Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/8497edc7c5531742de47dd96ce2dfa5b0630e137.roa
File:                     8497edc7c5531742de47dd96ce2dfa5b0630e137.roa (raw, json)
Hash identifier:          LKR+Jt2gOlIuSRe+wfGrLEBlSQq1Y7dSe2Rtr7UbY+I=
Subject key identifier:   66:9B:3E:34:5A:2C:9D:15:EC:A5:78:2F:C9:CC:A5:F5:B1:AD:F1:C1
Certificate issuer:       /CN=8e4c3ee07149aed63c2b3f3d9b54dcf020c26262
Certificate serial:       09CBB6
Authority key identifier: 27:E3:88:63:2E:D5:E8:EF:F2:C8:59:22:8D:F2:94:65:47:35:35:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e4c3ee07149aed63c2b3f3d9b54dcf020c26262.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/8497edc7c5531742de47dd96ce2dfa5b0630e137.roa
Signing time:             Sun 17 Sep 2023 16:10:43 +0000
ROA not before:           Sat 16 Sep 2023 16:10:43 +0000
ROA not after:            Wed 17 Sep 2025 16:10:43 +0000
asID:                     272822
IP address blocks:        2803:1490::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641974 (0x9cbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e4c3ee07149aed63c2b3f3d9b54dcf020c26262
        Validity
            Not Before: Sep 16 16:10:43 2023 GMT
            Not After : Sep 17 16:10:43 2025 GMT
        Subject: CN=8497edc7c5531742de47dd96ce2dfa5b0630e137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:c0:e1:1e:8c:ab:e5:fd:3d:46:e4:7e:58:
                    4d:7a:7f:f2:99:c4:f6:29:6c:45:cb:79:86:db:ec:
                    d2:fb:e3:88:ce:4e:dc:44:55:13:77:f3:33:17:71:
                    5f:18:ac:fd:fd:9a:3f:2b:48:65:df:5a:4e:da:91:
                    01:ad:99:f8:f5:00:b8:c2:2c:a3:47:a9:8d:77:36:
                    2d:b8:5d:c3:6d:9e:1a:95:68:29:53:e9:87:45:c5:
                    66:93:96:a2:d6:e8:d5:18:f6:b8:fd:fe:6a:9f:73:
                    16:73:11:c4:f2:76:1f:0b:32:96:19:e9:8e:39:7c:
                    0f:8d:5f:c5:1f:1e:f0:0b:cd:75:25:1c:ee:c0:2a:
                    66:4e:b1:49:f3:2c:af:01:4f:e5:88:48:77:22:a2:
                    e9:e4:d9:e4:38:37:91:ed:92:ba:b0:08:da:40:d0:
                    29:45:cf:d8:1c:44:e0:fc:1f:d8:f7:17:54:cf:32:
                    ae:ac:7d:f8:f9:05:cb:e6:47:27:ef:f4:b2:09:67:
                    69:4e:13:fb:d5:96:62:70:f5:52:b3:cf:d1:44:68:
                    51:fe:7a:82:c5:57:84:7d:51:3e:6f:e5:80:8f:90:
                    d4:b7:ce:1e:22:f3:ef:a4:ad:2f:11:df:a2:ac:bb:
                    f1:62:e5:d3:29:26:54:56:eb:b9:fb:43:72:f7:f5:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9B:3E:34:5A:2C:9D:15:EC:A5:78:2F:C9:CC:A5:F5:B1:AD:F1:C1
            X509v3 Authority Key Identifier:
                keyid:27:E3:88:63:2E:D5:E8:EF:F2:C8:59:22:8D:F2:94:65:47:35:35:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e4c3ee07149aed63c2b3f3d9b54dcf020c26262.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/8497edc7c5531742de47dd96ce2dfa5b0630e137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea4125e9-8dcd-4a52-9d05-dbf603623346/8e4c3ee07149aed63c2b3f3d9b54dcf020c26262.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:2b:4e:64:08:cd:f7:e0:18:b4:4c:00:18:51:ed:c3:00:
         71:94:6d:5b:8e:52:01:1f:cd:69:7a:d7:01:2f:46:57:41:18:
         32:87:6b:31:ef:e6:5b:a5:e1:fc:98:8a:73:18:7b:b0:f0:71:
         9a:06:e7:e4:1a:a8:60:b5:53:39:3b:ff:47:0e:4f:b0:a0:0a:
         53:2a:e0:e1:93:6d:fb:c2:16:f7:50:9d:59:02:6b:14:92:1f:
         8d:fe:93:b3:de:3c:ca:b8:a9:a6:e2:9a:c3:ba:19:a1:6f:2b:
         7d:1b:28:f1:7a:56:1f:36:c7:5c:17:ae:4a:55:e1:34:4a:f7:
         82:a9:44:7b:69:73:79:d6:04:ce:51:95:09:ed:39:b4:ab:a8:
         8c:d0:2f:5b:34:05:30:dd:2e:4a:29:9b:3a:34:13:cd:a0:e5:
         02:42:a9:91:83:4e:a2:e5:0d:69:c3:36:bc:2a:67:29:f0:da:
         57:1f:79:48:a7:24:09:03:d8:c4:98:65:8e:d4:c6:a3:bc:f1:
         e2:a9:b2:f0:37:24:cb:4a:1c:0d:fc:56:27:6b:41:a0:97:cd:
         ca:42:2b:3b:a8:a6:72:72:ff:91:79:46:e7:6c:09:f2:dd:56:
         06:74:76:86:4a:24:13:e6:95:1c:96:0f:6e:2c:79:65:6a:20:
         a8:26:f1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:27:07 2025 by rpki-client