Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/323830333a396438303a3a2f33322d3438203d3e203236363137.roa
File:                     323830333a396438303a3a2f33322d3438203d3e203236363137.roa (raw, json)
Hash identifier:          I0V48DMJvtCP2L0zZwB5XgSqcF2nRGqNy89PO03E17s=
Subject key identifier:   F2:14:8F:A0:68:0E:4C:6A:5A:35:E1:5B:83:70:6A:08:31:75:D8:F3
Certificate issuer:       /CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
Certificate serial:       5862B93CA83495862E70AFEE69FEE2B7FBF98FCC
Authority key identifier: 5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/323830333a396438303a3a2f33322d3438203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:47:36 +0000
ROA not before:           Tue 04 Feb 2025 18:42:36 +0000
ROA not after:            Tue 03 Feb 2026 18:47:36 +0000
asID:                     26617
IP address blocks:        2803:9d80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:62:b9:3c:a8:34:95:86:2e:70:af:ee:69:fe:e2:b7:fb:f9:8f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
        Validity
            Not Before: Feb  4 18:42:36 2025 GMT
            Not After : Feb  3 18:47:36 2026 GMT
        Subject: CN=F2148FA0680E4C6A5A35E15B83706A083175D8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:07:a4:17:56:57:2b:7e:ce:46:ad:15:39:
                    b2:a8:f8:cc:ba:33:1e:c3:64:38:89:e1:0f:57:22:
                    3c:22:9f:be:26:53:b6:03:9f:fa:9b:2b:76:05:08:
                    e3:47:24:97:e0:3e:71:bc:3f:ff:3f:70:34:6c:66:
                    48:44:d8:62:1a:20:31:45:3d:33:1b:74:19:2f:7e:
                    bf:79:85:20:19:ec:ba:0b:c2:f8:cf:28:d4:fb:63:
                    76:b1:5f:7a:33:4a:30:c8:aa:24:79:09:61:d1:9e:
                    b8:5c:4a:39:e7:20:77:36:db:d6:29:60:f2:65:71:
                    79:ae:15:91:56:1c:ac:f7:9f:b0:91:f4:bc:78:eb:
                    97:7d:54:bd:18:72:f4:b7:9e:3c:2d:3a:60:14:78:
                    1b:06:a7:29:07:f0:96:32:46:f3:b5:cf:a7:45:f4:
                    21:d9:20:c5:bf:9c:60:47:bb:27:9f:1f:34:6b:c3:
                    27:d2:59:e2:6e:d9:02:fb:f3:ea:dc:10:e2:7a:2b:
                    6e:71:de:cd:1c:e5:8d:1c:44:80:b8:5f:0d:08:d1:
                    ac:87:be:03:60:ba:a0:94:1e:49:db:a2:07:74:99:
                    1b:f4:c9:d1:e1:80:a4:b5:6a:9c:96:5a:8b:e0:b8:
                    ab:3c:73:a7:43:98:5a:1d:e8:19:e7:a7:b0:f5:b7:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:14:8F:A0:68:0E:4C:6A:5A:35:E1:5B:83:70:6A:08:31:75:D8:F3
            X509v3 Authority Key Identifier:
                keyid:5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/323830333a396438303a3a2f33322d3438203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:72:83:1e:ae:8d:13:2e:5c:64:fb:df:da:6c:05:e5:ed:93:
         ca:d8:b0:06:75:9e:ed:6b:d1:7c:12:11:df:ff:3b:08:34:de:
         26:ee:fc:49:3c:ff:34:40:79:49:6a:01:4e:22:00:23:b9:53:
         a1:ec:cf:a4:3d:2c:a9:6d:0d:e9:7d:b2:d7:3a:51:22:15:d5:
         18:e8:05:f5:69:e3:0f:61:8f:7f:1e:a7:18:8c:75:b2:d4:39:
         8c:9a:30:97:d6:6e:88:3b:cb:41:41:70:f1:44:15:99:7f:08:
         68:5c:b2:43:b0:a6:bb:ca:1a:0f:7b:72:e0:69:be:e8:aa:60:
         c0:5c:5a:95:e5:16:b1:42:c1:5c:51:72:cd:8c:ca:0a:62:b5:
         e9:3d:34:51:db:78:de:54:d6:cf:cd:e3:e8:ee:1e:da:67:94:
         5d:5d:a1:5d:b7:98:03:56:6d:ce:d6:40:ef:1f:4e:d3:9f:f5:
         c8:db:92:7f:82:60:73:76:77:52:76:61:bc:2b:e6:b8:86:b9:
         e3:a9:bb:5f:03:93:c3:b6:33:68:34:bd:17:25:1d:60:ac:a2:
         4b:de:d9:19:8e:95:97:d9:36:34:9d:c6:b6:0a:4a:1c:cf:e9:
         5f:11:d5:7a:70:b0:6d:ee:e7:e5:68:be:f2:d8:98:db:1b:d5:
         2f:b8:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:39 2025 by rpki-client