Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/323830333a3136303a3a2f33322d3332203d3e20323637393332.roa
File:                     323830333a3136303a3a2f33322d3332203d3e20323637393332.roa (raw, json)
Hash identifier:          g8x1Pexi4DqmX2JxiULRDw5wAdmOJpERN6PMUP1KbKo=
Subject key identifier:   B3:0A:BD:C2:EA:A7:70:8A:94:A3:94:03:9D:E5:EF:C6:50:39:9C:B0
Certificate issuer:       /CN=6783113CE361998A62AFBD1EB4EB0442B6FE1A19
Certificate serial:       5FB9B4FD22D54FB0A35E395E2DDA86EE38B0087E
Authority key identifier: 67:83:11:3C:E3:61:99:8A:62:AF:BD:1E:B4:EB:04:42:B6:FE:1A:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/323830333a3136303a3a2f33322d3332203d3e20323637393332.roa
Signing time:             Tue 04 Feb 2025 18:50:21 +0000
ROA not before:           Tue 04 Feb 2025 18:45:21 +0000
ROA not after:            Tue 03 Feb 2026 18:50:21 +0000
asID:                     267932
IP address blocks:        2803:160::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b9:b4:fd:22:d5:4f:b0:a3:5e:39:5e:2d:da:86:ee:38:b0:08:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6783113CE361998A62AFBD1EB4EB0442B6FE1A19
        Validity
            Not Before: Feb  4 18:45:21 2025 GMT
            Not After : Feb  3 18:50:21 2026 GMT
        Subject: CN=B30ABDC2EAA7708A94A394039DE5EFC650399CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:64:0f:dd:68:b6:5d:c4:02:de:b9:bf:95:
                    13:43:17:19:e1:d7:6e:ed:76:09:a6:36:56:02:51:
                    20:72:9a:96:50:b3:5b:ca:7c:e0:b9:37:b3:be:15:
                    14:2e:f6:0f:b3:93:2f:1d:46:8d:5f:08:ee:94:e8:
                    76:44:b3:e7:9e:36:ae:96:73:76:48:0d:7b:75:aa:
                    8f:a5:be:10:b6:db:96:80:79:b3:3b:21:b7:b8:28:
                    f3:e8:5c:c0:b1:df:5b:8a:6c:6c:f0:f3:6d:c9:bd:
                    d7:63:19:89:c0:3e:c3:aa:3d:d3:90:f4:fc:eb:77:
                    2f:13:83:e1:3a:f7:82:7b:16:b5:68:15:3f:62:20:
                    21:70:1c:96:fa:ed:d3:1e:1f:e9:78:0c:0d:b1:f8:
                    f1:ae:4c:8e:a0:09:c5:74:e9:5f:69:db:5d:eb:f5:
                    ac:b0:26:bf:99:fe:3f:b4:07:ad:42:44:f7:80:ea:
                    10:5d:c3:6a:c0:98:c2:2c:89:c9:fc:71:0f:56:12:
                    da:48:37:e7:5a:84:d5:60:5c:cd:1a:1e:61:de:de:
                    59:81:6d:8a:84:a0:22:c5:7a:21:cb:82:63:40:1e:
                    b9:0a:ca:55:e0:e8:bd:68:11:e5:66:a9:7e:ab:76:
                    63:2f:e0:d6:26:06:4b:03:ed:05:23:31:1d:4e:8f:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0A:BD:C2:EA:A7:70:8A:94:A3:94:03:9D:E5:EF:C6:50:39:9C:B0
            X509v3 Authority Key Identifier:
                keyid:67:83:11:3C:E3:61:99:8A:62:AF:BD:1E:B4:EB:04:42:B6:FE:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6783113CE361998A62AFBD1EB4EB0442B6FE1A19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC327AE70C3CE038519D13E87D93F5BD4F7FD56CAD95A723524209225AC1DCAC/0/323830333a3136303a3a2f33322d3332203d3e20323637393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:160::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:77:46:c9:1d:ce:30:d0:72:ba:e1:5d:99:6d:a3:cf:55:8e:
         26:a6:b2:ee:c6:72:6c:3e:f3:bb:d9:b4:e4:e7:67:d6:01:09:
         f5:a8:53:e4:b1:d8:43:11:fe:77:7e:b4:18:a9:a2:53:92:6e:
         de:aa:df:ec:a9:6b:6f:59:40:89:67:ac:25:4c:07:52:71:18:
         bf:49:24:28:a7:09:da:1d:96:2b:57:7f:d5:b2:e2:58:21:ab:
         4d:fd:a0:42:1b:76:50:b3:ee:fb:24:3c:10:16:63:86:44:c6:
         47:23:a5:e9:c0:60:26:7b:bc:b5:ca:dc:24:e9:61:79:a4:5d:
         bb:bb:72:37:77:ec:8e:cf:3b:7e:89:60:24:29:74:f7:be:6c:
         b8:de:0b:41:bf:a0:31:44:7a:35:1e:6e:54:9f:3a:3e:5e:aa:
         27:69:23:a5:eb:c2:48:aa:43:76:47:3a:f7:dd:dc:21:e2:4f:
         98:fd:cd:78:ae:a7:49:5e:2d:d5:cb:87:20:3c:7c:19:37:d7:
         ca:fe:77:a4:e7:f6:15:bc:b7:8f:63:f5:a6:4d:10:e4:a7:37:
         ae:a3:cb:f0:f6:e5:c0:95:48:eb:69:9e:c7:1b:c6:1a:09:fa:
         9b:da:d4:1a:bf:b2:80:ab:13:1d:54:f9:81:8a:4a:c3:fe:8f:
         a3:eb:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:20 2025 by rpki-client