Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAB5F656D665E3546BCB0AD1964771D3B4A3B7BF77363B6A9EC7BE8BCAC73126/0/323830333a643931303a3a2f33322d3332203d3e20323732303131.roa
File:                     323830333a643931303a3a2f33322d3332203d3e20323732303131.roa (raw, json)
Hash identifier:          y78voN0Cz/MyoFDH1ZDHbU9wp3F+YEUn+AJ4cCoeHT8=
Subject key identifier:   64:FF:14:AB:58:75:3E:C2:EB:90:88:AF:2B:82:25:CA:A7:E8:24:8B
Certificate issuer:       /CN=A9E3C56198CC897143ABFB547CF22B7BD8A3A706
Certificate serial:       535B3BF8280985B891BACB51FE2F58DCD7B38137
Authority key identifier: A9:E3:C5:61:98:CC:89:71:43:AB:FB:54:7C:F2:2B:7B:D8:A3:A7:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9E3C56198CC897143ABFB547CF22B7BD8A3A706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAB5F656D665E3546BCB0AD1964771D3B4A3B7BF77363B6A9EC7BE8BCAC73126/0/323830333a643931303a3a2f33322d3332203d3e20323732303131.roa
Signing time:             Tue 04 Feb 2025 18:42:25 +0000
ROA not before:           Tue 04 Feb 2025 18:37:25 +0000
ROA not after:            Tue 03 Feb 2026 18:42:25 +0000
asID:                     272011
IP address blocks:        2803:d910::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5b:3b:f8:28:09:85:b8:91:ba:cb:51:fe:2f:58:dc:d7:b3:81:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E3C56198CC897143ABFB547CF22B7BD8A3A706
        Validity
            Not Before: Feb  4 18:37:25 2025 GMT
            Not After : Feb  3 18:42:25 2026 GMT
        Subject: CN=64FF14AB58753EC2EB9088AF2B8225CAA7E8248B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:6e:b5:72:68:10:2a:f1:f6:4a:17:79:27:
                    3d:4e:c1:fe:20:8b:b6:69:d5:50:c7:38:62:8e:0d:
                    89:07:5e:2c:ab:e8:5b:8d:12:8f:c7:a9:25:f2:b8:
                    7d:12:68:b7:59:c8:26:b9:86:57:68:91:61:0a:df:
                    ae:5a:b1:2a:d3:ea:88:48:80:33:a4:e0:7a:c2:07:
                    6b:4e:11:97:3d:18:c5:dd:18:f0:a5:9c:8e:9c:bb:
                    38:0f:08:39:c8:c4:0c:ce:3a:5e:9e:43:ee:d7:4e:
                    b2:23:cb:3e:b1:e7:ae:4e:c2:b5:87:2b:62:8b:89:
                    5d:e4:18:c2:2d:ee:0a:18:a2:9e:35:fc:ff:d2:58:
                    ea:7b:3c:34:1e:d2:9b:75:4f:82:5c:b7:b8:ef:34:
                    4d:fd:25:e5:d7:85:3b:5e:dd:ea:9d:c5:e8:09:7a:
                    19:55:a4:13:ab:26:8c:cf:29:23:f9:ac:3a:0d:7a:
                    c1:fc:41:04:8c:5c:b4:a8:35:d7:7e:cf:49:86:de:
                    3c:00:94:3d:c0:9f:f8:8d:0e:48:63:05:78:79:4d:
                    ee:68:c3:58:b4:54:18:a2:2b:40:52:0f:5c:13:da:
                    38:35:2f:16:f3:0d:62:48:dc:99:30:34:48:23:fb:
                    a1:e2:3e:64:75:ac:2a:2a:03:ab:b7:0e:64:e9:37:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FF:14:AB:58:75:3E:C2:EB:90:88:AF:2B:82:25:CA:A7:E8:24:8B
            X509v3 Authority Key Identifier:
                keyid:A9:E3:C5:61:98:CC:89:71:43:AB:FB:54:7C:F2:2B:7B:D8:A3:A7:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAB5F656D665E3546BCB0AD1964771D3B4A3B7BF77363B6A9EC7BE8BCAC73126/0/A9E3C56198CC897143ABFB547CF22B7BD8A3A706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9E3C56198CC897143ABFB547CF22B7BD8A3A706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAB5F656D665E3546BCB0AD1964771D3B4A3B7BF77363B6A9EC7BE8BCAC73126/0/323830333a643931303a3a2f33322d3332203d3e20323732303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d910::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:80:39:3d:f7:41:2e:c9:5d:a7:c5:92:57:d2:ec:02:ed:48:
         4f:c7:dc:f1:8e:08:9b:42:aa:0d:e4:1b:42:f6:a2:82:87:c2:
         f2:ee:63:e3:e2:63:8b:29:4a:0b:ba:8c:bf:33:ba:aa:a3:74:
         82:7b:2f:56:36:5c:99:61:94:4b:2b:e7:5c:18:ca:b6:ee:a3:
         8d:95:c8:c5:d7:98:ac:6c:b3:df:e0:14:96:01:d2:a0:bb:9c:
         0a:e5:0e:83:5a:c2:85:53:bf:7b:fc:a4:5f:d5:ca:c1:7f:5d:
         7a:8d:de:4f:9b:0c:9b:ed:e7:39:02:fd:d7:bf:4c:d9:1c:24:
         82:31:22:9c:60:01:4d:7b:b2:1e:a7:1f:e5:ea:89:89:63:d7:
         35:d2:a0:49:4d:a3:cc:ba:8f:26:be:51:1a:33:81:97:5a:15:
         6e:ee:34:9f:82:53:05:47:97:17:d7:81:6e:1d:fd:14:56:db:
         29:58:e2:cb:18:73:42:93:e3:be:c1:05:ff:b2:cb:cd:32:28:
         ef:9e:f1:af:a9:b9:90:ad:c1:c4:07:bd:ef:33:53:f7:49:d0:
         3b:7c:5f:f7:fc:58:c1:6a:fa:f7:6d:fc:bd:f8:12:c0:f1:06:
         bd:f0:75:ba:8d:4f:98:b6:3e:4a:fa:26:99:14:cb:2d:69:cf:
         4f:65:79:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:04 2025 by rpki-client