Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/323830333a653365303a3a2f33322d3438203d3e20323730303731.roa
File:                     323830333a653365303a3a2f33322d3438203d3e20323730303731.roa (raw, json)
Hash identifier:          pOp4tTAM3XlH+7vTYHniPdyc6bdE0T6cDyWPhftTOP0=
Subject key identifier:   9B:59:08:D7:74:45:CB:10:06:38:3B:6A:73:EA:7D:C7:0A:4A:88:47
Certificate issuer:       /CN=B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD
Certificate serial:       79CA5A5C605BA9CD5067EA3AB7C4380B39FFB090
Authority key identifier: B6:4A:BC:9E:C2:FC:C9:8F:57:7C:88:A6:0C:99:C3:5E:D7:96:3F:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/323830333a653365303a3a2f33322d3438203d3e20323730303731.roa
Signing time:             Tue 04 Feb 2025 18:34:47 +0000
ROA not before:           Tue 04 Feb 2025 18:29:47 +0000
ROA not after:            Tue 03 Feb 2026 18:34:47 +0000
asID:                     270071
IP address blocks:        2803:e3e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ca:5a:5c:60:5b:a9:cd:50:67:ea:3a:b7:c4:38:0b:39:ff:b0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD
        Validity
            Not Before: Feb  4 18:29:47 2025 GMT
            Not After : Feb  3 18:34:47 2026 GMT
        Subject: CN=9B5908D77445CB1006383B6A73EA7DC70A4A8847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:21:9d:46:91:2b:05:70:0a:42:ed:3b:60:
                    05:a6:85:09:ef:88:20:41:be:fe:01:79:a8:05:8c:
                    44:f8:34:5c:f0:b7:46:c5:7a:ee:3a:45:51:f1:e1:
                    51:21:3c:f9:2b:bf:9d:4e:3a:b4:c3:7f:95:d7:36:
                    86:c4:1e:b6:8c:66:4a:c8:35:75:8c:85:c5:f2:23:
                    0c:01:ff:1e:48:f7:f5:d8:c6:40:13:27:bd:f1:1e:
                    b3:00:18:00:35:ad:d4:fe:42:53:5f:84:c0:84:85:
                    8b:46:ab:7a:d4:24:9a:e7:0f:94:68:48:f7:84:7c:
                    81:f1:a0:e9:f3:3a:08:96:62:15:41:aa:f4:5c:52:
                    40:f6:11:9e:89:ea:0f:f3:6a:64:2e:4d:8d:3c:23:
                    d5:76:35:6d:3a:6c:15:fb:c5:c9:c1:61:f7:9c:a8:
                    89:44:00:71:64:3c:42:91:7e:0c:9a:bd:d3:f9:6e:
                    3e:43:34:f5:0e:47:51:7b:4a:65:ff:3d:2c:48:31:
                    cc:f3:ca:4a:24:82:ff:8e:c6:26:05:f3:50:89:56:
                    85:4c:42:c3:a9:58:5f:b0:4a:e0:25:21:a0:40:d3:
                    c3:3a:7a:74:0f:a8:5c:f2:df:3c:92:ca:35:0b:ca:
                    5a:13:f5:93:1e:62:e4:df:3f:47:04:36:fe:43:a1:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:59:08:D7:74:45:CB:10:06:38:3B:6A:73:EA:7D:C7:0A:4A:88:47
            X509v3 Authority Key Identifier:
                keyid:B6:4A:BC:9E:C2:FC:C9:8F:57:7C:88:A6:0C:99:C3:5E:D7:96:3F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B64ABC9EC2FCC98F577C88A60C99C35ED7963FDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE5CE9D83F5AEAC43A176CC43B0D5F729D7EC235B9CC8FFD03AE2AD5B6797034/0/323830333a653365303a3a2f33322d3438203d3e20323730303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:e3:33:d5:49:92:e7:b3:c0:0c:e2:e2:c7:e0:5f:b6:1a:69:
         8b:81:88:49:c5:e0:15:9c:f1:80:15:89:a1:74:a1:be:7a:90:
         04:2d:58:6f:59:e9:43:16:48:36:ff:1a:de:21:c5:c9:7c:9f:
         ea:d9:58:94:2f:52:3e:2f:df:99:dd:8a:e6:58:9d:f2:47:c5:
         40:3a:64:00:c3:22:d8:77:7e:a2:1e:ae:69:73:01:c9:d7:03:
         d7:60:03:aa:ce:54:74:a8:72:cf:e5:2c:ec:2e:eb:ba:46:b4:
         95:1f:67:15:52:1f:91:d3:65:ca:48:ea:ca:74:43:fc:a9:87:
         80:2e:98:60:3f:46:00:88:b0:05:8b:d0:ab:ba:91:20:53:e4:
         ce:4d:44:bc:11:b3:9e:73:ee:7e:ba:f4:eb:50:13:41:ff:c7:
         12:fa:d1:a0:51:52:bc:6e:4f:30:f3:73:6c:cb:a9:2c:b6:8f:
         4a:b7:db:27:33:92:e7:f3:2f:b9:54:df:98:2f:e3:03:70:72:
         a1:83:77:7f:c7:76:c5:7c:18:cf:9f:23:e9:fb:3d:72:f1:28:
         4b:a7:e4:91:8e:6b:1f:d9:04:b0:5f:37:ab:a1:ec:fc:1a:11:
         31:e3:f0:92:a6:3c:58:f8:f8:79:a2:92:27:0a:aa:f1:3f:b3:
         0f:63:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:20:40 2025 by rpki-client