Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a663765303a3a2f33322d3438203d3e20323731373733.roa
File:                     323830333a663765303a3a2f33322d3438203d3e20323731373733.roa (raw, json)
Hash identifier:          lelhNvLQtvkUQgfNVv7Zopr5U3iYB5erOGuX5IVY+x0=
Subject key identifier:   05:F1:82:86:D0:2A:06:55:7D:CE:17:88:61:5D:52:42:10:05:57:C0
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       78DC122629E1976FE0DE81E332E24FCCED3B2285
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a663765303a3a2f33322d3438203d3e20323731373733.roa
Signing time:             Tue 04 Feb 2025 18:46:43 +0000
ROA not before:           Tue 04 Feb 2025 18:41:43 +0000
ROA not after:            Tue 03 Feb 2026 18:46:43 +0000
asID:                     271773
IP address blocks:        2803:f7e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:dc:12:26:29:e1:97:6f:e0:de:81:e3:32:e2:4f:cc:ed:3b:22:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Feb  4 18:41:43 2025 GMT
            Not After : Feb  3 18:46:43 2026 GMT
        Subject: CN=05F18286D02A06557DCE1788615D5242100557C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:8f:d6:4a:9a:a9:50:c2:33:6f:01:75:6c:
                    52:78:f9:90:6d:ef:4a:26:60:3b:31:58:38:0e:6d:
                    bb:28:68:67:c6:85:f3:d7:f3:13:31:83:4f:2d:49:
                    f3:19:a6:27:ff:17:4a:f1:b3:8e:c2:c6:31:c6:99:
                    44:77:3a:b4:21:2a:1b:e9:a2:06:cd:9c:50:12:e4:
                    07:a2:c7:62:88:bf:74:50:a5:20:2d:8d:41:81:58:
                    b6:8a:26:a6:1c:f5:9f:c0:eb:71:5a:d3:35:9e:d1:
                    3f:e7:90:69:d3:39:1d:1d:e4:f6:f4:15:af:fe:29:
                    12:bc:23:87:72:70:08:8e:12:dc:9c:de:85:5d:2a:
                    97:eb:cd:af:81:de:5f:99:98:7c:c2:76:db:77:64:
                    ad:75:7f:f9:98:6c:02:52:57:11:94:41:89:1f:8b:
                    71:54:db:18:b5:09:30:90:8e:6a:18:e1:7d:85:05:
                    1d:ca:69:e6:0f:36:de:de:04:c2:2b:fd:d9:31:51:
                    ae:11:e2:17:11:dc:05:36:62:43:35:01:d5:bf:6d:
                    42:b6:fe:3d:8e:ac:57:f9:6e:59:89:c5:f3:48:ca:
                    3c:81:36:b8:3c:c6:f5:44:0f:27:af:35:4f:37:cd:
                    fd:49:21:db:14:a7:e1:3d:ed:2d:7a:63:7f:ea:f9:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F1:82:86:D0:2A:06:55:7D:CE:17:88:61:5D:52:42:10:05:57:C0
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/323830333a663765303a3a2f33322d3438203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:98:e4:2a:f0:21:5d:93:35:b9:16:c6:41:6f:4a:26:3f:a1:
         58:8f:83:05:e1:c1:bc:c8:43:3e:d0:76:40:30:42:e4:24:5d:
         93:ec:f3:a6:cc:67:65:43:d1:bc:da:03:b6:84:e3:8c:5c:80:
         60:e8:41:02:8b:71:e2:d1:ae:25:8e:0d:24:38:8b:3b:ff:b6:
         67:bb:7e:02:d3:f0:09:17:2c:60:3e:0d:3f:e7:cf:21:c8:fb:
         3c:1e:5d:04:75:98:02:61:ff:6d:d8:66:d9:ba:6a:a3:3c:6d:
         84:5f:d5:ba:56:a2:fe:42:73:d2:81:f2:1b:27:93:0c:40:49:
         e7:da:80:fc:cf:7c:a5:9b:b2:42:92:18:a6:3a:ea:7c:70:ea:
         d6:06:14:31:c1:db:9a:87:01:fe:09:ec:d0:20:e3:d6:6e:27:
         42:54:cd:d1:2b:37:6d:ae:8b:0e:cd:14:b5:db:7d:79:ad:76:
         83:9f:61:ed:e6:b1:e7:97:66:5d:d9:4d:08:74:eb:ef:de:74:
         58:9c:c8:04:2d:3f:74:98:f2:13:a3:2b:40:e5:44:f6:d2:58:
         97:4e:88:dc:2c:23:f6:bc:69:8b:7d:c4:62:70:63:63:bd:58:
         53:d5:bd:be:2d:87:f6:e4:e6:aa:bf:e8:8c:e8:71:2c:22:93:
         e4:78:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:54:01 2025 by rpki-client