Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3130303a3a2f34302d3430203d3e20323639373330.roa
File:                     323830333a353136303a3130303a3a2f34302d3430203d3e20323639373330.roa (raw, json)
Hash identifier:          eX6poyaYOcN0k8RQjt1KEAE8sewZHUf9vlxYTSBLJrQ=
Subject key identifier:   DE:1E:27:A9:80:AF:75:FD:20:02:C5:87:81:E8:8B:0D:C5:9E:E2:FF
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       43DA99497238F90E5662F529A42FB6009DBAE9B0
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3130303a3a2f34302d3430203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:08 +0000
ROA not before:           Fri 17 Jan 2025 14:40:08 +0000
ROA not after:            Fri 16 Jan 2026 14:45:08 +0000
asID:                     269730
IP address blocks:        2803:5160:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:da:99:49:72:38:f9:0e:56:62:f5:29:a4:2f:b6:00:9d:ba:e9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:08 2025 GMT
            Not After : Jan 16 14:45:08 2026 GMT
        Subject: CN=DE1E27A980AF75FD2002C58781E88B0DC59EE2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:a1:3b:14:07:eb:af:c3:09:12:3c:6f:62:
                    84:c2:b8:83:a8:5e:b1:f4:0c:4c:ad:4b:97:08:2a:
                    89:04:c3:2a:f5:e3:22:e9:75:c9:b2:05:12:db:37:
                    c4:5c:e0:f6:3f:4d:1c:b6:f1:cd:a4:f6:bf:e9:57:
                    40:2d:47:7a:70:e3:23:d0:0d:0b:ff:a4:ef:11:86:
                    09:91:c8:c0:8d:03:6c:c7:a0:44:88:66:64:e4:70:
                    ea:cb:07:6b:24:21:98:e0:b0:d3:8e:3b:68:27:d7:
                    89:60:15:f6:ea:6e:b9:25:39:46:ba:fc:7d:c6:0e:
                    78:6a:1d:80:44:a2:db:fb:2d:44:44:37:09:d0:51:
                    80:3f:06:9b:8e:f0:7e:75:42:0e:71:e2:be:cd:ba:
                    c6:bf:81:6b:98:7b:5a:75:a4:dc:bb:61:8a:56:c4:
                    f1:86:02:6f:3a:94:90:c6:e8:f5:d4:f1:35:74:06:
                    b4:41:9f:7c:1c:1e:71:17:0c:5b:dd:34:ea:d4:b5:
                    b4:54:c2:ad:5c:2d:4b:ee:aa:11:5c:d5:6b:43:35:
                    5f:d9:81:7f:0c:f2:e0:10:5e:7d:88:03:f3:4c:1a:
                    d5:fd:29:a4:75:da:3c:8d:e0:5c:b5:db:9f:7e:c7:
                    bb:a3:66:c6:b1:e8:75:28:46:8e:9a:e2:d4:82:e9:
                    9e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1E:27:A9:80:AF:75:FD:20:02:C5:87:81:E8:8B:0D:C5:9E:E2:FF
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a3130303a3a2f34302d3430203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:33:09:52:ca:a7:c3:47:54:ba:6d:56:6a:cf:f7:55:83:1d:
         3a:eb:a2:08:b0:7a:15:ca:df:56:4a:3b:23:03:af:77:2e:d6:
         39:8a:7f:66:62:8b:d3:65:58:59:2e:52:20:e7:fd:57:1c:35:
         70:a4:50:bd:77:55:6b:f8:de:3c:92:ad:4e:5c:e0:70:f4:3b:
         63:46:96:47:09:c7:0d:bf:41:36:23:bf:ab:1e:9c:e0:a0:b2:
         52:ee:d1:9d:ea:26:c1:e4:50:de:b2:25:7f:cc:bd:c1:43:63:
         49:61:61:26:df:e5:f6:bb:db:5e:5d:22:54:3d:07:9b:66:8b:
         f6:74:e0:90:0f:fb:da:93:a6:d3:79:65:0b:3f:72:9c:6d:84:
         90:2a:54:a9:d8:cd:25:59:28:ed:51:b3:34:74:49:2c:5a:58:
         81:3a:45:7e:47:b6:c5:6c:99:fa:35:95:81:9f:f6:ea:50:81:
         da:55:fe:ae:65:a0:6c:be:47:a4:c7:f7:30:49:25:89:a4:5e:
         92:ce:9c:dc:52:ab:8d:25:c9:ae:0a:30:d6:fe:b8:6d:7f:bb:
         4b:72:d6:07:a3:07:b6:65:9e:9a:09:b3:d0:76:a2:1a:8b:f6:
         b0:40:b7:79:0f:22:ec:ad:1a:b0:13:14:0b:63:17:9d:44:2c:
         49:f0:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:09 2025 by rpki-client