Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3330303a3a2f34302d3430203d3e20323733313237.roa
File:                     323830333a323435303a3330303a3a2f34302d3430203d3e20323733313237.roa (raw, json)
Hash identifier:          R8PZTw2CEXVkFqcri2pZvLsHA5RI1L1v50QHf9nDZCs=
Subject key identifier:   15:36:46:E9:2F:14:42:CB:B5:88:FC:48:88:5A:21:F9:BF:12:CE:6C
Certificate issuer:       /CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
Certificate serial:       5CCE63F7DA179CFD5BAD5E1A476F530464F64948
Authority key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3330303a3a2f34302d3430203d3e20323733313237.roa
Signing time:             Tue 04 Feb 2025 18:38:05 +0000
ROA not before:           Tue 04 Feb 2025 18:33:05 +0000
ROA not after:            Tue 03 Feb 2026 18:38:05 +0000
asID:                     273127
IP address blocks:        2803:2450:300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ce:63:f7:da:17:9c:fd:5b:ad:5e:1a:47:6f:53:04:64:f6:49:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
        Validity
            Not Before: Feb  4 18:33:05 2025 GMT
            Not After : Feb  3 18:38:05 2026 GMT
        Subject: CN=153646E92F1442CBB588FC48885A21F9BF12CE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:c8:e2:91:4f:a2:ca:d0:34:93:fb:b0:d6:
                    4b:e5:97:36:89:58:58:1e:fa:7a:e9:f8:11:05:c9:
                    fc:1d:36:11:93:5a:e3:ad:3b:66:e3:f1:85:75:2e:
                    50:85:6a:c2:1e:35:3b:f9:5e:74:02:aa:9b:e0:7d:
                    7c:0e:3d:1e:d0:0d:9f:9d:1b:65:d4:c5:1a:d4:63:
                    6c:11:5b:66:de:8e:d8:1d:2c:20:66:ec:65:60:32:
                    2e:b5:a9:82:0f:7c:7d:7b:01:34:d1:52:4a:74:96:
                    8a:64:b6:08:cc:83:52:a6:2f:a1:fd:13:60:5c:dd:
                    34:ac:f4:34:da:9b:70:b5:16:ea:61:92:c8:3a:f8:
                    19:56:4e:1d:c8:7f:7a:e8:d2:3e:71:43:96:51:76:
                    0d:0e:3e:e9:33:49:b9:26:6f:6c:b4:0f:65:77:bd:
                    28:35:7c:95:ec:15:14:e2:23:c7:3d:a7:fc:57:88:
                    76:ef:87:b9:f3:b3:8c:48:13:32:98:60:00:1d:46:
                    15:6b:11:6b:f4:c0:e2:72:2a:50:60:53:5e:2b:61:
                    5a:63:3a:d4:f6:ee:b9:42:3b:a6:3f:27:d9:77:dc:
                    6e:08:1c:e9:6a:9f:d9:4a:01:7a:08:a9:da:bd:04:
                    61:51:aa:55:8b:d5:2d:dd:b3:6c:c8:08:12:41:d5:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:36:46:E9:2F:14:42:CB:B5:88:FC:48:88:5A:21:F9:BF:12:CE:6C
            X509v3 Authority Key Identifier:
                keyid:DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3330303a3a2f34302d3430203d3e20323733313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:03:c7:ff:93:32:e9:97:5e:9d:c5:a9:fd:2c:ec:e2:a7:71:
         2c:c6:e9:8f:a1:b0:5b:e4:f3:ea:be:38:04:cb:d7:96:ad:4e:
         b9:c7:79:20:4d:81:f8:f3:39:8c:8a:e6:66:08:9e:b6:fa:8c:
         b4:95:c8:1f:4b:27:7d:ff:76:bc:73:90:c2:85:7a:ac:d1:9f:
         f5:c8:9f:05:b0:8e:98:dc:00:54:8f:b2:bf:07:57:fd:89:e2:
         cc:49:d1:9e:ad:45:ea:8e:c6:20:00:fd:65:ec:a7:2b:7a:1c:
         3a:74:90:7f:7a:a2:fc:b7:3a:04:d5:cc:75:76:3c:12:24:83:
         52:86:98:3f:cf:ac:dd:97:c4:0c:15:2b:74:ac:06:50:27:23:
         53:7b:50:cc:38:7c:61:eb:4b:47:6d:73:06:55:b7:f6:2b:16:
         40:79:1b:17:bd:37:99:5d:df:b7:c0:1a:9a:e8:a8:81:fc:8c:
         cf:29:15:bb:e7:fb:60:1b:c5:ef:d6:18:7a:48:6f:5a:fa:b0:
         43:26:48:f5:ea:91:02:41:a5:1b:60:c4:ea:62:3a:e9:d7:ac:
         13:29:19:e4:a0:2f:b5:89:20:fe:bc:0e:75:8f:17:fe:3a:dc:
         f1:88:bd:8d:82:f6:a5:8a:2b:55:dc:2f:75:27:6a:41:d3:72:
         b4:ed:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:09 2025 by rpki-client