Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/323830333a356139303a3a2f33322d3438203d3e20323732383833.roa
File:                     323830333a356139303a3a2f33322d3438203d3e20323732383833.roa (raw, json)
Hash identifier:          eeYChCh0AhccxdcBuiwVfrxcM0U0fz+MfAv/6uf/pUk=
Subject key identifier:   EF:1A:3C:66:A4:47:B2:2C:27:02:34:17:85:FA:2D:51:DF:43:D6:00
Certificate issuer:       /CN=CE44C7223EEA81B30E923FA4269D01FA228630C1
Certificate serial:       03DFBA309F079FE7B708934AFCCA8932CCC2657A
Authority key identifier: CE:44:C7:22:3E:EA:81:B3:0E:92:3F:A4:26:9D:01:FA:22:86:30:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE44C7223EEA81B30E923FA4269D01FA228630C1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/323830333a356139303a3a2f33322d3438203d3e20323732383833.roa
Signing time:             Tue 04 Feb 2025 18:04:18 +0000
ROA not before:           Tue 04 Feb 2025 17:59:18 +0000
ROA not after:            Tue 03 Feb 2026 18:04:18 +0000
asID:                     272883
IP address blocks:        2803:5a90::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:df:ba:30:9f:07:9f:e7:b7:08:93:4a:fc:ca:89:32:cc:c2:65:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE44C7223EEA81B30E923FA4269D01FA228630C1
        Validity
            Not Before: Feb  4 17:59:18 2025 GMT
            Not After : Feb  3 18:04:18 2026 GMT
        Subject: CN=EF1A3C66A447B22C2702341785FA2D51DF43D600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:75:76:f7:ce:71:b5:c5:8a:d3:b3:fa:4f:
                    55:e1:7b:ce:21:2f:cb:2c:80:82:28:c8:3a:05:6b:
                    f2:ff:30:bc:79:2f:39:79:72:8d:ec:b9:62:db:2e:
                    a4:7b:cd:19:8e:eb:e9:4e:3c:03:66:62:36:23:ca:
                    33:09:2a:29:8f:74:ce:9e:60:ae:51:91:38:b8:c1:
                    dc:d1:41:c4:08:4e:c4:1c:52:33:26:db:43:c0:4a:
                    28:e3:81:30:9b:c1:34:fc:c8:44:0e:73:d7:06:05:
                    fc:8b:df:46:02:34:dd:7b:8a:79:e5:e7:1a:19:98:
                    e2:4f:48:e2:a7:e7:af:34:eb:cc:bf:f8:b1:00:5d:
                    a5:f6:d7:23:e2:3e:c2:5d:f7:01:f4:82:26:2e:66:
                    c0:7d:2f:cd:71:78:3e:c0:27:b7:e2:20:c7:f0:0e:
                    3c:c7:95:f2:ce:81:b2:3f:2b:41:3e:75:c7:95:fc:
                    8c:c8:65:13:a1:06:05:42:1c:10:36:31:c9:f7:70:
                    82:6c:82:7d:6f:b5:44:5a:40:bb:41:d6:3c:47:a3:
                    0d:27:c6:1d:29:0c:cc:72:ae:6e:cf:8f:5b:da:0e:
                    02:32:03:7a:2e:ac:db:76:6d:b5:89:16:36:6e:e0:
                    e9:00:21:64:65:90:70:22:1c:36:d2:2a:20:d9:08:
                    3c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1A:3C:66:A4:47:B2:2C:27:02:34:17:85:FA:2D:51:DF:43:D6:00
            X509v3 Authority Key Identifier:
                keyid:CE:44:C7:22:3E:EA:81:B3:0E:92:3F:A4:26:9D:01:FA:22:86:30:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/CE44C7223EEA81B30E923FA4269D01FA228630C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE44C7223EEA81B30E923FA4269D01FA228630C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAE7102B03D15AF685088BD05F8E7EBAD6E04F941EC2F498A4013AD8C904E1D8/0/323830333a356139303a3a2f33322d3438203d3e20323732383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:ff:a1:cb:ef:fa:50:f7:ba:62:f9:12:e1:3e:d7:b2:92:ca:
         3a:58:cb:c0:64:9f:c3:28:8e:00:cf:06:9b:9a:00:ac:39:a0:
         74:91:e7:39:44:d2:6c:94:0a:00:8a:fb:97:4c:cb:30:c7:e9:
         97:ac:09:1e:eb:3d:d1:2a:e0:da:1e:ab:48:e4:ce:f3:cc:e1:
         e4:d1:d0:fc:68:5e:d5:08:26:cf:61:2a:a8:fd:27:e9:f9:03:
         5c:73:41:82:92:e1:07:81:59:ac:52:ce:76:a2:56:4f:34:c2:
         28:82:48:b5:2a:4f:0b:e4:38:e5:fb:13:42:4f:86:6e:d1:78:
         ec:b9:59:82:aa:66:c0:a9:0b:64:43:05:82:08:8b:1b:56:bd:
         6c:36:16:09:6a:c6:d8:70:c1:a5:64:82:8f:e7:3b:04:0f:d3:
         70:af:1b:09:83:2f:c7:18:33:cb:eb:37:ca:a1:0c:bb:e3:81:
         75:b1:03:a4:ae:ef:d4:09:e6:33:26:8e:cc:ae:cb:c8:5f:42:
         70:8c:11:1b:a3:33:b6:57:ab:5d:b8:79:85:44:85:be:d9:fa:
         37:7a:bb:ba:5f:c1:39:50:24:44:f1:a9:97:04:58:c1:e4:d0:
         e5:98:a2:fa:f7:93:80:4a:66:26:1f:c8:e0:60:18:74:b4:85:
         a7:ff:43:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:31 2025 by rpki-client