Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a643030303a3a2f33362d3336203d3e20323639373330.roa
File:                     323830333a353136303a643030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier:          /RlWcs0Fo+q47XBk3eK/xrd5XBRLmtXLcOX7qxd4NN4=
Subject key identifier:   71:0A:19:99:76:EE:3E:E2:65:32:E8:0B:F9:9D:EA:BE:39:4F:8F:CE
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       4C1FDBD4E6848C0D9666A269CCCD6711986D3D3B
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a643030303a3a2f33362d3336203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:07 +0000
ROA not before:           Fri 17 Jan 2025 14:40:07 +0000
ROA not after:            Fri 16 Jan 2026 14:45:07 +0000
asID:                     269730
IP address blocks:        2803:5160:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1f:db:d4:e6:84:8c:0d:96:66:a2:69:cc:cd:67:11:98:6d:3d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:07 2025 GMT
            Not After : Jan 16 14:45:07 2026 GMT
        Subject: CN=710A199976EE3EE26532E80BF99DEABE394F8FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:2d:3e:88:40:a6:c8:23:30:93:a2:9e:b5:
                    fa:6c:fe:e5:a7:45:cb:80:cd:bd:58:72:ea:a6:20:
                    7e:d2:79:75:8d:8d:c1:4a:0c:2a:8a:0a:9c:cf:60:
                    66:e5:de:c5:1a:2a:65:07:28:fb:02:d1:6f:f1:bd:
                    24:a9:cd:df:be:c5:dc:17:6f:81:a7:81:eb:40:10:
                    9d:7b:72:06:34:bb:d6:2e:d7:47:c5:a2:1b:b5:48:
                    d4:c0:7d:43:8e:e6:c3:cb:01:20:64:77:07:d4:f9:
                    2f:f1:3d:ea:f2:d4:16:e1:59:4d:2c:10:07:1e:36:
                    45:72:f1:56:9f:f6:b9:cb:11:73:de:a4:c4:e2:8c:
                    79:7a:c6:c3:a3:1b:79:f1:53:e5:e3:28:85:f8:db:
                    62:1c:c0:45:28:2e:9d:9a:72:28:56:63:e7:3f:52:
                    a7:24:b2:9b:38:59:ec:14:d1:5d:16:72:0a:17:9f:
                    06:e9:bc:b7:46:fe:6a:e3:51:92:15:d2:b0:d8:52:
                    9d:f6:0e:41:2a:68:08:24:14:11:75:19:14:84:ff:
                    18:ec:8f:3d:00:7f:b5:44:e2:27:5c:26:4c:5c:b4:
                    30:f0:97:86:de:29:d6:5d:b5:60:c6:a6:a3:fa:71:
                    a6:68:da:7f:e5:f3:f6:2f:eb:8a:73:35:81:a4:be:
                    a8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0A:19:99:76:EE:3E:E2:65:32:E8:0B:F9:9D:EA:BE:39:4F:8F:CE
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a643030303a3a2f33362d3336203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:48:0b:20:37:95:7e:96:de:7e:84:a6:c0:50:60:d2:31:
         5d:f1:cc:bb:41:16:88:55:68:37:3e:8c:c5:b0:7c:f6:1e:2a:
         48:d9:48:6d:d3:88:83:87:4c:20:8c:54:df:22:c9:8a:96:0e:
         e9:d4:38:92:83:bd:48:c3:20:5a:81:e4:42:85:2a:f8:94:bb:
         d1:ea:44:d5:41:83:94:92:c4:99:75:5c:9f:fa:54:bd:8f:ba:
         3d:9f:ad:af:c7:68:a4:97:10:d0:f3:51:06:f3:67:0a:54:3a:
         6f:b9:e5:3f:f4:f7:28:93:5f:f8:7c:71:e1:9a:c4:0d:59:fd:
         45:44:d6:3c:7b:68:1f:b8:8f:24:74:b3:23:30:25:d1:79:13:
         0e:b7:e9:40:67:d6:b8:b9:43:6c:a3:39:5d:fe:5e:35:37:b2:
         f1:c9:45:69:29:51:f1:92:a3:05:cc:82:61:50:12:64:e6:fb:
         56:49:60:b6:22:31:f6:d9:24:f3:6b:52:3b:22:11:1c:95:bb:
         72:35:c8:25:84:ce:6b:c7:47:9b:6d:35:4b:81:31:26:bb:ab:
         a9:5d:d3:44:9e:bc:4e:2a:7d:10:0a:e7:9a:b0:7d:93:bf:13:
         34:95:f7:96:b1:72:c6:94:0e:bf:57:70:69:b3:5c:df:02:4d:
         32:5a:c0:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:48 2025 by rpki-client