Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/323830333a343139303a33303a3a2f34342d3434203d3e20323732393238.roa
File:                     323830333a343139303a33303a3a2f34342d3434203d3e20323732393238.roa (raw, json)
Hash identifier:          9iFcimv/+XTGI5vVSL7QmrhK43SAFVkx7LMpAXTuF74=
Subject key identifier:   00:9C:80:91:50:37:F6:A3:4B:07:E6:0A:0C:E4:0B:1C:59:C3:E2:89
Certificate issuer:       /CN=EB69B49D4076EBC1D441EA77CCE80EA12A89991D
Certificate serial:       630ADB490479039B387BF760ADB326D0893D4034
Authority key identifier: EB:69:B4:9D:40:76:EB:C1:D4:41:EA:77:CC:E8:0E:A1:2A:89:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/323830333a343139303a33303a3a2f34342d3434203d3e20323732393238.roa
Signing time:             Tue 11 Mar 2025 15:00:00 +0000
ROA not before:           Tue 11 Mar 2025 14:55:00 +0000
ROA not after:            Tue 10 Mar 2026 15:00:00 +0000
asID:                     272928
IP address blocks:        2803:4190:30::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0a:db:49:04:79:03:9b:38:7b:f7:60:ad:b3:26:d0:89:3d:40:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB69B49D4076EBC1D441EA77CCE80EA12A89991D
        Validity
            Not Before: Mar 11 14:55:00 2025 GMT
            Not After : Mar 10 15:00:00 2026 GMT
        Subject: CN=009C80915037F6A34B07E60A0CE40B1C59C3E289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:3b:d9:d3:aa:e0:48:80:f4:2b:cf:f2:cc:
                    53:66:5c:99:04:64:97:43:bd:7b:7d:f0:bf:54:3f:
                    91:99:23:bb:7a:aa:cd:de:0a:f7:bb:ca:68:d5:23:
                    9f:27:12:17:ea:5a:95:1f:43:42:28:4f:86:76:0f:
                    12:47:c5:dd:37:58:71:fa:1e:92:4c:73:a9:a0:fb:
                    a5:1f:bd:c3:0b:94:9e:6d:4c:a1:b0:cb:c1:d3:52:
                    a9:15:59:e3:0e:b8:1f:8b:10:78:06:de:4c:30:5f:
                    75:59:74:bc:5c:6e:0b:2f:3a:cd:1c:ac:9f:e4:09:
                    89:b7:27:29:ae:33:56:03:de:86:24:58:0c:62:7d:
                    0d:64:3d:ba:f1:d6:dd:40:b1:d3:ab:5d:b6:c8:a9:
                    11:fb:65:b8:5c:f4:3a:8d:95:1f:85:6b:c3:a0:7a:
                    e9:35:fd:26:99:1b:7a:11:45:08:de:1c:87:32:cc:
                    50:22:07:1f:18:4b:96:86:ff:40:75:7a:63:af:bb:
                    f4:9d:15:a0:11:d8:c9:b8:8e:9b:67:b7:71:de:55:
                    8c:02:4b:3e:63:7c:25:c4:e8:e8:89:fa:d5:da:1d:
                    44:aa:fe:7c:44:6c:52:6a:f4:fb:76:51:8c:5b:be:
                    f5:ef:0b:a8:6f:93:4e:ee:21:03:23:ad:1a:ec:5b:
                    55:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9C:80:91:50:37:F6:A3:4B:07:E6:0A:0C:E4:0B:1C:59:C3:E2:89
            X509v3 Authority Key Identifier:
                keyid:EB:69:B4:9D:40:76:EB:C1:D4:41:EA:77:CC:E8:0E:A1:2A:89:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB69B49D4076EBC1D441EA77CCE80EA12A89991D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CAD0D6640D544384565625F127F41C9A542CF313BE7B088181DA3D59E282AA08/0/323830333a343139303a33303a3a2f34342d3434203d3e20323732393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4190:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         a3:13:1c:cb:1a:48:f6:bf:7a:cb:aa:d7:b7:30:5d:82:39:66:
         62:94:b4:60:bc:6e:b3:e5:63:95:ea:fe:96:9f:13:89:04:2a:
         8a:c6:f0:76:c6:b0:90:05:3a:8a:64:3f:d9:42:88:4d:83:23:
         27:57:34:71:2a:50:10:76:67:6c:b1:6c:5e:15:a8:55:22:3a:
         df:37:fb:4f:99:ae:7d:a9:d3:13:23:f3:4c:57:10:6c:27:a7:
         fd:78:10:84:12:7b:aa:72:6b:bd:35:1a:83:35:b0:93:2f:27:
         fd:d7:bd:18:45:5e:29:f8:64:5f:e8:f2:c2:53:88:d8:18:26:
         a5:e6:9d:90:9f:a5:64:49:57:65:9a:1a:a4:3a:5e:73:7c:bf:
         29:8a:0c:21:7e:35:58:3d:4f:ce:c0:ca:55:b9:d1:58:1a:7d:
         05:2e:ac:4a:62:67:9c:f1:71:06:1d:f5:f0:1e:4f:55:5a:c0:
         d0:2e:1b:a6:18:1e:f8:a2:af:e2:1b:ca:f1:44:3a:42:22:39:
         8b:e9:1a:d1:1e:79:6e:2e:82:9f:20:b7:4b:47:e4:30:0f:6a:
         27:61:25:ed:5e:01:89:00:ac:f3:db:5b:3a:95:2e:ce:19:63:
         db:94:80:86:1b:cc:14:da:80:24:fa:1c:94:99:b4:d2:4d:73:
         44:7a:19:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:55 2025 by rpki-client