8C547170B
Authority key identifier: DA:17:7D:3E:57:3B:23:B5:A1:C2:57:81:D9:6D:90:D3:EA:02:13:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA177D3E573B23B5A1C25781D96D90D3EA02130C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBFF44AD729E5CB57D46B28E36D5626B8B3B7DDD3B61642C8231B6750BB89D5E/0/323830333a386334303a3a2f33322d3332203d3e20323633373839.roa
Signing time:             Tue 04 Feb 2025 18:08:34 +0000
ROA not before:           Tue 04 Feb 2025 18:03:34 +0000
ROA not after:            Tue 03 Feb 2026 18:08:34 +0000
asID:                     263789
IP address blocks:        2803:8c40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:76:23:cf:52:93:ba:b3:90:24:9f:2e:a3:f1:6a:d8:c5:47:17:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA177D3E573B23B5A1C25781D96D90D3EA02130C
        Validity
            Not Before: Feb  4 18:03:34 2025 GMT
            Not After : Feb  3 18:08:34 2026 GMT
        Subject: CN=84AEE0F61312E681CF1EA44586A8ACB854EDC833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:69:db:e0:57:0e:ba:44:59:14:cf:b5:c3:
                    fa:4f:87:cb:a2:21:bf:d2:ae:bd:d6:f9:ce:a8:89:
                    40:a3:1f:c3:8f:b0:82:ea:64:fd:b4:82:e6:ee:98:
                    e6:cb:68:24:4d:f5:fb:25:94:8e:75:68:90:5a:80:
                    50:96:29:2a:da:d3:08:75:e6:5e:92:8c:d6:02:03:
                    c6:8e:c6:04:f4:78:d2:48:47:98:c0:13:a7:f9:68:
                    6c:b3:d0:1d:8c:6a:bc:11:0b:8c:d2:16:be:39:d4:
                    a8:5b:e6:19:a7:7a:8c:45:0c:f4:12:b1:b2:e4:30:
                    df:12:51:46:f3:e9:84:21:55:c3:18:32:c2:35:77:
                    fe:49:84:1e:73:31:05:6f:81:61:cb:91:e8:62:0d:
                    12:b3:73:bf:f3:f5:5e:59:4f:63:db:a3:e0:a3:31:
                    7b:5d:d0:ad:5c:1d:31:59:d5:af:fc:81:29:9e:66:
                    e2:51:65:f8:08:f2:dc:28:3f:37:c9:16:1c:bf:38:
                    a3:f6:ff:57:28:0a:e2:06:b0:89:1b:cb:06:64:8b:
                    bd:35:89:f0:a2:ac:90:c4:a3:54:e3:cc:70:37:2a:
                    25:b0:66:5d:78:2f:40:6c:4a:81:d7:bd:af:77:64:
                    08:a0:d3:9f:f9:89:42:79:21:1d:c9:30:5a:85:07:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AE:E0:F6:13:12:E6:81:CF:1E:A4:45:86:A8:AC:B8:54:ED:C8:33
            X509v3 Authority Key Identifier:
                keyid:DA:17:7D:3E:57:3B:23:B5:A1:C2:57:81:D9:6D:90:D3:EA:02:13:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBFF44AD729E5CB57D46B28E36D5626B8B3B7DDD3B61642C8231B6750BB89D5E/0/DA177D3E573B23B5A1C25781D96D90D3EA02130C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA177D3E573B23B5A1C25781D96D90D3EA02130C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBFF44AD729E5CB57D46B28E36D5626B8B3B7DDD3B61642C8231B6750BB89D5E/0/323830333a386334303a3a2f33322d3332203d3e20323633373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:ae:68:4b:b9:86:4a:7c:64:92:bc:be:e2:18:48:0c:e1:18:
         1a:26:f4:46:7c:83:21:59:4a:a2:ec:a0:77:f9:9d:91:50:5b:
         a1:e2:a5:fa:2d:8f:62:69:0f:6d:1a:b0:9b:5e:5d:92:99:59:
         8c:31:0e:38:73:f4:e0:ca:30:1c:96:a6:ad:b4:7c:4e:56:58:
         83:92:fc:39:ea:df:8e:94:55:8d:01:ca:07:1f:54:20:ad:82:
         b5:78:19:37:fd:01:05:0c:e8:5d:bc:bb:c6:53:cc:3b:aa:98:
         95:81:2e:ea:07:01:91:6c:fa:85:f8:34:5f:50:f4:ca:2a:48:
         91:9d:e1:e0:5f:cf:a2:bd:d4:a8:7e:9b:93:a6:66:96:d5:6a:
         f9:83:31:9c:8f:0d:6b:67:2d:4c:db:37:ac:19:9e:9a:de:d3:
         4e:d8:c4:b8:6f:1a:b5:b7:43:47:a7:3b:aa:b6:6a:a2:72:20:
         d6:9f:05:c6:00:60:c6:96:48:23:3c:6b:c1:14:39:3d:cb:f3:
         dd:43:e6:61:c3:80:3e:d1:45:16:7e:5a:6d:b6:4b:fd:e3:ee:
         d3:c3:8f:a3:a1:be:87:75:85:60:3f:66:81:c5:40:3d:4a:7f:
         88:16:2d:12:e9:ad:67:09:57:f4:f1:04:00:85:c7:55:3c:65:
         5f:25:35:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:56:52 2025 by rpki-client