Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F17C899D78BD0469B41E73320C2C85078127F078EFBD4E57E4054830905C8007/0/323830333a343531303a3a2f33322d3438203d3e20323732303138.roa
File:                     323830333a343531303a3a2f33322d3438203d3e20323732303138.roa (raw, json)
Hash identifier:          OzYgTTyKrQDiwozvkjc0vU0Npo4O0RCSAdNuE5uiKX4=
Subject key identifier:   07:DB:29:D2:44:4F:DB:B6:57:58:85:C8:17:10:41:F7:EC:F3:3F:34
Certificate issuer:       /CN=7AF66B13138C1FA7AD312F411D39B0F82C3B053F
Certificate serial:       2C410F0535940E7985C599BBF4AF58FF16C93FF5
Authority key identifier: 7A:F6:6B:13:13:8C:1F:A7:AD:31:2F:41:1D:39:B0:F8:2C:3B:05:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7AF66B13138C1FA7AD312F411D39B0F82C3B053F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F17C899D78BD0469B41E73320C2C85078127F078EFBD4E57E4054830905C8007/0/323830333a343531303a3a2f33322d3438203d3e20323732303138.roa
Signing time:             Tue 04 Feb 2025 18:27:15 +0000
ROA not before:           Tue 04 Feb 2025 18:22:15 +0000
ROA not after:            Tue 03 Feb 2026 18:27:15 +0000
asID:                     272018
IP address blocks:        2803:4510::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:41:0f:05:35:94:0e:79:85:c5:99:bb:f4:af:58:ff:16:c9:3f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AF66B13138C1FA7AD312F411D39B0F82C3B053F
        Validity
            Not Before: Feb  4 18:22:15 2025 GMT
            Not After : Feb  3 18:27:15 2026 GMT
        Subject: CN=07DB29D2444FDBB6575885C8171041F7ECF33F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:f7:44:24:e4:88:42:52:2d:ba:11:b7:ff:
                    0f:0c:7e:ce:87:b8:94:d7:01:84:c7:43:f1:66:64:
                    ee:b7:ec:3d:5c:18:7e:fc:6a:d9:8a:ef:50:17:bb:
                    ff:fe:92:5c:a4:97:72:4e:d5:19:2d:88:4f:f6:a3:
                    fb:6f:df:bb:16:fe:8a:f1:c1:e5:72:4f:29:32:ce:
                    61:e8:54:da:68:88:0f:6e:16:02:1d:34:92:94:b9:
                    f8:1f:31:d2:6a:4d:b1:0a:48:5c:31:c3:8b:18:b8:
                    a0:46:a3:74:07:b9:03:49:dc:74:36:a5:74:9c:77:
                    b7:87:db:89:c0:57:a1:ac:71:42:8e:54:b4:7d:50:
                    16:40:92:79:08:41:dd:ee:83:f8:49:90:fb:4b:c6:
                    a6:dc:73:a0:9e:00:9f:bc:68:f2:f7:48:11:fb:2f:
                    25:c1:04:a9:5c:2f:40:a0:88:c9:73:b9:54:4d:86:
                    39:de:79:77:ce:1c:df:fc:1f:cd:b3:a0:ff:5d:a1:
                    79:bd:6a:31:4a:39:22:21:1f:56:cc:40:41:ce:b0:
                    38:39:f7:30:60:b0:3c:db:87:67:9d:2a:05:bf:31:
                    d1:cb:a4:97:d2:71:03:d4:0a:a4:51:68:cb:c4:a5:
                    39:e9:2c:8c:fd:b1:77:30:7c:80:3c:73:52:8b:8c:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DB:29:D2:44:4F:DB:B6:57:58:85:C8:17:10:41:F7:EC:F3:3F:34
            X509v3 Authority Key Identifier:
                keyid:7A:F6:6B:13:13:8C:1F:A7:AD:31:2F:41:1D:39:B0:F8:2C:3B:05:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F17C899D78BD0469B41E73320C2C85078127F078EFBD4E57E4054830905C8007/0/7AF66B13138C1FA7AD312F411D39B0F82C3B053F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7AF66B13138C1FA7AD312F411D39B0F82C3B053F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F17C899D78BD0469B41E73320C2C85078127F078EFBD4E57E4054830905C8007/0/323830333a343531303a3a2f33322d3438203d3e20323732303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4510::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:fe:b7:c5:d0:e4:08:19:5b:3a:bd:05:1d:11:df:29:e2:16:
         d4:c6:1e:98:60:7b:c1:85:e3:8e:c5:3b:7d:4d:7b:62:b2:6f:
         23:90:59:b0:a3:34:5c:a2:e3:ed:bf:f3:9f:52:aa:8a:6c:25:
         0b:38:3b:d0:18:78:68:4a:d4:e2:1f:80:1c:6d:c6:06:68:51:
         f1:b3:8e:21:4a:c7:c8:78:fd:78:e8:54:cf:cf:22:8e:ea:7e:
         d8:29:88:9b:c7:c1:6d:2a:91:0f:75:15:68:db:39:ff:74:dd:
         52:0d:c3:3a:81:ce:b2:5b:ef:43:a1:74:1a:b4:ee:29:39:db:
         34:fb:44:52:ab:4d:33:32:b3:5b:3a:3d:9e:ae:76:0c:7b:e5:
         33:63:fb:ac:4d:91:06:a5:15:96:57:7f:d1:88:dd:4e:26:70:
         5f:b5:09:b4:cc:b1:98:eb:34:c8:6b:ea:02:8e:d7:e4:fc:6d:
         80:e4:00:63:82:2e:c9:ac:bc:49:23:b4:ce:d2:01:19:62:87:
         c1:04:37:f1:86:ea:39:b6:3e:38:16:d2:e9:32:15:14:1a:47:
         c7:c3:ac:5f:e3:2a:73:27:c5:4e:03:78:ef:81:ef:3f:1d:ef:
         b2:7a:32:ec:63:37:e6:ad:47:30:f2:e1:50:ea:80:e5:ae:ba:
         b0:a7:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:16 2025 by rpki-client