Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/323830333a666334303a3a2f33322d3438203d3e20323634363531.roa
File:                     323830333a666334303a3a2f33322d3438203d3e20323634363531.roa (raw, json)
Hash identifier:          hdfXpWoJg7cuaatipbtYu/A8qY33FDfjuzwdSuf/H3w=
Subject key identifier:   B2:45:FD:C6:F0:36:82:D1:02:18:1D:04:11:7B:16:E7:70:75:4F:87
Certificate issuer:       /CN=FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE
Certificate serial:       759F57EF6B35791096DDA7EC04ADB49ABFEF6541
Authority key identifier: FC:6D:27:F4:CD:A3:64:79:C9:BB:EE:89:89:A2:83:A3:0D:FD:BD:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/323830333a666334303a3a2f33322d3438203d3e20323634363531.roa
Signing time:             Tue 04 Feb 2025 18:23:01 +0000
ROA not before:           Tue 04 Feb 2025 18:18:01 +0000
ROA not after:            Tue 03 Feb 2026 18:23:01 +0000
asID:                     264651
IP address blocks:        2803:fc40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9f:57:ef:6b:35:79:10:96:dd:a7:ec:04:ad:b4:9a:bf:ef:65:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE
        Validity
            Not Before: Feb  4 18:18:01 2025 GMT
            Not After : Feb  3 18:23:01 2026 GMT
        Subject: CN=B245FDC6F03682D102181D04117B16E770754F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d2:7b:b6:26:04:2a:d5:19:c5:6b:75:bd:4f:
                    6a:4d:47:8f:d5:37:01:4d:f3:2a:62:5f:0e:56:73:
                    b8:cf:fd:e7:c4:f3:7d:3c:ac:3a:b4:4c:17:11:86:
                    3f:fe:63:4d:a9:e6:e5:e7:7b:ea:8f:c9:fb:b9:37:
                    a7:f1:85:be:b5:68:4e:fc:e6:34:9f:1d:e3:d0:92:
                    5d:fa:18:38:66:6e:a1:45:ec:da:9d:76:44:df:a2:
                    0d:91:68:61:56:d6:7f:16:a9:3a:d9:d2:56:d3:68:
                    07:46:45:91:69:d6:b4:fa:97:d4:9e:7e:3a:04:ca:
                    39:eb:83:8e:ea:e3:f9:79:76:fe:9f:ba:7b:26:9d:
                    00:41:3d:72:1d:86:97:22:b7:40:0c:7a:aa:2f:80:
                    fa:a5:46:75:a3:d4:64:c8:bb:ce:46:87:99:c4:6c:
                    a9:85:57:12:e8:b9:6f:e5:64:48:02:5f:25:23:f7:
                    d7:6a:a0:ce:ce:06:36:f1:fc:59:c7:34:96:78:6c:
                    9d:da:57:c3:de:0b:10:24:6d:25:8a:8e:72:02:99:
                    ac:a1:2f:d7:58:b1:16:cc:e8:a2:2a:78:36:0f:42:
                    0a:71:ef:3a:d7:74:88:3a:65:b2:7a:13:54:7a:cd:
                    b2:b0:e6:3c:81:0d:aa:88:aa:81:cd:c0:31:8c:e7:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:45:FD:C6:F0:36:82:D1:02:18:1D:04:11:7B:16:E7:70:75:4F:87
            X509v3 Authority Key Identifier:
                keyid:FC:6D:27:F4:CD:A3:64:79:C9:BB:EE:89:89:A2:83:A3:0D:FD:BD:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC6D27F4CDA36479C9BBEE8989A283A30DFDBDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB309B49A19CDDFCB1555954D2BD876CAF4FB0C09505999B6BD8133567DBD124/0/323830333a666334303a3a2f33322d3438203d3e20323634363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:12:3d:2c:f8:66:68:49:f7:8e:85:48:92:85:7c:3b:67:53:
         6e:f3:5c:99:0c:61:09:c5:71:dc:26:43:7b:ca:c2:b0:d4:ab:
         ce:79:fd:7a:e7:4a:7c:aa:89:93:14:e0:67:eb:ad:d5:ff:63:
         6e:00:17:3b:41:5e:6b:e8:0c:bd:b1:dc:11:ea:b4:70:c1:b6:
         3d:7e:19:af:a0:01:bf:20:b1:2c:df:bc:8f:00:6d:e5:0e:b7:
         70:94:59:9f:9b:6f:02:c0:9c:01:4d:5b:09:76:fb:ca:f3:ee:
         2b:e5:51:d6:31:48:bc:81:06:05:e3:d9:1c:0a:ba:3b:8e:f6:
         36:83:fa:ae:90:a2:ab:17:e2:68:9a:f1:67:e0:c2:9a:2a:fa:
         a0:45:2a:9a:d4:7a:d3:a5:42:6b:b1:90:e7:91:77:45:7a:56:
         2c:06:08:06:22:5a:de:96:5d:f3:84:69:5f:0d:e3:fc:22:36:
         93:f6:3e:67:37:8a:cc:ef:03:92:80:e0:c4:07:aa:fd:02:0f:
         02:ad:6f:c1:85:a8:1b:4f:f7:1a:be:87:22:d8:b1:7a:7a:bf:
         d5:07:9c:a8:cf:f4:ec:97:7e:15:52:f1:f4:5e:7f:5e:32:87:
         7b:a3:8f:3b:a8:ef:9c:3d:ae:0b:c3:d6:d1:46:d8:d4:6d:62:
         49:cf:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:48:33 2025 by rpki-client