Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3430303a3a2f34302d3430203d3e20323733313237.roa
File:                     323830333a323435303a3430303a3a2f34302d3430203d3e20323733313237.roa (raw, json)
Hash identifier:          lmkL/lqYDlbxeY/bb19rRgaxH24xZx/xfAGfFZNvHIQ=
Subject key identifier:   11:1C:6F:9F:02:CE:1A:FE:07:C0:88:13:99:4F:D5:13:BE:ED:F9:11
Certificate issuer:       /CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
Certificate serial:       118D92687FCA5F5838FCFFAF6FA2E279228B3AA3
Authority key identifier: DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3430303a3a2f34302d3430203d3e20323733313237.roa
Signing time:             Tue 04 Feb 2025 18:38:06 +0000
ROA not before:           Tue 04 Feb 2025 18:33:06 +0000
ROA not after:            Tue 03 Feb 2026 18:38:06 +0000
asID:                     273127
IP address blocks:        2803:2450:400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8d:92:68:7f:ca:5f:58:38:fc:ff:af:6f:a2:e2:79:22:8b:3a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC1E4CE5E1BC80684189997E462EC74999BF58
        Validity
            Not Before: Feb  4 18:33:06 2025 GMT
            Not After : Feb  3 18:38:06 2026 GMT
        Subject: CN=111C6F9F02CE1AFE07C08813994FD513BEEDF911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:fa:66:e7:ce:b6:8a:48:af:3b:a1:bb:8a:
                    fc:3f:6c:51:d3:3c:21:db:4b:52:bf:a2:c1:60:5f:
                    92:46:54:e5:d2:a0:ed:38:57:d1:8c:5e:8c:5e:e2:
                    7e:77:70:ad:7f:68:a5:34:2b:02:53:58:5a:5a:f6:
                    4c:9b:c4:24:bd:d1:07:12:2a:73:51:13:af:25:63:
                    03:e3:60:c9:ef:9b:31:bd:c9:c3:05:53:85:15:98:
                    d9:89:fa:6d:9d:a0:10:37:de:13:9d:28:2a:40:ed:
                    10:3c:6e:30:68:81:e8:cf:6a:b0:5a:aa:66:6b:ae:
                    d8:a7:85:c6:6a:41:99:bf:dd:7b:d7:4b:dc:b2:0d:
                    cf:74:8c:3d:38:6d:94:61:43:51:bf:84:04:b0:89:
                    7e:d8:28:6a:90:ed:1f:c9:cb:47:3f:ab:36:1e:b5:
                    a2:cf:14:aa:74:ba:ed:57:74:de:23:d8:17:4f:d1:
                    80:b3:59:27:ee:85:32:44:36:c6:0e:e0:da:c2:6f:
                    d8:c9:f7:30:52:2a:00:c7:89:ea:c8:f4:0c:b7:b0:
                    fa:12:ae:d9:40:e9:24:21:0c:4b:da:a9:f4:ff:48:
                    46:d1:43:4a:fb:dd:4d:08:a5:28:c1:24:ef:23:4e:
                    b0:da:ef:ee:40:46:b6:b4:ab:17:8c:9e:d8:82:2e:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1C:6F:9F:02:CE:1A:FE:07:C0:88:13:99:4F:D5:13:BE:ED:F9:11
            X509v3 Authority Key Identifier:
                keyid:DE:AC:1E:4C:E5:E1:BC:80:68:41:89:99:7E:46:2E:C7:49:99:BF:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEAC1E4CE5E1BC80684189997E462EC74999BF58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E41CE691B08760A0641E220B8E03A5787F57C34E88F28CAA98C11A3A7FA64747/0/323830333a323435303a3430303a3a2f34302d3430203d3e20323733313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:6b:95:7d:23:bd:47:ae:31:31:d7:bd:19:40:54:e4:62:bf:
         d6:e2:5a:1b:65:fa:24:81:7a:9c:d2:1f:0f:3f:54:42:1f:af:
         e0:3e:b3:76:73:02:26:24:d2:42:b9:af:45:4d:be:24:40:46:
         84:c7:fa:86:b3:8b:99:0d:19:7f:f5:9e:8f:fc:89:64:0e:00:
         41:2c:07:13:4c:34:e1:e0:83:ea:ad:69:03:6a:12:7b:82:6a:
         dc:35:89:d5:b6:03:a4:6c:8f:ba:a5:41:24:12:40:e3:ab:44:
         d9:d3:f7:45:a2:13:26:97:ad:2a:dc:7b:74:d2:c5:f7:ca:f2:
         2b:d4:d1:72:97:9e:e7:7f:6e:ca:76:6f:28:44:51:24:ac:66:
         02:22:d4:f4:4d:9c:a7:2e:5d:b4:ea:9a:24:59:74:47:d2:65:
         9c:45:29:71:c8:1e:dc:fc:bb:40:ae:b6:4f:db:cd:53:a2:e8:
         6b:06:c4:36:96:28:14:b6:45:9c:8e:36:64:bb:cb:48:e7:bb:
         d5:51:e4:32:c5:a5:07:80:61:18:9f:ed:dc:02:5f:af:37:50:
         8f:6e:91:56:b6:0e:51:f5:40:8b:9d:7f:98:fd:ce:57:f1:e6:
         29:84:4e:c7:7d:53:c3:41:7b:68:29:5e:b4:ed:75:f1:a2:20:
         dd:c6:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:15 2025 by rpki-client