Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/323830333a373663303a3a2f33322d3438203d3e20323636373439.roa
File:                     323830333a373663303a3a2f33322d3438203d3e20323636373439.roa (raw, json)
Hash identifier:          w5Snr3Che6a8N6JCY+vMsLy4mn3mcTj4WzJ/fg4CHbs=
Subject key identifier:   84:3D:A5:DF:1B:D1:2D:35:2A:C2:90:6E:FC:70:51:FB:20:4C:D0:1D
Certificate issuer:       /CN=F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50
Certificate serial:       19AAD09AC2A79746F0C0489EB130DC038D25527F
Authority key identifier: F6:EA:46:D0:0B:DF:AF:1D:0E:67:F0:FB:53:FA:A2:DD:CB:FC:DF:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/323830333a373663303a3a2f33322d3438203d3e20323636373439.roa
Signing time:             Tue 04 Feb 2025 18:41:59 +0000
ROA not before:           Tue 04 Feb 2025 18:36:59 +0000
ROA not after:            Tue 03 Feb 2026 18:41:59 +0000
asID:                     266749
IP address blocks:        2803:76c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:aa:d0:9a:c2:a7:97:46:f0:c0:48:9e:b1:30:dc:03:8d:25:52:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50
        Validity
            Not Before: Feb  4 18:36:59 2025 GMT
            Not After : Feb  3 18:41:59 2026 GMT
        Subject: CN=843DA5DF1BD12D352AC2906EFC7051FB204CD01D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:1c:4e:6c:3e:b4:6f:cf:7e:da:b7:b4:b4:
                    c1:62:c4:09:31:47:9f:b5:d8:95:a0:0f:f5:b5:e5:
                    07:e1:0e:dc:ef:8a:4a:2d:87:b7:75:35:02:7c:c3:
                    70:ca:53:33:a9:20:b9:bd:f0:36:d0:c0:18:eb:6a:
                    11:be:42:be:2d:71:de:10:a6:e8:e4:be:3e:9d:cf:
                    90:4b:e4:9b:bb:ad:50:19:ae:3f:9f:68:53:d4:4f:
                    3f:74:5d:48:09:c8:50:fa:c3:f7:59:7a:c0:5d:9a:
                    3b:bc:6e:66:8b:5f:83:35:76:45:7d:4c:48:e2:3c:
                    ec:fe:bb:ad:74:79:40:11:53:93:1e:d6:00:d5:c1:
                    bd:b4:00:e9:06:60:f1:6e:4a:a9:f4:0c:1d:74:7e:
                    ca:c9:1d:e9:ea:6b:52:84:b8:f5:7f:09:7c:18:ad:
                    47:75:0c:9e:46:c0:af:dd:cb:27:20:9d:e6:03:0b:
                    ff:a2:fa:72:27:45:cd:c6:0b:e6:7f:4a:10:bc:6f:
                    85:27:97:64:45:20:6e:e6:96:d7:b0:95:20:a3:ba:
                    79:c3:79:a9:7e:f9:35:5a:f2:da:d0:3c:00:e6:a0:
                    35:ab:6d:72:dd:cb:05:cc:4c:26:96:8a:ff:9c:6e:
                    4d:05:d1:52:9d:af:10:39:11:bc:04:a0:25:97:b9:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3D:A5:DF:1B:D1:2D:35:2A:C2:90:6E:FC:70:51:FB:20:4C:D0:1D
            X509v3 Authority Key Identifier:
                keyid:F6:EA:46:D0:0B:DF:AF:1D:0E:67:F0:FB:53:FA:A2:DD:CB:FC:DF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/323830333a373663303a3a2f33322d3438203d3e20323636373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:76c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:84:ef:25:c1:11:f5:09:39:38:92:17:43:83:d8:30:fd:81:
         3c:fb:7c:33:5b:23:4f:62:5c:b5:f4:03:18:aa:f9:5b:df:42:
         47:11:60:c9:68:0e:ab:0e:f2:0b:84:63:ac:7e:be:c6:f0:d5:
         c5:f4:a5:31:cb:99:02:09:94:fb:a1:dd:cb:9e:59:ac:ab:99:
         04:42:2c:ff:76:6e:fb:78:62:03:c0:cf:bb:8e:8f:4d:33:5e:
         b4:ae:7f:5c:f0:0a:db:85:91:ea:9b:37:50:58:f8:70:61:94:
         3e:5e:3e:f8:62:79:6b:90:cd:b1:0e:c8:52:83:36:14:2e:0f:
         d9:a7:08:d7:15:b2:86:da:97:5d:74:f5:62:59:ce:87:dc:17:
         eb:f8:a8:da:af:31:e3:51:6f:ed:ba:c9:73:c3:fa:03:08:94:
         d1:44:45:65:4c:f4:14:30:4e:30:ba:65:72:d7:13:db:29:e4:
         07:41:0b:7a:b5:29:71:17:3a:2d:bf:00:bd:b5:eb:5f:b5:f9:
         93:eb:68:d0:f6:12:f0:fb:c7:a6:fa:41:11:68:6b:41:84:21:
         06:a6:9c:1a:83:9f:be:10:e1:68:87:0f:b3:52:f7:a1:bb:f6:
         8f:7b:a4:4f:dc:30:23:63:75:28:53:75:0e:58:2b:c6:bf:7b:
         52:b4:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:10 2025 by rpki-client