Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a663030303a3a2f33362d3336203d3e20323639373330.roa
File:                     323830333a353136303a663030303a3a2f33362d3336203d3e20323639373330.roa (raw, json)
Hash identifier:          T1tFIkSufHc9mqA7RWl266EYuTOmJHAJlf/41oEQxEY=
Subject key identifier:   16:33:F2:D4:E6:15:79:AA:50:16:3F:D6:50:FE:FE:DB:EE:6E:BE:3F
Certificate issuer:       /CN=E5929BB59C0C723C97245BF0DCF866772F479B73
Certificate serial:       54D82521C3F63E51E8237BB475DC1DAB94FB7F69
Authority key identifier: E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a663030303a3a2f33362d3336203d3e20323639373330.roa
Signing time:             Fri 17 Jan 2025 14:45:06 +0000
ROA not before:           Fri 17 Jan 2025 14:40:06 +0000
ROA not after:            Fri 16 Jan 2026 14:45:06 +0000
asID:                     269730
IP address blocks:        2803:5160:f000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d8:25:21:c3:f6:3e:51:e8:23:7b:b4:75:dc:1d:ab:94:fb:7f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5929BB59C0C723C97245BF0DCF866772F479B73
        Validity
            Not Before: Jan 17 14:40:06 2025 GMT
            Not After : Jan 16 14:45:06 2026 GMT
        Subject: CN=1633F2D4E61579AA50163FD650FEFEDBEE6EBE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:50:4a:04:4c:a0:54:d2:3d:b8:70:d9:1c:
                    95:87:78:64:0f:b5:5c:6c:bf:a1:c9:00:64:e4:5d:
                    db:a9:4e:f3:84:05:eb:41:24:16:74:f4:78:ab:7c:
                    b0:76:46:5e:74:33:47:c7:11:ae:d3:7f:1e:4f:ec:
                    f5:81:76:c5:56:22:b1:fe:29:c9:fa:13:63:4a:78:
                    2b:df:16:f2:e2:23:6c:e6:53:78:d2:f3:a0:c2:fe:
                    20:94:cc:d4:4a:75:b3:7a:ce:78:cf:ef:0a:9f:9c:
                    de:67:20:cf:0f:7b:95:29:72:8e:b9:e6:4f:3b:fc:
                    a1:41:85:fc:6d:7b:8b:5b:7f:1f:42:db:8c:0c:a8:
                    1a:50:32:38:a0:e2:d0:79:34:c0:59:5c:f6:b5:d4:
                    1f:fe:71:7f:aa:cf:cc:d4:00:c1:e4:ea:0b:2f:a1:
                    51:6d:c7:39:72:7b:f0:b1:1f:19:91:ae:ba:db:68:
                    f2:19:2d:db:47:4b:17:70:88:ad:ca:1f:db:95:1a:
                    48:5f:ea:5e:98:45:24:8d:c3:be:aa:48:9c:5d:8c:
                    5b:8c:a4:b5:76:22:99:2f:86:e9:15:ea:19:0c:bd:
                    f8:1e:59:a7:01:e9:f2:ea:98:27:57:b0:67:fd:64:
                    87:ec:dc:49:f1:6e:41:0d:05:bb:42:03:d2:3d:ed:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:33:F2:D4:E6:15:79:AA:50:16:3F:D6:50:FE:FE:DB:EE:6E:BE:3F
            X509v3 Authority Key Identifier:
                keyid:E5:92:9B:B5:9C:0C:72:3C:97:24:5B:F0:DC:F8:66:77:2F:47:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/E5929BB59C0C723C97245BF0DCF866772F479B73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5929BB59C0C723C97245BF0DCF866772F479B73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/323830333a353136303a663030303a3a2f33362d3336203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5160:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:76:6d:16:88:55:d7:e0:49:d9:76:0a:67:3a:52:83:22:21:
         34:21:32:25:3d:d4:ae:77:74:00:97:14:c0:5b:b4:6e:a6:53:
         5e:98:23:38:51:9e:33:11:63:95:3c:0d:98:a7:43:60:28:a8:
         3c:58:9f:21:78:b2:83:e3:da:ac:a7:c4:8f:38:4f:ab:31:c6:
         98:97:5c:62:7f:9e:1b:d6:ec:8e:b9:3a:fc:fc:62:e2:9e:18:
         7d:56:f9:02:a5:02:c3:24:1f:7f:63:44:c7:7d:f8:fd:d1:cc:
         40:c0:66:0a:70:63:16:69:56:10:04:b5:a8:88:7c:d2:1e:5d:
         03:e7:c1:ef:dd:e8:2a:64:fc:06:ec:e4:d4:82:72:88:b0:cf:
         f2:17:d2:e6:00:2e:9f:e8:0a:bb:4b:6c:ec:29:9f:c9:b5:16:
         b9:85:e9:fa:31:fd:9d:ae:d5:eb:cb:b9:31:0b:8c:59:5a:74:
         84:76:20:8d:d4:0e:25:23:37:71:53:ff:5b:39:14:6b:89:b2:
         f5:d8:6d:75:e5:65:5f:87:32:00:b9:fe:21:f5:e3:f3:d3:64:
         98:c1:fa:ff:b3:2d:3f:cc:aa:c0:0d:b6:b6:65:9c:65:2c:4e:
         f3:2a:58:46:df:6c:0f:78:2a:40:5a:07:48:75:93:1a:b8:c5:
         56:c1:33:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:49 2025 by rpki-client