Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/323830333a616436303a3a2f33322d3332203d3e20323731393230.roa
File:                     323830333a616436303a3a2f33322d3332203d3e20323731393230.roa (raw, json)
Hash identifier:          0Gcn13H0EjnEvwlnz+MNR446lma0AR6DYeUILTUnjRs=
Subject key identifier:   B2:38:F3:62:75:BD:7B:C2:8E:C1:06:C8:7D:B7:99:5F:22:71:C9:69
Certificate issuer:       /CN=8210175404341E39B37F824D85585065838DF0B5
Certificate serial:       74F531A70DD8BA4032B1F92247C699985024DB86
Authority key identifier: 82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/323830333a616436303a3a2f33322d3332203d3e20323731393230.roa
Signing time:             Tue 04 Feb 2025 19:59:56 +0000
ROA not before:           Tue 04 Feb 2025 19:54:56 +0000
ROA not after:            Tue 03 Feb 2026 19:59:56 +0000
asID:                     271920
IP address blocks:        2803:ad60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f5:31:a7:0d:d8:ba:40:32:b1:f9:22:47:c6:99:98:50:24:db:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8210175404341E39B37F824D85585065838DF0B5
        Validity
            Not Before: Feb  4 19:54:56 2025 GMT
            Not After : Feb  3 19:59:56 2026 GMT
        Subject: CN=B238F36275BD7BC28EC106C87DB7995F2271C969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:89:62:82:c3:9b:9f:92:05:67:40:1e:3d:
                    63:a7:23:19:05:bf:8f:26:87:8f:d6:02:cf:08:cd:
                    07:f6:f7:4d:75:06:f7:ea:2d:47:95:79:77:f2:d6:
                    f0:b3:89:95:7d:50:0c:96:a3:90:6b:5f:27:4a:e5:
                    c3:2e:c1:ba:f0:7c:c5:be:70:52:4c:b1:41:b2:6e:
                    5d:49:aa:a6:04:79:56:8b:12:0b:89:c5:fb:61:a0:
                    92:50:b8:f7:65:c2:39:53:c6:c4:f6:af:b1:63:27:
                    2b:d5:30:72:27:12:ad:2e:11:7d:9f:e2:b6:be:6b:
                    09:da:49:2a:9e:80:b2:7f:25:6b:af:34:e1:1e:bd:
                    8f:f6:86:1d:34:9b:29:be:af:2e:41:4c:a6:e2:59:
                    25:2f:c3:f8:42:94:90:61:0b:5c:a0:09:b2:e4:0a:
                    a6:cb:fb:8b:fa:ec:94:4f:94:e9:c8:d9:fb:03:74:
                    91:2f:4d:b6:da:54:ad:7d:02:8c:c5:0b:08:d6:43:
                    4b:a0:bf:80:0c:73:62:23:b5:4b:f0:48:e4:d6:e4:
                    0e:4f:32:05:1a:31:ef:34:31:63:22:a3:c1:e5:89:
                    5c:66:90:01:ba:fc:1e:c6:1d:98:4b:1f:37:14:5e:
                    7b:59:b7:95:4c:bb:eb:91:d9:41:b8:ed:e0:3b:58:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:38:F3:62:75:BD:7B:C2:8E:C1:06:C8:7D:B7:99:5F:22:71:C9:69
            X509v3 Authority Key Identifier:
                keyid:82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/323830333a616436303a3a2f33322d3332203d3e20323731393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ad60::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:66:dc:95:9e:5a:4a:39:cc:fa:98:47:ba:61:73:18:04:1a:
         65:1c:13:57:b8:d0:01:a3:27:01:df:a3:d7:83:e4:49:26:40:
         26:e5:fa:a1:0a:ad:46:e4:cb:f1:46:04:3d:8f:23:0f:7c:df:
         c2:91:e0:4a:08:fa:29:97:2d:7b:d1:85:6f:1c:04:a2:72:03:
         a1:06:9e:7b:a4:42:59:b8:a7:fb:37:78:86:e5:05:2f:a2:15:
         19:7d:6a:c1:8f:18:90:0d:55:d7:f8:3a:c3:83:0b:fc:b3:e7:
         6b:e7:04:f3:24:e3:f6:99:1b:2c:d8:5f:0d:04:83:67:07:09:
         cc:1a:5a:49:85:a2:36:d8:eb:69:88:6d:40:0d:c1:82:bf:04:
         04:0d:ab:cc:a5:4c:8b:db:3f:21:ad:82:6f:d9:70:22:e3:c5:
         17:b5:f2:3b:82:75:ac:65:fe:be:db:25:0d:89:99:7c:89:81:
         00:90:91:c7:11:85:ca:a5:94:03:9a:e1:4d:57:09:ea:41:6d:
         81:9a:c5:eb:cb:d8:04:36:55:c6:64:d7:b0:cb:71:ae:d9:af:
         7b:26:ac:1a:a9:ff:fe:a5:14:45:d2:7a:1b:d3:9e:7d:41:7c:
         86:0d:41:a6:41:d7:39:1e:7d:b1:4f:15:b6:86:f6:2a:ad:28:
         1c:1f:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:12 2025 by rpki-client