Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/323830333a646531303a3a2f33322d3332203d3e20323731393738.roa
File:                     323830333a646531303a3a2f33322d3332203d3e20323731393738.roa (raw, json)
Hash identifier:          7sFRCltbJlt7DXey3iSsGe1gRFgWgqjlykEnfARWfeg=
Subject key identifier:   E4:EA:F0:E3:73:AF:78:BD:C9:23:DC:50:64:36:7F:53:B3:91:44:4E
Certificate issuer:       /CN=99D28F035CFBF29FCCEA3B81800F0AFAAB00722A
Certificate serial:       4DE33EF05E8D09AB4EE05AC6526A0D304846582B
Authority key identifier: 99:D2:8F:03:5C:FB:F2:9F:CC:EA:3B:81:80:0F:0A:FA:AB:00:72:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/323830333a646531303a3a2f33322d3332203d3e20323731393738.roa
Signing time:             Tue 04 Feb 2025 18:02:24 +0000
ROA not before:           Tue 04 Feb 2025 17:57:24 +0000
ROA not after:            Tue 03 Feb 2026 18:02:24 +0000
asID:                     271978
IP address blocks:        2803:de10::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e3:3e:f0:5e:8d:09:ab:4e:e0:5a:c6:52:6a:0d:30:48:46:58:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D28F035CFBF29FCCEA3B81800F0AFAAB00722A
        Validity
            Not Before: Feb  4 17:57:24 2025 GMT
            Not After : Feb  3 18:02:24 2026 GMT
        Subject: CN=E4EAF0E373AF78BDC923DC5064367F53B391444E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:60:b1:2e:2d:e7:cb:cd:28:04:fa:9e:80:
                    46:e6:82:c7:2e:8b:44:a7:9f:d5:f7:2f:02:cf:64:
                    9f:6b:d6:b4:e5:95:90:78:5c:f2:9c:a9:e1:c4:8d:
                    5e:9d:f4:2d:fa:5c:e6:e7:26:dc:e5:22:eb:60:a9:
                    cc:4e:e3:53:9d:c7:1f:cc:75:1f:1b:c0:9a:8b:de:
                    16:ef:aa:3c:fd:fd:85:49:5c:9a:1a:70:b4:35:d3:
                    4d:7f:e9:20:1f:50:d8:46:7c:23:9d:7b:13:88:5a:
                    f3:04:63:76:4d:2d:cb:5c:de:83:31:0a:d3:ab:ed:
                    57:9b:b8:0f:68:5a:ec:fd:50:9c:dd:cf:60:46:b6:
                    2c:39:1f:9a:17:73:82:f6:ca:54:af:55:6b:9d:b4:
                    e2:46:73:80:9f:02:9c:a4:12:f5:e5:6e:38:48:97:
                    2f:d7:01:3f:f6:ad:e8:47:dc:78:f9:8f:55:ea:b2:
                    6a:24:a7:7a:f5:49:35:06:b8:75:7c:12:ce:99:cc:
                    40:32:a1:63:9e:70:d5:82:a9:8a:31:34:cb:04:66:
                    22:21:f9:6c:37:b3:07:f6:bd:b0:3d:cc:a6:34:22:
                    42:5d:f9:16:e4:a9:4b:5d:9c:d1:b7:70:cc:45:10:
                    00:8b:6c:76:9b:41:6b:77:51:9a:44:77:b5:bd:5a:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EA:F0:E3:73:AF:78:BD:C9:23:DC:50:64:36:7F:53:B3:91:44:4E
            X509v3 Authority Key Identifier:
                keyid:99:D2:8F:03:5C:FB:F2:9F:CC:EA:3B:81:80:0F:0A:FA:AB:00:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D28F035CFBF29FCCEA3B81800F0AFAAB00722A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0040B6D98C8FC62E4F905B39B9DF76CC2EB749047E0AA77992F9653B1AC3790/0/323830333a646531303a3a2f33322d3332203d3e20323731393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de10::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:65:1f:98:de:7c:e8:b1:0b:d1:75:39:c6:37:d3:8b:fb:40:
         e0:4e:41:26:0d:4c:7e:69:31:76:95:e2:4e:a1:a3:20:80:9c:
         30:7c:b0:6f:9b:04:d2:08:54:b2:bd:83:c1:a5:9e:a9:ea:b7:
         ea:d1:c3:ec:8b:e3:0e:88:d2:b1:7c:61:7e:c1:5e:19:07:d1:
         6b:41:28:e6:ef:a4:42:c6:1e:1a:e3:51:40:b3:d5:e1:6a:cb:
         31:09:81:d4:8e:2c:14:a9:41:21:2e:d5:76:f9:fa:a9:6e:72:
         85:56:11:1b:81:93:d9:9f:aa:32:97:21:29:aa:5f:7a:26:53:
         4b:3b:ce:63:24:50:3b:4e:b3:57:d5:80:13:26:1d:df:56:18:
         22:4a:c7:4e:e7:a7:c2:a9:8d:d8:eb:46:19:72:53:f0:d4:7f:
         54:b2:6d:0b:30:9c:64:e9:04:c9:3e:1e:b1:ee:81:e1:31:a5:
         f1:45:f7:54:cb:86:78:bb:0f:74:d8:f5:16:27:2f:a1:6b:91:
         e5:b4:5c:37:94:88:5b:44:0b:e2:a2:41:78:4e:a4:8e:71:cc:
         8d:b1:10:4d:6c:4d:15:6a:b7:54:b5:77:c2:32:5d:40:d0:67:
         58:74:ea:47:e9:ce:6f:f8:0f:12:8c:da:10:b9:d8:b7:90:12:
         a7:d0:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:36 2025 by rpki-client