Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/323830333a623435303a3a2f33322d3438203d3e20323733313337.roa
File:                     323830333a623435303a3a2f33322d3438203d3e20323733313337.roa (raw, json)
Hash identifier:          UfNtSpYp4tNAhUPUqhv+Y7/jySzcV6H3F8/k4eIBeUM=
Subject key identifier:   6F:7B:3C:49:CC:AA:D2:25:D4:39:7F:C2:20:22:9F:36:86:AE:65:1E
Certificate issuer:       /CN=399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5
Certificate serial:       1547311C234A092388F7FEBAFF57C84E73CCD3EB
Authority key identifier: 39:99:74:13:8A:F0:FC:E4:BC:93:28:F7:0E:E6:C0:D3:EF:EA:46:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/323830333a623435303a3a2f33322d3438203d3e20323733313337.roa
Signing time:             Tue 04 Feb 2025 18:26:34 +0000
ROA not before:           Tue 04 Feb 2025 18:21:34 +0000
ROA not after:            Tue 03 Feb 2026 18:26:34 +0000
asID:                     273137
IP address blocks:        2803:b450::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:47:31:1c:23:4a:09:23:88:f7:fe:ba:ff:57:c8:4e:73:cc:d3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5
        Validity
            Not Before: Feb  4 18:21:34 2025 GMT
            Not After : Feb  3 18:26:34 2026 GMT
        Subject: CN=6F7B3C49CCAAD225D4397FC220229F3686AE651E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:be:57:e5:6d:15:23:0e:ec:5e:31:68:cc:db:
                    3b:d2:64:b5:b3:70:d3:ca:92:bc:b5:47:29:0e:cc:
                    6f:0e:2f:23:bb:f0:63:49:0d:a8:dd:75:00:f9:d7:
                    5d:5f:7d:bf:7a:3a:f5:e0:34:8f:9f:f3:5b:33:83:
                    09:ce:ee:0a:30:9f:e5:45:2a:68:dc:28:1d:8c:b5:
                    9e:e1:5b:2e:9e:fb:ec:30:fe:cf:78:28:6f:ad:90:
                    bc:15:0a:2b:11:60:d4:81:4e:28:a0:9d:19:ca:23:
                    0d:3a:c5:62:af:cf:28:70:4d:f7:05:e0:26:c1:f0:
                    43:89:89:9f:e7:8b:f5:51:60:4f:22:fe:ee:25:77:
                    44:f5:34:a8:1c:61:60:83:48:8a:16:d6:de:a4:80:
                    e0:29:bd:bc:69:08:ca:ad:f3:f3:45:24:b0:d3:fe:
                    1c:83:f1:16:5a:33:16:c9:26:64:2b:c7:09:b4:2c:
                    4d:6a:94:cb:fa:27:40:2d:19:55:01:31:ae:c9:40:
                    b3:3a:4b:41:fb:4f:9c:13:14:56:2c:10:bf:be:09:
                    00:15:37:14:42:43:f0:c1:95:f1:96:41:c8:7d:0d:
                    ef:48:2f:02:95:67:1d:f6:ca:ad:be:49:0d:11:a6:
                    37:5c:15:c0:aa:9a:5e:59:cd:be:9d:b8:3e:65:c6:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7B:3C:49:CC:AA:D2:25:D4:39:7F:C2:20:22:9F:36:86:AE:65:1E
            X509v3 Authority Key Identifier:
                keyid:39:99:74:13:8A:F0:FC:E4:BC:93:28:F7:0E:E6:C0:D3:EF:EA:46:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/399974138AF0FCE4BC9328F70EE6C0D3EFEA46C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C03A2199731A5D5881B5F8852325278ACC8AF52FC717F15D4066237F72D76BCA/0/323830333a623435303a3a2f33322d3438203d3e20323733313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b450::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:16:50:7d:07:3d:99:83:ab:fa:72:69:b7:ec:61:ee:0f:5f:
         c3:f0:75:d0:85:ae:d9:7d:45:f6:c3:fc:45:a3:bc:23:8a:cc:
         ab:ff:87:a9:a6:cd:57:91:f8:41:fa:43:7a:c6:c3:a7:de:17:
         72:a6:d1:cf:e6:dc:24:9b:e0:16:f1:a6:d6:24:8c:ac:04:30:
         43:5a:18:70:d4:16:8a:dd:33:8a:02:bc:b5:90:5e:8b:9b:fb:
         9a:39:38:ef:3d:6a:bc:db:3e:8e:39:fa:d8:d3:96:92:8e:85:
         1e:ab:c8:10:68:c1:46:69:67:cb:8f:43:df:35:25:1f:30:b7:
         97:de:a4:e2:eb:68:dc:7f:b9:43:5c:10:85:ee:50:3d:8a:85:
         3f:9f:f3:83:9d:18:2c:77:f2:f9:a9:db:7b:63:3e:ad:8a:8d:
         b8:e7:ae:ff:5d:0d:b8:36:21:3c:16:e9:c1:68:ab:86:91:fe:
         ad:c5:39:d8:07:29:dc:dd:f8:f3:e7:88:94:45:5e:e5:3f:47:
         33:3c:88:e4:0b:35:7f:83:42:e7:05:b6:f5:69:fc:d2:d8:a0:
         5a:7f:e1:16:44:ec:70:94:27:9f:a7:dc:77:c4:46:f5:f3:f9:
         ce:f5:36:5a:3b:08:db:eb:87:e7:0d:a4:67:69:7d:25:65:aa:
         03:c1:16:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:39 2025 by rpki-client