Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e20323634363638.roa
File:                     323830333a366563303a3a2f33322d3332203d3e20323634363638.roa (raw, json)
Hash identifier:          rP9600TqZzGVIa4OlLnNbfSAlbrgV8YuypdyG+XybmE=
Subject key identifier:   82:2E:F7:9F:8A:00:AA:99:00:D0:D4:08:9D:36:97:59:2C:1A:95:A4
Certificate issuer:       /CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
Certificate serial:       67E9C83B3074466BABA0131B7123B7B2B32994B0
Authority key identifier: F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:45:46 +0000
ROA not before:           Tue 04 Feb 2025 18:40:46 +0000
ROA not after:            Tue 03 Feb 2026 18:45:46 +0000
asID:                     264668
IP address blocks:        2803:6ec0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e9:c8:3b:30:74:46:6b:ab:a0:13:1b:71:23:b7:b2:b3:29:94:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
        Validity
            Not Before: Feb  4 18:40:46 2025 GMT
            Not After : Feb  3 18:45:46 2026 GMT
        Subject: CN=822EF79F8A00AA9900D0D4089D3697592C1A95A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ab:c4:10:44:8d:67:6f:1a:eb:ba:18:45:2b:
                    0f:26:a9:d4:bf:c1:3c:60:f9:e7:c1:75:d3:28:ab:
                    b4:2d:ae:ae:bd:b1:b6:a3:14:04:12:4f:da:63:bc:
                    42:75:dc:7f:d3:8b:d2:fb:7a:b5:a0:9b:86:fd:77:
                    90:5d:1e:5a:50:16:2d:b8:e7:79:16:c7:c9:78:08:
                    5c:3f:21:5d:49:af:86:de:1f:b1:cc:f2:9f:4c:eb:
                    ae:0f:c9:00:8e:ed:bd:70:7a:09:6f:9c:6a:59:67:
                    0d:01:8f:48:ac:41:11:d7:07:aa:01:f5:72:ae:61:
                    8d:eb:2e:e7:4e:b8:f7:76:67:19:12:c5:b6:b2:82:
                    b2:21:cb:06:3f:08:4b:c0:3d:60:2c:2e:4a:fc:58:
                    2a:c1:0e:c9:55:6c:3a:60:08:62:48:20:f4:a0:01:
                    98:37:37:25:93:23:58:e9:5f:d3:c1:6a:0d:14:97:
                    12:88:03:72:16:65:9b:e4:fd:f1:46:46:a9:86:95:
                    4b:b7:61:74:f4:05:71:cf:b4:b0:65:bb:43:7c:5b:
                    01:b9:68:2a:9d:20:6f:54:ef:e5:3c:6e:7f:e0:6d:
                    38:20:b0:fe:1d:14:07:c5:02:23:70:b5:ff:d9:ae:
                    70:13:ea:00:27:32:cb:1a:ba:fd:fe:d3:95:bf:07:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2E:F7:9F:8A:00:AA:99:00:D0:D4:08:9D:36:97:59:2C:1A:95:A4
            X509v3 Authority Key Identifier:
                keyid:F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/323830333a366563303a3a2f33322d3332203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:09:5e:53:4f:cb:18:17:4b:37:1f:d7:e1:08:38:1d:9d:77:
         8e:4d:9b:08:0e:17:c9:58:18:15:7f:02:ec:bf:1f:6d:4a:6b:
         07:bc:21:b7:9a:1d:75:a2:dc:1a:9f:af:d0:da:2c:c0:2e:ee:
         95:84:f8:b1:40:bf:5f:f1:91:e8:c5:b0:28:a8:e9:ad:c2:f8:
         7a:f8:46:13:d0:0c:3a:84:0f:03:ac:df:50:83:e7:7d:3b:55:
         61:f8:1a:1d:91:49:86:81:02:78:88:63:7b:23:81:46:53:82:
         c7:74:3a:57:c7:60:ff:ca:87:90:91:63:21:54:d5:9a:d3:49:
         85:5e:4d:b2:88:53:89:af:9b:0a:69:34:f8:8b:a9:b6:68:3a:
         af:c9:af:dc:de:a7:13:00:77:8d:4a:31:19:e7:27:bb:6e:73:
         e8:d2:4f:a4:d4:3f:1b:e9:5c:fd:85:a5:35:e8:e8:25:73:19:
         b0:75:15:91:41:b5:40:19:08:23:3a:0f:c9:fc:a3:b2:e2:e6:
         32:ef:e8:be:86:99:99:4e:d5:f8:fd:c6:ac:ee:b2:9d:58:65:
         3d:e0:fa:e6:84:d5:a4:8d:db:f5:f7:e5:1d:70:6b:57:7a:ab:
         c3:c8:e6:83:25:95:95:9f:2e:71:bb:2b:88:73:27:26:fe:ee:
         d9:f0:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:55 2025 by rpki-client