Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0411E5B51D6D398AA47DCB331192D07B1CFCAB05F348114AC3EBEE037CC6906D/0/323830333a373931303a3a2f33322d3438203d3e20323732303135.roa
File:                     323830333a373931303a3a2f33322d3438203d3e20323732303135.roa (raw, json)
Hash identifier:          f99raS+ehNzyhYaBFkdB97gBfSEhWY0s3l4lFFpp668=
Subject key identifier:   27:51:A6:3F:60:AF:DA:B4:4C:82:63:58:4C:91:49:4D:36:33:C2:44
Certificate issuer:       /CN=242A863606E33DB06423F2258B3DBDBB1067D7B8
Certificate serial:       5DDA7CDAFEF787E648C0975AE41C5944D6EED5C1
Authority key identifier: 24:2A:86:36:06:E3:3D:B0:64:23:F2:25:8B:3D:BD:BB:10:67:D7:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/242A863606E33DB06423F2258B3DBDBB1067D7B8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0411E5B51D6D398AA47DCB331192D07B1CFCAB05F348114AC3EBEE037CC6906D/0/323830333a373931303a3a2f33322d3438203d3e20323732303135.roa
Signing time:             Tue 05 Mar 2024 17:59:36 +0000
ROA not before:           Tue 05 Mar 2024 17:54:36 +0000
ROA not after:            Tue 04 Mar 2025 17:59:36 +0000
asID:                     272015
IP address blocks:        2803:7910::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:da:7c:da:fe:f7:87:e6:48:c0:97:5a:e4:1c:59:44:d6:ee:d5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=242A863606E33DB06423F2258B3DBDBB1067D7B8
        Validity
            Not Before: Mar  5 17:54:36 2024 GMT
            Not After : Mar  4 17:59:36 2025 GMT
        Subject: CN=2751A63F60AFDAB44C8263584C91494D3633C244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:58:dc:6b:08:ee:5e:14:9e:fe:1a:d2:2b:
                    7b:6c:1b:4a:87:a0:63:a6:0e:b9:99:09:3d:5f:b3:
                    e7:3b:54:8f:99:68:69:c6:a0:c1:43:c0:7c:7f:a3:
                    30:aa:51:6c:99:85:3e:fb:25:e8:c5:ad:2f:22:7b:
                    f9:e1:63:e9:84:60:6e:fd:cb:ac:fd:f8:41:9d:f4:
                    15:5e:20:dd:cd:96:4f:1d:51:d1:15:a8:57:fe:c0:
                    84:10:58:b7:41:a9:ae:99:9d:ec:12:23:20:7f:61:
                    8d:35:e8:09:6e:76:46:0d:68:a9:aa:e7:0d:80:76:
                    f8:c7:86:eb:ae:0a:dc:47:c0:b2:b9:32:75:0d:0f:
                    54:ea:0a:d6:3a:b5:1b:dc:80:63:08:cc:bd:8e:99:
                    9c:5b:82:ae:c8:43:b1:5f:16:1d:bf:e6:92:50:63:
                    89:03:74:4b:02:7c:42:d4:a3:1f:92:ba:d0:d2:96:
                    ed:22:05:a3:1b:74:07:ea:20:bd:6b:b5:c8:69:9d:
                    ac:66:22:2c:fb:df:aa:d5:dd:a0:0b:72:ea:9d:81:
                    3d:86:fc:96:25:dd:42:5d:71:32:b1:4a:57:1a:17:
                    d5:f9:cc:a5:0b:98:1e:ef:e7:d5:81:30:d6:e8:fd:
                    1b:1a:69:b2:83:2e:63:0f:da:5e:e1:c3:1c:2d:72:
                    0d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:51:A6:3F:60:AF:DA:B4:4C:82:63:58:4C:91:49:4D:36:33:C2:44
            X509v3 Authority Key Identifier:
                keyid:24:2A:86:36:06:E3:3D:B0:64:23:F2:25:8B:3D:BD:BB:10:67:D7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0411E5B51D6D398AA47DCB331192D07B1CFCAB05F348114AC3EBEE037CC6906D/0/242A863606E33DB06423F2258B3DBDBB1067D7B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/242A863606E33DB06423F2258B3DBDBB1067D7B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0411E5B51D6D398AA47DCB331192D07B1CFCAB05F348114AC3EBEE037CC6906D/0/323830333a373931303a3a2f33322d3438203d3e20323732303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7910::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:94:0e:8a:e8:3e:29:4d:de:8a:22:9f:1f:d9:40:3f:a5:7b:
         d5:03:0d:53:20:e4:52:b5:52:cc:0c:e7:4c:27:64:3a:4c:8a:
         b4:98:b5:2a:8b:97:f5:33:6c:c7:8e:1c:20:77:c9:7a:33:11:
         10:9d:dc:75:da:e5:3c:6a:14:96:bc:70:30:a2:85:0d:f7:8e:
         07:6f:97:6f:ac:48:4d:7e:56:76:13:26:6a:3e:a0:2d:cf:89:
         d8:78:cd:ea:4f:32:47:81:ea:74:50:4a:02:35:40:53:3e:40:
         3e:56:5e:c2:bc:24:8c:63:a2:24:d3:15:db:25:99:03:50:a3:
         ce:9f:04:24:dd:30:86:e0:a5:fe:ef:a6:08:cd:30:02:0d:17:
         8c:f0:68:23:2e:39:7f:a1:a2:a7:32:ef:70:e2:c1:3d:19:96:
         5d:c1:a2:24:7f:ac:2c:86:df:80:85:41:bb:2c:39:55:83:de:
         2e:e8:70:85:80:d3:e2:d5:91:94:1a:0b:07:22:35:fb:58:66:
         19:c9:04:cd:79:13:e7:5d:4c:72:de:c1:e3:99:05:3d:66:57:
         78:f0:fa:9a:f0:04:3c:70:66:a8:62:7a:35:1d:1d:b6:d0:e4:
         1e:02:e6:84:df:4b:1b:bf:3c:ea:19:a9:1f:d4:b9:7b:a5:f3:
         96:a1:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:53:39 2025 by rpki-client