Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/323830333a363038303a3a2f32392d3332203d3e203332393334.roa
File:                     323830333a363038303a3a2f32392d3332203d3e203332393334.roa (raw, json)
Hash identifier:          UWTzQiR3CLbw3JMlyAtUmpKiZRpwsF3EYrVFHSNXsj4=
Subject key identifier:   E0:F6:81:FA:A7:F6:58:2C:CE:BD:5F:F4:C5:80:FA:48:6C:79:B3:0A
Certificate issuer:       /CN=57EE4335FF7D52DB64468C8FA6B4173A9E2635AA
Certificate serial:       798A3DE7CE34CA1FFE7BB72C7F958414160E4740
Authority key identifier: 57:EE:43:35:FF:7D:52:DB:64:46:8C:8F:A6:B4:17:3A:9E:26:35:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/323830333a363038303a3a2f32392d3332203d3e203332393334.roa
Signing time:             Tue 04 Feb 2025 18:40:06 +0000
ROA not before:           Tue 04 Feb 2025 18:35:06 +0000
ROA not after:            Tue 03 Feb 2026 18:40:06 +0000
asID:                     32934
IP address blocks:        2803:6080::/29 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8a:3d:e7:ce:34:ca:1f:fe:7b:b7:2c:7f:95:84:14:16:0e:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57EE4335FF7D52DB64468C8FA6B4173A9E2635AA
        Validity
            Not Before: Feb  4 18:35:06 2025 GMT
            Not After : Feb  3 18:40:06 2026 GMT
        Subject: CN=E0F681FAA7F6582CCEBD5FF4C580FA486C79B30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:7b:cb:12:d2:df:cf:e5:ed:cb:25:80:3b:
                    46:fd:3d:8d:cc:fc:95:c9:1c:73:aa:06:d2:04:98:
                    d8:16:4d:b4:c8:7f:62:29:aa:04:bd:dc:fa:10:90:
                    bc:c9:4a:8c:09:65:29:52:31:d0:61:f1:b6:e2:c3:
                    f2:9a:a2:89:d9:bc:3c:05:d4:c0:92:41:b9:e9:75:
                    c3:6e:a2:3a:68:8a:79:8f:70:89:5a:78:0b:d5:44:
                    9e:b0:21:36:92:a3:70:0b:46:4d:b4:9d:e3:ee:90:
                    0e:a5:f6:fd:17:2a:ca:36:87:6a:cb:fa:68:fa:09:
                    e7:fe:84:06:db:5a:27:85:40:83:d4:b2:93:da:f4:
                    fb:6f:b5:63:16:2a:81:a5:b8:d6:f9:4d:f4:a5:46:
                    e7:99:d2:b1:e4:63:66:ce:3b:8e:7f:16:eb:bc:61:
                    53:77:7a:d1:0f:35:ea:eb:dd:cc:28:7e:10:79:29:
                    1f:02:d9:d8:5b:63:ee:01:ec:b9:87:69:b6:e5:86:
                    6d:fa:6d:86:76:24:c8:5c:85:aa:93:9f:e4:57:45:
                    d7:04:ea:85:74:cf:9d:ba:a2:a5:7a:0d:e7:3b:d4:
                    ac:ec:ce:28:41:ee:65:85:ef:54:f8:81:ab:42:07:
                    aa:6e:52:ff:bb:e1:9e:1e:3d:1e:e2:74:9e:6f:cb:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F6:81:FA:A7:F6:58:2C:CE:BD:5F:F4:C5:80:FA:48:6C:79:B3:0A
            X509v3 Authority Key Identifier:
                keyid:57:EE:43:35:FF:7D:52:DB:64:46:8C:8F:A6:B4:17:3A:9E:26:35:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/323830333a363038303a3a2f32392d3332203d3e203332393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6080::/29

    Signature Algorithm: sha256WithRSAEncryption
         a3:d6:04:b6:25:85:b7:21:a4:c2:42:da:13:65:6b:5e:53:60:
         e1:74:59:4b:4f:8b:ea:bc:5f:6b:03:ca:86:5d:c1:2f:fb:54:
         ec:1e:56:08:dd:80:37:36:e8:72:44:98:0d:7b:c2:05:71:6a:
         a8:7d:68:08:be:1c:a7:20:1f:37:23:a4:2d:15:63:27:8d:49:
         f5:42:ea:51:31:c9:ef:a8:99:12:c1:13:8a:79:bc:ce:9f:68:
         20:d8:60:ab:76:3b:70:56:a7:c4:c7:01:ed:c8:a7:cb:e9:5b:
         cb:da:37:ad:6f:40:5a:91:60:d7:df:3c:a4:d2:69:51:2b:d3:
         60:c5:3e:33:a9:44:94:ff:1e:56:f4:0d:1b:93:8a:14:9a:1c:
         fc:3a:39:7a:7a:60:85:17:61:12:13:0a:35:e0:ff:d5:79:c0:
         90:9a:ab:ed:73:b7:83:6d:c9:72:ee:be:1b:d2:dc:ec:c9:5a:
         16:f6:b9:ea:f1:02:0d:46:34:15:03:f9:85:c8:4c:8f:2c:b8:
         47:44:b0:6e:b7:7e:b2:56:28:93:3d:3d:53:a1:62:f1:0a:d2:
         e2:47:e5:78:5a:cf:44:5e:c8:5d:fc:49:33:63:ff:dc:dc:74:
         e9:12:2b:f6:f2:58:e0:21:a2:4e:b8:cb:d1:8a:2c:2e:f1:2b:
         6f:84:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:02:13 2025 by rpki-client