Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a323030303a3a2f33362d3336203d3e20323639373330.roa
File:                     323830333a353136303a323030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier:          qYQjFzZy0VRsDshS11CZGWTmnt2EZQm3w7Y9hA2rpZk=
Subject key identifier:   8D:BF:14:99:DE:6E:DD:2D:EB:11:E7:16:DE:E8:08:FA:E5:93:AB:87
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       3170D15FD44AB70013C23C885E68C6C5193C8D11
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a323030303a3a2f33362d3336203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:08 +0000
ROA not before:           Fri 17 Jan 2025 14:40:08 +0000
ROA not after:            Fri 16 Jan 2026 14:45:08 +0000
asID:                     269730
IP address blocks:        2803:5160:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:70:d1:5f:d4:4a:b7:00:13:c2:3c:88:5e:68:c6:c5:19:3c:8d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:08 2025 GMT
            Not After : Jan 16 14:45:08 2026 GMT
        Subject: CN=8DBF1499DE6EDD2DEB11E716DEE808FAE593AB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:16:66:32:88:a8:4a:4b:13:35:79:5c:e0:
                    81:d9:da:41:ec:1f:b8:ac:dd:28:ad:76:12:c5:44:
                    ff:e0:62:4d:d7:66:15:c1:66:f6:84:a4:12:5c:c4:
                    dd:e6:30:ca:91:d7:0e:da:77:0f:86:3f:3d:33:a1:
                    39:7f:b5:fa:22:04:86:ec:a7:53:97:4e:47:72:01:
                    e1:7e:d6:c9:d0:f4:82:46:ad:9a:a0:3c:44:08:54:
                    d4:24:2f:b0:3c:a7:70:aa:c9:41:74:37:05:b9:aa:
                    5b:2c:8c:6d:7b:c7:f6:89:c4:66:a6:f3:ef:da:ca:
                    00:ee:70:25:13:c9:16:d9:14:df:43:e6:92:40:ab:
                    d3:79:50:76:ca:1e:2e:cb:19:22:f0:c4:a5:a6:69:
                    88:1b:3f:d6:35:77:9a:8d:02:0d:9e:7b:34:a3:77:
                    75:0d:30:1f:87:d1:5c:c1:8b:0d:d2:aa:95:29:a5:
                    a5:41:18:c1:fe:94:58:fc:a3:47:21:ed:ef:3c:bc:
                    84:9f:39:02:d3:ef:70:30:5c:81:2e:c3:96:be:f3:
                    5e:57:9b:31:cc:6b:15:67:7d:6f:dd:0c:db:5d:58:
                    b8:d2:87:5b:28:2b:b7:c2:af:95:2d:d0:7e:bf:1f:
                    24:09:c0:02:7a:be:b2:48:32:87:5f:1a:ca:19:5e:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BF:14:99:DE:6E:DD:2D:EB:11:E7:16:DE:E8:08:FA:E5:93:AB:87
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a323030303a3a2f33362d3336203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:8f:73:6b:ae:01:aa:5b:0b:bf:60:2a:42:4e:3a:dc:c4:bd:
         41:38:f6:dc:8f:d8:bf:16:be:cc:03:b8:f4:f3:a4:eb:5d:e9:
         cb:65:b9:15:b2:62:b6:03:76:07:c9:72:81:d8:4a:19:04:8a:
         ee:52:12:84:c8:db:f3:51:c5:bc:35:ca:b9:d9:c5:5b:1c:39:
         e7:fe:ae:63:07:a7:5d:d0:32:e9:db:92:c8:e9:82:2c:d3:2c:
         43:0e:b0:8a:d4:6f:30:cf:f2:66:7c:67:b9:a6:99:98:d4:02:
         99:63:ff:bf:65:dc:ee:7a:1e:a9:cd:ab:01:a0:c5:67:c8:a6:
         c7:8e:06:9e:23:46:8a:e3:8d:11:a4:01:bb:8a:20:fc:3a:65:
         ce:ec:02:6d:f7:a4:b1:fb:6e:89:07:06:fa:88:f7:6a:dd:52:
         44:f9:c4:6e:f9:12:f5:7e:23:58:9a:49:67:ef:83:b5:a6:e9:
         78:05:32:0f:c0:cc:7a:48:25:e8:58:0a:25:1d:ce:14:8c:65:
         b9:58:32:ad:3d:a7:00:7b:e0:06:5b:f6:1c:ad:98:00:26:83:
         e0:f2:60:9e:f3:12:cb:e7:94:ee:9b:93:3d:70:9f:39:17:2d:
         4c:bc:36:e5:c6:27:66:e2:16:09:70:fc:28:39:d5:f7:cd:3b:
         72:93:48:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:21 2025 by rpki-client