Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa
File:                     323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa (raw, json)
Hash identifier:          x5SjGvvh5n9prVBjG3YMYWcrZau43PJ3M23cH905lpg=
Subject key identifier:   59:58:87:A0:CB:BC:40:2C:F3:FD:62:D5:47:0C:DB:F7:20:A2:98:05
Certificate issuer:       /CN=E45215C1ABF0099BEFF5D5807A415849759B9467
Certificate serial:       5526963BB371B8BA98E234B030D30F35E0699A25
Authority key identifier: E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa
Signing time:             Tue 04 Feb 2025 18:21:26 +0000
ROA not before:           Tue 04 Feb 2025 18:16:26 +0000
ROA not after:            Tue 03 Feb 2026 18:21:26 +0000
asID:                     271916
IP address blocks:        2803:4a10:e000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:26:96:3b:b3:71:b8:ba:98:e2:34:b0:30:d3:0f:35:e0:69:9a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45215C1ABF0099BEFF5D5807A415849759B9467
        Validity
            Not Before: Feb  4 18:16:26 2025 GMT
            Not After : Feb  3 18:21:26 2026 GMT
        Subject: CN=595887A0CBBC402CF3FD62D5470CDBF720A29805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ae:64:8f:85:96:2a:fc:50:2d:68:4f:47:c2:
                    49:9b:e8:fe:c3:27:d6:9f:c3:55:65:c8:6a:37:83:
                    f2:bf:87:9f:38:dd:eb:57:69:b4:a4:47:3f:4a:5d:
                    bb:41:52:1c:a5:fb:7e:c8:db:c9:69:17:96:f7:49:
                    40:51:c6:3e:f0:8b:66:4c:ed:af:9e:0a:8c:1d:eb:
                    f8:d9:c6:3d:56:6e:6d:26:7a:a4:52:6d:82:c6:5c:
                    ca:aa:da:60:bd:c6:3c:5a:36:dc:f8:61:21:c3:c8:
                    72:3a:c1:a8:22:ac:d6:55:be:46:d3:9a:b3:30:6b:
                    f2:0b:9b:74:57:8d:de:9a:c0:be:8a:32:49:53:50:
                    f6:67:b6:87:30:b9:c6:65:fc:ee:5d:9c:7f:1a:ce:
                    14:33:04:d3:0f:43:e4:2f:81:b2:09:9f:08:7d:95:
                    26:c1:7f:c4:f1:ee:0e:a2:b8:8b:a3:27:46:62:49:
                    e3:f5:47:cf:d4:3a:fd:85:c3:91:34:fe:02:95:71:
                    5b:3d:71:17:e2:2e:67:0c:e4:89:6b:21:a2:91:03:
                    35:92:47:54:b5:7a:3f:22:2e:64:6c:2b:0c:2c:63:
                    67:7b:96:59:08:ba:34:c1:04:36:3c:3c:a2:74:2e:
                    09:ee:85:76:19:d6:ea:86:a0:25:7e:f9:62:91:60:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:58:87:A0:CB:BC:40:2C:F3:FD:62:D5:47:0C:DB:F7:20:A2:98:05
            X509v3 Authority Key Identifier:
                keyid:E4:52:15:C1:AB:F0:09:9B:EF:F5:D5:80:7A:41:58:49:75:9B:94:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/E45215C1ABF0099BEFF5D5807A415849759B9467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45215C1ABF0099BEFF5D5807A415849759B9467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BAB4FDC49B7DFE1D89ACB49F8C8A9225FB645AFBF6A00D832DC9DC3F39B253/0/323830333a346131303a653030303a3a2f33362d3336203d3e20323731393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a10:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:29:e4:f1:49:67:8a:5d:bf:3c:6d:6f:8d:00:08:c7:5d:aa:
         e2:4b:8c:40:eb:ff:21:36:19:97:5c:3c:59:70:5c:8c:0d:c0:
         66:0f:07:54:53:0f:7a:26:aa:2e:ee:c0:09:e8:83:09:eb:ac:
         cb:31:5f:c7:28:08:90:05:04:77:5d:3f:04:d7:ab:3a:fa:17:
         74:fb:a2:f2:38:c3:e6:91:be:3f:01:ca:02:15:c8:ac:13:52:
         bb:0f:04:ac:39:5d:05:d3:86:7a:73:b6:46:d4:17:bc:7a:11:
         bf:c0:16:ba:d8:67:27:ec:d2:33:09:bd:48:99:28:62:61:00:
         e6:f6:4f:01:c2:97:8e:fd:d7:09:fe:f4:cb:9d:53:ba:4a:99:
         46:0c:76:cd:c5:f8:57:96:0b:04:27:ec:c5:02:e9:30:3a:e7:
         e1:a9:3d:46:cf:a0:f3:80:d4:8f:84:3f:37:8a:fe:7e:f1:c6:
         9b:14:df:78:87:7e:ae:ad:bf:dd:95:eb:30:b1:03:68:47:36:
         34:b1:ae:33:bf:bd:89:f6:4e:86:17:7b:c3:f5:7c:4f:1e:a6:
         37:17:25:98:1b:0a:1b:cd:a2:29:4b:77:cd:d0:75:48:20:00:
         bb:de:ea:80:80:f9:c2:9c:cf:e3:19:a0:af:25:15:23:51:bf:
         70:3d:67:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:50 2025 by rpki-client