Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/323830333a343330303a3a2f33322d3335203d3e20323633373539.roa
File:                     323830333a343330303a3a2f33322d3335203d3e20323633373539.roa (raw, json)
Hash identifier:          jJN2EoZXIkIg8O32HE7wwXnhIUE5kgS1L8N2lcZA4KE=
Subject key identifier:   E7:E6:F1:66:BA:39:16:8F:F7:C9:0E:0B:70:71:A3:D2:60:EB:3C:3F
Certificate issuer:       /CN=8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE
Certificate serial:       23563871E06C077755D6C9DBFD4FDC03D85819FF
Authority key identifier: 8B:75:AE:D6:9E:DD:3E:DC:FF:66:9A:1A:D7:1F:8B:9B:C5:30:40:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/323830333a343330303a3a2f33322d3335203d3e20323633373539.roa
Signing time:             Tue 04 Feb 2025 20:05:46 +0000
ROA not before:           Tue 04 Feb 2025 20:00:46 +0000
ROA not after:            Tue 03 Feb 2026 20:05:46 +0000
asID:                     263759
IP address blocks:        2803:4300::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:56:38:71:e0:6c:07:77:55:d6:c9:db:fd:4f:dc:03:d8:58:19:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE
        Validity
            Not Before: Feb  4 20:00:46 2025 GMT
            Not After : Feb  3 20:05:46 2026 GMT
        Subject: CN=E7E6F166BA39168FF7C90E0B7071A3D260EB3C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:eb:3a:e0:3a:bc:34:7b:4e:34:50:3b:ce:
                    5a:38:4d:88:a7:2f:22:0b:de:6e:9b:14:43:e4:fa:
                    b2:8b:53:c2:c3:e8:21:02:e3:54:9e:24:e0:95:c6:
                    d5:fa:51:03:16:16:f9:23:b9:00:b8:88:20:4d:01:
                    95:17:86:aa:29:a6:ba:7b:2e:0f:19:8e:00:1c:4c:
                    7b:fb:bc:18:d2:f7:a5:e2:22:4f:bf:c7:9c:9b:e6:
                    77:ca:19:be:70:64:7d:24:d2:42:4e:4f:cd:bf:20:
                    4c:fb:92:c5:89:a0:a4:6d:66:66:0c:ea:0c:d0:2a:
                    dd:bd:e2:17:5c:b8:85:a6:11:64:90:5f:01:e9:b9:
                    df:60:96:3c:3e:f5:7d:e7:47:9e:a5:6f:e1:2e:bb:
                    18:6d:e8:14:b1:97:ca:51:ce:e6:91:77:37:b2:e5:
                    8b:d9:cb:50:b1:0c:38:37:49:1c:87:05:a2:40:47:
                    1b:73:3b:84:a3:e0:cc:b9:6a:14:71:0a:01:67:12:
                    a3:ed:60:fb:46:f8:08:63:7d:55:0b:04:a9:2e:d6:
                    da:09:02:c0:77:2e:11:0c:9a:5b:65:d9:e1:64:50:
                    80:f7:40:14:b5:83:fe:ac:a3:4b:0e:04:9f:b6:23:
                    b1:c2:b8:4e:14:61:da:19:48:85:88:91:cf:99:a7:
                    57:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E6:F1:66:BA:39:16:8F:F7:C9:0E:0B:70:71:A3:D2:60:EB:3C:3F
            X509v3 Authority Key Identifier:
                keyid:8B:75:AE:D6:9E:DD:3E:DC:FF:66:9A:1A:D7:1F:8B:9B:C5:30:40:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/323830333a343330303a3a2f33322d3335203d3e20323633373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4300::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:5c:d1:71:2b:79:a7:4b:4a:1d:62:8c:a4:0b:70:df:7d:4a:
         08:aa:ca:c0:a3:23:46:d6:bd:97:63:3d:a2:9f:a8:8f:d7:0a:
         02:99:b7:6e:29:60:7b:be:48:a9:96:90:95:cf:bf:59:42:74:
         dd:31:51:29:14:97:56:61:79:17:4d:ba:36:51:c5:fd:5d:c2:
         32:3e:1c:99:42:d9:61:04:58:0b:21:eb:44:b2:5b:01:84:f0:
         57:b8:5d:5a:71:15:1f:b2:04:17:56:4a:8c:4c:68:02:f6:aa:
         f4:7d:b2:55:5e:7f:e5:1b:6f:51:a0:9f:cf:58:06:b2:d4:e7:
         5f:25:a8:f3:6a:56:f9:f2:91:47:86:3e:0d:fd:83:b6:e2:8e:
         2c:52:c0:d4:cf:d0:ab:a6:ca:a2:3d:df:da:c6:d6:51:77:1d:
         03:bc:b0:9a:5c:36:a0:80:bf:ba:60:0e:de:7e:1d:0f:38:45:
         e4:a1:97:ab:6a:0f:a9:c6:35:45:1a:db:39:f9:84:58:b8:46:
         36:4a:e2:d6:29:95:50:0e:24:0c:c5:6f:f8:14:4b:3d:34:82:
         65:83:78:0e:70:39:fa:ed:6d:64:20:a9:ca:2e:e1:1c:45:bc:
         73:bb:e4:c3:8c:c2:d1:20:24:b4:7d:83:f1:49:d4:51:29:cf:
         2d:2f:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:33 2025 by rpki-client