Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3530303a3a2f34302d3430203d3e20323730303337.roa
File:                     323830333a313565303a3530303a3a2f34302d3430203d3e20323730303337.roa (raw, json)
Hash identifier:          vuOjZquljTsGEsTQFL3srt9NS/HqEYZXcnnLi7SS12E=
Subject key identifier:   50:DE:1F:6B:64:2F:CF:E7:31:2D:97:EA:E8:CA:2C:15:01:D9:63:5B
Certificate issuer:       /CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
Certificate serial:       63A7E625A513EE36B5B17E41B765738E0F76ACB7
Authority key identifier: 9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3530303a3a2f34302d3430203d3e20323730303337.roa
Signing time:             Tue 04 Feb 2025 18:04:11 +0000
ROA not before:           Tue 04 Feb 2025 17:59:11 +0000
ROA not after:            Tue 03 Feb 2026 18:04:11 +0000
asID:                     270037
IP address blocks:        2803:15e0:500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a7:e6:25:a5:13:ee:36:b5:b1:7e:41:b7:65:73:8e:0f:76:ac:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC7FB723211AEDC038D47F1F6A375939FD56624
        Validity
            Not Before: Feb  4 17:59:11 2025 GMT
            Not After : Feb  3 18:04:11 2026 GMT
        Subject: CN=50DE1F6B642FCFE7312D97EAE8CA2C1501D9635B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:47:61:28:3b:9c:b4:b5:08:55:f0:0e:94:
                    18:ec:10:f8:d6:ed:18:11:13:f9:a4:22:b1:c7:12:
                    84:3c:0b:c6:05:45:f5:5c:7e:a4:fe:c1:ba:e8:21:
                    6d:cf:ce:ea:96:22:6d:77:31:cb:10:f4:93:2c:56:
                    6d:f2:60:84:de:1c:af:11:e6:8b:b8:f3:34:19:b4:
                    de:89:2d:13:22:37:ce:b7:a1:72:66:ea:c6:19:ca:
                    92:76:e3:b2:da:7e:b3:61:b2:af:b7:c3:01:15:fd:
                    0e:26:0d:51:90:3e:9c:a2:68:62:a8:66:e9:0a:c9:
                    d5:3c:82:ab:8e:52:34:1e:f8:2a:57:3a:b7:96:dd:
                    46:ea:c3:6d:fa:25:83:3f:74:be:93:15:b4:fa:56:
                    b4:1b:cb:87:19:d0:76:dd:11:c5:68:f5:4c:14:94:
                    b8:25:25:05:c6:1e:fc:d9:3e:88:63:0d:60:a2:fe:
                    76:11:b3:bb:14:4e:bf:d8:ff:8e:ce:57:2d:eb:3e:
                    10:c9:9e:cb:f6:cd:e7:f6:4e:05:dd:21:cc:fe:df:
                    b3:cb:8a:10:27:05:5a:d9:9a:23:5e:01:40:8a:37:
                    92:49:d1:1e:cf:83:0a:71:80:9d:53:27:79:35:16:
                    4b:7e:0b:2d:93:e9:37:43:18:b0:2f:86:2f:59:58:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DE:1F:6B:64:2F:CF:E7:31:2D:97:EA:E8:CA:2C:15:01:D9:63:5B
            X509v3 Authority Key Identifier:
                keyid:9B:C7:FB:72:32:11:AE:DC:03:8D:47:F1:F6:A3:75:93:9F:D5:66:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC7FB723211AEDC038D47F1F6A375939FD56624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7EC5FC67A92022DABE8B3963D804B8CB36B1042698E73C93081010C65889BE6/0/323830333a313565303a3530303a3a2f34302d3430203d3e20323730303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15e0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:47:eb:1f:e3:ea:52:fd:c7:93:f4:24:e8:cb:9f:e5:bb:
         5b:2f:93:b8:46:92:48:cc:bb:49:09:dd:13:d8:f4:88:03:d1:
         57:c7:4c:42:63:cb:44:94:95:9a:d2:a2:06:e1:2f:15:f0:d4:
         3e:ee:67:aa:bf:45:f1:a1:ad:b9:af:82:60:a6:52:bf:99:e6:
         f1:52:68:e1:ed:ae:b1:20:ae:5d:e6:30:6f:62:01:4a:85:14:
         08:77:62:b3:d5:5c:d5:83:8c:1e:62:10:e2:70:1d:a9:ed:5c:
         44:c7:59:35:84:ce:01:71:5d:41:eb:70:8d:47:03:d7:bd:62:
         08:d7:13:da:ed:8e:71:ea:7a:71:3c:f7:b1:a8:0b:97:ab:56:
         4e:70:24:6b:5f:63:bd:40:0c:75:50:85:16:c4:aa:63:f8:77:
         21:73:c2:c6:1d:9b:b9:2d:8b:fd:6a:14:95:c3:26:2a:3b:2c:
         22:bc:12:45:6c:c2:94:f2:e9:75:fc:72:43:a6:80:a6:4e:14:
         5a:27:95:f3:64:a4:ff:fc:ff:69:3e:a9:41:3e:f9:4d:6a:48:
         90:b1:70:6b:60:59:1f:cb:54:b1:3d:f5:c3:a5:88:80:f2:90:
         ec:b1:cb:14:67:62:2b:ce:93:f9:53:c6:0f:6e:c7:32:46:bb:
         69:d7:6e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:07 2025 by rpki-client