Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/323830333a666332303a3a2f33322d3438203d3e203532343638.roa
File:                     323830333a666332303a3a2f33322d3438203d3e203532343638.roa (raw, json)
Hash identifier:          g9WqvXpuVVX3H+AZVpqUeKIJk5dbXHHk4yjVjjSwxOc=
Subject key identifier:   EA:AF:8E:B8:EE:FE:DA:23:74:74:61:CE:56:40:83:A8:37:0B:B9:7E
Certificate issuer:       /CN=AC4F66836F8621D5CE8015EE7A781F4C097A7F15
Certificate serial:       651FEAAF1E21D8EC303EBB1316CEFC234CE5DBE1
Authority key identifier: AC:4F:66:83:6F:86:21:D5:CE:80:15:EE:7A:78:1F:4C:09:7A:7F:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/323830333a666332303a3a2f33322d3438203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:12:33 +0000
ROA not before:           Tue 04 Feb 2025 18:07:33 +0000
ROA not after:            Tue 03 Feb 2026 18:12:33 +0000
asID:                     52468
IP address blocks:        2803:fc20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1f:ea:af:1e:21:d8:ec:30:3e:bb:13:16:ce:fc:23:4c:e5:db:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4F66836F8621D5CE8015EE7A781F4C097A7F15
        Validity
            Not Before: Feb  4 18:07:33 2025 GMT
            Not After : Feb  3 18:12:33 2026 GMT
        Subject: CN=EAAF8EB8EEFEDA23747461CE564083A8370BB97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:a0:d3:b1:69:c6:59:3d:66:4d:46:04:db:
                    53:fd:18:29:3d:a2:fd:eb:51:4f:5a:3e:97:b6:40:
                    42:28:c7:38:fe:aa:2f:69:60:a0:43:e3:0d:53:bf:
                    65:5c:63:77:61:ad:9a:3f:dd:90:f1:27:c1:1a:e3:
                    97:2f:79:4e:81:49:e6:4e:b3:fc:36:e6:fc:16:9d:
                    4e:1f:b3:11:ea:fb:6e:f2:38:ce:05:df:57:a1:cd:
                    da:60:9f:4d:95:0f:6a:6c:2d:ec:e3:6c:5c:8f:14:
                    ee:4c:a0:35:10:88:b3:b3:87:da:74:1f:1a:8e:8f:
                    07:ab:1e:a7:ed:ae:59:4e:2d:96:57:2f:3f:29:0f:
                    ed:1b:d5:06:91:fe:b5:e8:f0:d0:be:c4:78:f7:47:
                    e9:7b:e4:e0:9f:29:5b:db:b8:8f:23:b3:21:d3:9d:
                    31:c1:40:a9:9e:e7:67:95:c3:e9:a7:80:d4:27:11:
                    70:cf:bc:eb:7f:59:40:7e:96:c8:ad:7e:22:c6:b6:
                    c0:5a:e7:0e:ff:2d:90:77:b3:1b:34:65:6e:ed:7a:
                    73:a1:d6:77:24:c0:ce:96:e1:49:48:8f:09:a7:10:
                    a0:d1:f4:af:f2:80:ca:d5:1b:a4:05:9a:b8:07:83:
                    f7:7f:6e:6d:8e:9d:d7:7c:8f:43:f6:03:9d:59:4d:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AF:8E:B8:EE:FE:DA:23:74:74:61:CE:56:40:83:A8:37:0B:B9:7E
            X509v3 Authority Key Identifier:
                keyid:AC:4F:66:83:6F:86:21:D5:CE:80:15:EE:7A:78:1F:4C:09:7A:7F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/323830333a666332303a3a2f33322d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:da:e5:3d:a1:85:a2:a4:00:8a:be:38:2e:70:d4:58:61:
         11:12:ae:3c:d0:02:7e:89:05:82:2e:7f:c0:a3:c1:cc:56:ec:
         51:00:59:d8:3d:ef:00:14:88:92:ec:db:52:36:c4:83:45:5d:
         cb:28:46:0f:10:56:b6:26:5b:59:7b:1f:b4:85:3d:74:8b:de:
         af:3d:5a:00:39:ad:ac:4a:cb:96:c9:51:da:8f:c1:81:be:7e:
         61:e9:89:dd:07:15:c8:36:54:54:30:fd:3c:ba:73:91:b9:60:
         90:8a:3b:1b:cc:10:7a:23:a7:62:3e:8b:a3:2c:36:01:c0:6a:
         81:ab:f9:28:74:fb:f4:f9:fe:dc:9f:20:6e:13:3e:03:1a:be:
         01:2e:e2:08:11:41:d3:70:7b:0a:45:0c:df:c8:d1:86:74:4a:
         07:65:31:33:e2:9a:27:c0:32:bf:c2:3e:90:af:c0:5f:98:86:
         36:90:23:9e:17:1c:97:be:9c:c8:b4:ec:1f:f6:8d:55:dd:50:
         4b:99:dd:17:94:2d:ab:83:06:29:0f:e0:bd:30:e7:21:b9:ce:
         c9:0e:b4:f1:d4:06:8d:48:bc:d8:12:70:1d:63:52:c2:da:71:
         c8:cf:3e:dd:39:30:24:2b:c8:5c:f0:cc:8f:e1:de:ac:72:95:
         08:97:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:46 2025 by rpki-client