Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/323830333a666332303a3a2f33322d3438203d3e20323634363638.roa
File:                     323830333a666332303a3a2f33322d3438203d3e20323634363638.roa (raw, json)
Hash identifier:          ew18cnD/RPE2s2+/iJITXcsHrAbipz5QxCa9/6Ik/i4=
Subject key identifier:   BE:E2:13:5E:D9:B7:71:29:56:A7:E1:DF:31:73:EE:E3:EC:E2:E4:E2
Certificate issuer:       /CN=AC4F66836F8621D5CE8015EE7A781F4C097A7F15
Certificate serial:       09906196CD54F6631FCCA854A689B8D431D1E657
Authority key identifier: AC:4F:66:83:6F:86:21:D5:CE:80:15:EE:7A:78:1F:4C:09:7A:7F:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/323830333a666332303a3a2f33322d3438203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:12:32 +0000
ROA not before:           Tue 04 Feb 2025 18:07:32 +0000
ROA not after:            Tue 03 Feb 2026 18:12:32 +0000
asID:                     264668
IP address blocks:        2803:fc20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:90:61:96:cd:54:f6:63:1f:cc:a8:54:a6:89:b8:d4:31:d1:e6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4F66836F8621D5CE8015EE7A781F4C097A7F15
        Validity
            Not Before: Feb  4 18:07:32 2025 GMT
            Not After : Feb  3 18:12:32 2026 GMT
        Subject: CN=BEE2135ED9B7712956A7E1DF3173EEE3ECE2E4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:67:9b:23:a6:27:cb:27:de:ba:43:e4:7c:d4:
                    cb:12:77:fd:09:bd:6b:9f:d6:71:48:22:f0:fd:ed:
                    26:4a:05:a2:5b:c8:b8:30:ab:61:34:bc:92:d2:6e:
                    62:5b:58:7f:86:95:58:da:c8:dd:5a:e7:57:85:73:
                    37:3c:69:b1:74:6b:90:8a:38:49:dd:91:97:c4:39:
                    76:b5:9d:2d:ed:c0:ad:91:e8:9d:5a:88:78:54:cf:
                    6d:1c:ee:7f:c5:30:f7:48:d5:b2:11:00:01:38:a1:
                    d0:cf:24:12:53:5a:22:be:16:0a:c3:7e:5d:07:84:
                    a3:99:54:53:bc:07:b0:90:fc:03:07:8b:2e:88:1d:
                    92:06:3f:77:6d:47:e7:aa:4f:7c:fc:bf:e3:3d:f6:
                    d7:29:ec:52:6d:62:dc:93:fb:23:c6:22:fb:19:53:
                    bd:de:5e:21:83:15:5f:cb:06:6d:e8:2d:8c:67:ad:
                    4d:58:ce:a0:be:af:26:2b:be:8d:7e:53:9a:7d:42:
                    e0:cd:65:53:74:77:d9:d8:81:9d:3a:4c:dc:e4:d9:
                    37:6c:1c:87:9a:b2:5b:78:34:bb:e7:50:70:f4:4a:
                    75:e2:22:61:05:20:e2:bb:36:ae:63:77:ed:b5:33:
                    8e:11:a8:e0:14:a2:b1:3e:30:93:74:b8:71:7d:59:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E2:13:5E:D9:B7:71:29:56:A7:E1:DF:31:73:EE:E3:EC:E2:E4:E2
            X509v3 Authority Key Identifier:
                keyid:AC:4F:66:83:6F:86:21:D5:CE:80:15:EE:7A:78:1F:4C:09:7A:7F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/323830333a666332303a3a2f33322d3438203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:89:07:93:41:65:ac:9e:84:38:65:a7:e5:a7:fb:dc:8b:2c:
         5a:21:3d:0f:1c:fd:6c:21:44:8e:00:70:3c:2e:d8:d6:aa:4b:
         ec:94:32:df:77:03:37:e8:f8:1b:38:f1:95:9c:10:1d:d9:0f:
         62:36:76:8c:05:ca:f3:92:35:6c:d8:00:46:91:ba:12:fa:0c:
         ec:33:a7:e8:c1:b1:82:66:bb:62:11:58:c7:fa:d8:80:d4:f7:
         05:67:cd:b6:b9:71:69:9b:6a:8a:bc:d9:63:be:46:16:aa:f2:
         33:fb:f7:6f:a9:57:15:5e:e0:d6:b8:a6:a9:11:1c:64:b1:4e:
         2c:3c:24:59:9c:88:4d:03:9d:a8:a3:4f:1c:90:b2:bd:7c:cc:
         f6:2e:45:6a:0f:61:d8:6f:22:2b:27:0c:23:75:84:d6:ed:5b:
         37:bd:55:8a:3a:78:3e:0d:6d:f6:e1:77:e1:38:4e:92:fe:74:
         63:5e:ee:2e:cc:65:1d:55:f6:b1:6f:1b:71:83:fd:9e:fc:56:
         a2:b6:40:d8:5c:2e:fe:90:87:5f:bf:df:fe:70:ec:93:44:85:
         20:69:d5:05:fb:a0:f0:ec:ba:c7:4c:28:3e:62:0c:a3:a2:9a:
         28:c5:1e:7d:af:63:d4:ed:7e:1f:4e:21:e9:ba:93:68:bc:28:
         58:a1:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:39 2025 by rpki-client