Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3330303a3a2f34302d3430203d3e20323730303337.roa
File:                     323830333a313565303a3330303a3a2f34302d3430203d3e20323730303337.roa (raw, json)
Hash identifier:          NRbvkiwQxC7MCM7+V1eaHvW8aHZNAdJwzx5r952k7oc=
Subject key identifier:   9F:C1:12:21:D3:9B:C4:32:4B:FE:89:CC:D7:5B:E9:F8:AB:74:02:17
Certificate issuer:       /CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
Certificate serial:       1483EF6A51BC7F4900B6B28496D83B8C7A54DA76
Authority key identifier: 9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3330303a3a2f34302d3430203d3e20323730303337.roa
Signing time:             Tue 04 Feb 2025 18:04:11 +0000
ROA not before:           Tue 04 Feb 2025 17:59:11 +0000
ROA not after:            Tue 03 Feb 2026 18:04:11 +0000
asID:                     270037
IP address blocks:        2803:15e0:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:83:ef:6a:51:bc:7f:49:00:b6:b2:84:96:d8:3b:8c:7a:54:da:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
        Validity
            Not Before: Feb  4 17:59:11 2025 GMT
            Not After : Feb  3 18:04:11 2026 GMT
        Subject: CN=9FC11221D39BC4324BFE89CCD75BE9F8AB740217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:1a:22:9a:65:ab:1b:c5:f5:55:6c:51:b1:
                    cd:74:61:06:05:ee:63:84:c0:a7:97:2d:55:68:ee:
                    7c:21:af:21:95:6e:94:3a:ed:0a:0d:0b:1d:c8:84:
                    b9:79:67:6f:d2:1d:d5:37:09:06:69:a6:a7:1c:e5:
                    ba:7b:51:a5:d0:e3:d2:72:e6:bc:c6:00:da:90:a1:
                    3e:7d:7f:61:c7:bd:ba:c7:e7:41:01:a2:d5:92:43:
                    bf:c1:31:c0:77:b4:0f:08:94:71:95:91:16:80:26:
                    a0:04:f3:c9:b9:23:fa:b7:07:95:81:e9:f3:79:cc:
                    be:89:55:58:08:cf:25:ed:3b:d8:87:1f:25:0b:a2:
                    34:fc:69:84:9e:67:41:3d:5b:20:c9:61:0c:86:a6:
                    1a:eb:8a:8e:8c:06:e9:76:b8:e1:45:51:30:4d:00:
                    db:9b:63:67:d8:f1:1f:3e:6c:2a:9c:95:d3:78:af:
                    9a:74:67:1e:a2:cd:f0:82:8f:52:50:b5:a4:6d:94:
                    4e:ed:9a:9b:6c:cc:4f:5d:f4:9d:2b:04:55:d2:f2:
                    2c:cc:29:1a:b2:29:91:53:bc:ab:37:e2:27:e8:ac:
                    28:ca:e9:c0:50:96:5a:26:c3:10:a5:3b:f9:e4:88:
                    39:b7:35:f0:fd:e6:45:fb:d8:45:2a:03:f6:9d:7d:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C1:12:21:D3:9B:C4:32:4B:FE:89:CC:D7:5B:E9:F8:AB:74:02:17
            X509v3 Authority Key Identifier:
                keyid:9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3330303a3a2f34302d3430203d3e20323730303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15e0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:af:3f:00:e2:4f:bc:ae:31:95:c9:0f:5d:f4:a2:6e:2b:ac:
         a8:43:1d:44:d6:e7:ce:88:2b:eb:b2:f5:ae:53:a4:9b:c4:88:
         67:45:4a:53:26:b2:88:7b:43:77:30:a8:a9:6b:39:b5:ec:1f:
         15:7c:0d:fa:91:f8:c8:dc:18:57:64:81:90:b5:03:af:43:52:
         d7:0d:57:57:58:88:0f:b3:38:fc:65:f0:7c:df:a3:4b:2b:3c:
         42:0b:8c:f5:36:e7:a7:53:3a:06:5f:64:cb:19:8c:52:3d:45:
         9f:82:07:2d:d0:f5:81:d9:a3:3e:c2:22:5c:8e:2b:e8:47:29:
         d9:79:9f:a0:74:4b:cd:51:be:4e:4f:e8:f1:57:86:f2:f9:04:
         0f:e4:95:94:28:68:f1:4c:bd:3b:7f:0e:05:78:a2:cb:8f:6c:
         89:a0:5a:63:da:7d:14:a0:2b:bb:26:a7:0b:ab:80:31:e9:20:
         fb:67:9b:32:1c:32:a4:e4:4c:f7:2a:b1:b4:1f:c0:b5:16:fa:
         a0:34:35:52:4c:90:69:2d:4d:35:30:9c:12:59:e2:46:e8:c5:
         3a:c2:24:93:be:46:36:ed:4d:9d:ce:18:cb:22:73:12:96:ea:
         07:7f:c1:12:5f:06:2c:a5:48:76:20:e1:ea:b5:06:7f:24:37:
         2b:97:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:14 2025 by rpki-client