Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/323830333a653238303a3a2f33322d3332203d3e20323633323133.roa
File:                     323830333a653238303a3a2f33322d3332203d3e20323633323133.roa (raw, json)
Hash identifier:          Agizv9jXHbg2gCPVwrzoHA8iHCxcAgPmIHnHxOpfZvs=
Subject key identifier:   66:62:87:52:10:25:1E:0C:62:AC:89:67:01:54:C7:2B:05:6F:FC:60
Certificate issuer:       /CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
Certificate serial:       72C419FDA4D9C926ED3D8077B392CBFFC04672AA
Authority key identifier: 92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/323830333a653238303a3a2f33322d3332203d3e20323633323133.roa
Signing time:             Tue 04 Feb 2025 18:34:06 +0000
ROA not before:           Tue 04 Feb 2025 18:29:06 +0000
ROA not after:            Tue 03 Feb 2026 18:34:06 +0000
asID:                     263213
IP address blocks:        2803:e280::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c4:19:fd:a4:d9:c9:26:ed:3d:80:77:b3:92:cb:ff:c0:46:72:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92CBA0288430251DD4FED89A879B0C57A75AF8C2
        Validity
            Not Before: Feb  4 18:29:06 2025 GMT
            Not After : Feb  3 18:34:06 2026 GMT
        Subject: CN=6662875210251E0C62AC89670154C72B056FFC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7e:7f:9c:2a:35:00:e3:65:26:2f:eb:c9:3e:
                    17:ff:60:3f:23:82:32:62:45:43:92:b4:87:c1:30:
                    19:65:99:bd:49:17:94:ef:40:6a:7a:c9:e3:08:49:
                    6b:e3:a4:66:31:dc:35:7d:f1:33:8a:a8:74:74:54:
                    92:f4:e9:34:bb:85:58:d4:4f:e5:cb:ec:ab:3d:7c:
                    fa:db:85:83:54:c5:0a:bc:e5:9f:8d:ac:02:94:bb:
                    ee:3e:ff:96:1a:65:e5:f4:93:d6:fa:76:02:99:55:
                    bb:29:1e:ac:e0:42:8e:18:02:6a:7a:70:73:ca:93:
                    54:39:53:83:5d:86:bb:de:b9:ca:b7:01:84:62:4e:
                    b8:09:9d:8a:ca:82:8a:a3:5d:85:8c:30:90:8a:92:
                    61:5c:70:ac:75:d9:94:76:be:f9:0f:c6:24:c1:d7:
                    fe:c1:3f:6f:cb:c8:aa:c4:b6:32:ff:36:c3:b0:2d:
                    c3:a8:c9:38:c2:c4:ea:f8:9a:68:65:9c:cb:5b:0e:
                    c2:54:74:9f:97:be:3a:e2:0e:9e:cc:48:87:2f:45:
                    56:0f:9e:d1:b7:52:43:3a:d2:c7:a3:72:b6:0f:35:
                    92:02:be:6d:1a:c2:5a:e1:08:08:dd:c9:4e:90:40:
                    c4:13:f3:c4:9d:31:44:74:5e:1e:3e:b6:5b:38:35:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:62:87:52:10:25:1E:0C:62:AC:89:67:01:54:C7:2B:05:6F:FC:60
            X509v3 Authority Key Identifier:
                keyid:92:CB:A0:28:84:30:25:1D:D4:FE:D8:9A:87:9B:0C:57:A7:5A:F8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92CBA0288430251DD4FED89A879B0C57A75AF8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D29BB50E838B580A19CF44F74A15982F5D2B3E45E90BAEF26CBDD9B6D09060BA/0/323830333a653238303a3a2f33322d3332203d3e20323633323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e280::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:eb:68:cd:d9:e8:38:61:30:39:b5:18:f8:fd:ee:e2:0b:
         a9:e9:53:b5:26:c4:35:fb:d0:1a:8d:dd:72:d3:73:3b:0c:ab:
         6f:28:75:fe:0b:ec:6c:20:b3:2e:04:e9:0d:ed:63:7a:0e:1e:
         51:91:6b:77:55:b3:12:6f:5a:88:47:04:e2:55:77:7f:90:40:
         4a:e3:41:88:5a:72:a2:ba:4d:c8:51:a1:55:68:97:9e:dd:91:
         24:81:d8:40:fc:ae:ee:e9:0f:6a:02:29:c1:e5:2b:9c:44:57:
         0b:d9:b5:32:bc:53:6a:26:ca:71:00:f3:89:ad:2c:8d:1c:37:
         a5:49:e1:da:ee:85:e4:38:58:1f:86:1e:8d:d5:03:a3:32:d8:
         da:03:7b:23:31:3b:e9:24:ff:50:d7:b4:8a:e0:50:eb:f0:2d:
         2b:4b:32:3a:5d:72:95:ec:8c:bc:23:33:5e:20:e0:95:b8:2c:
         40:65:71:6b:5d:8e:a6:c1:f4:d1:71:a0:29:ee:3e:83:ea:ff:
         e4:20:0f:1f:93:fc:70:ee:ff:09:e4:be:2e:80:5c:16:dd:c4:
         a7:9a:67:6d:46:32:dd:aa:c2:a6:39:91:34:2b:6c:1a:87:f2:
         51:24:43:19:24:57:91:ef:f0:c4:8c:f5:79:6c:3a:6e:9c:d4:
         0e:28:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:57 2025 by rpki-client