Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/0b53bc3404be7be5235873c7ab15c36125e84e99.roa
File:                     0b53bc3404be7be5235873c7ab15c36125e84e99.roa (raw, json)
Hash identifier:          G5NWHyorZAlZlQDmzKphNTRajzC2P4Z+lpbCzvJbGFA=
Subject key identifier:   5E:A8:A9:E3:76:79:7B:9D:9E:CB:3D:77:08:24:FA:4E:48:5D:9B:6D
Certificate issuer:       /CN=2dc2f56aba4f2885de86b98a40999ce82d8d0cef
Certificate serial:       01CD36
Authority key identifier: 09:F1:6E:C4:91:A3:4A:BB:1B:1D:2F:74:BD:23:8C:18:98:D8:2A:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dc2f56aba4f2885de86b98a40999ce82d8d0cef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/0b53bc3404be7be5235873c7ab15c36125e84e99.roa
Signing time:             Mon 29 Jan 2024 17:13:03 +0000
ROA not before:           Mon 29 Jan 2024 17:13:03 +0000
ROA not after:            Thu 29 Jan 2026 17:13:03 +0000
asID:                     273131
IP address blocks:        2803:e450::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118070 (0x1cd36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dc2f56aba4f2885de86b98a40999ce82d8d0cef
        Validity
            Not Before: Jan 29 17:13:03 2024 GMT
            Not After : Jan 29 17:13:03 2026 GMT
        Subject: CN=0b53bc3404be7be5235873c7ab15c36125e84e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:b9:91:5f:e8:4b:4c:63:46:66:1d:e6:c2:
                    48:90:e0:e3:60:fa:a8:4f:9d:dd:b2:9e:89:9e:b0:
                    ea:6d:b8:1c:3a:de:ad:1b:69:0e:a7:b4:1f:d1:24:
                    5a:66:56:00:c5:30:1c:c3:9a:48:85:56:3f:ff:49:
                    79:6a:ea:75:31:78:e9:ef:73:33:92:c0:16:d2:34:
                    6e:0d:5b:8d:3e:db:f0:0d:37:15:2f:09:7a:51:8c:
                    9f:bf:69:be:07:4e:3a:b2:f4:bf:b7:cd:ac:d2:32:
                    d0:40:69:27:97:b1:a9:b7:ee:79:23:8d:69:bc:6b:
                    0d:b0:70:9d:24:9a:96:7d:02:79:4e:4c:f5:3a:cd:
                    83:91:bc:96:81:26:80:06:6b:f7:5a:5c:2e:64:b8:
                    29:2e:ac:17:4f:0d:2d:c4:b2:02:d3:be:9d:52:20:
                    b8:62:6d:23:f0:2c:ef:ff:bf:47:e0:e1:88:21:d7:
                    ae:a2:d2:07:99:6c:52:2f:d9:bf:f0:7c:a4:5d:63:
                    00:91:45:37:37:66:63:c5:82:74:dc:1a:a7:ac:fb:
                    ec:df:bf:ba:6b:46:c6:48:14:58:91:98:ae:d7:a2:
                    25:a7:cb:8a:72:4e:44:03:75:75:6d:6c:20:22:b1:
                    d8:c6:9c:0f:e2:01:78:19:16:1d:1e:e8:f6:d4:bb:
                    bf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A8:A9:E3:76:79:7B:9D:9E:CB:3D:77:08:24:FA:4E:48:5D:9B:6D
            X509v3 Authority Key Identifier:
                keyid:09:F1:6E:C4:91:A3:4A:BB:1B:1D:2F:74:BD:23:8C:18:98:D8:2A:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dc2f56aba4f2885de86b98a40999ce82d8d0cef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/0b53bc3404be7be5235873c7ab15c36125e84e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/2dc2f56aba4f2885de86b98a40999ce82d8d0cef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e450::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:f2:43:38:e7:88:4a:31:c1:fe:7d:d8:f6:3c:24:39:c4:18:
         7c:e2:6d:f7:d5:13:e0:50:29:7e:6c:8b:dd:fc:bc:00:4e:98:
         11:1a:93:14:99:4d:87:b7:35:1e:87:ca:a1:b8:f4:ab:f9:92:
         6d:c4:f2:55:8d:49:6c:dc:8a:67:b3:31:9e:1b:26:d0:3b:1f:
         14:e8:5a:44:71:26:91:59:e6:01:14:02:52:36:f9:1d:c0:01:
         a8:f4:2c:22:a2:46:c7:1b:a6:a9:60:96:42:a1:72:be:1f:ac:
         f8:4e:f0:f7:3c:5a:eb:68:12:d8:a6:71:8c:b5:3e:ad:32:82:
         0e:2d:3a:1e:a7:ff:53:df:9e:54:72:2e:3d:42:5f:d3:5d:64:
         0f:9e:fb:70:23:06:1c:66:33:95:db:83:c2:a6:3b:e8:9d:55:
         ac:c8:ae:be:df:4e:09:eb:46:9a:d1:32:74:5e:91:47:ae:2b:
         9b:20:7a:d1:3e:52:8f:c2:70:4b:8b:b9:95:4b:90:ff:96:16:
         a1:be:f8:1b:a6:e5:60:bb:52:47:62:d4:56:39:12:33:56:14:
         a2:ec:2b:a4:04:49:96:46:d1:56:1c:7d:73:da:6f:65:b3:47:
         e5:d4:e7:b5:4f:c2:60:ea:a5:a3:33:ce:de:19:79:4c:a9:09:
         91:e7:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:36 2025 by rpki-client