Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa
File:                     323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa (raw, json)
Hash identifier:          f2WMtnJcip4SOUR1dAB/ghEChZhy333IUo7PYptya60=
Subject key identifier:   63:F1:02:0B:7A:C3:49:06:02:AE:75:09:D8:5D:11:F3:44:7F:EA:19
Certificate issuer:       /CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74
Certificate serial:       7B650E3C9AE2215F79B96A5C8AB78CBA8DE45A56
Authority key identifier: 9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa
Signing time:             Tue 04 Feb 2025 20:08:19 +0000
ROA not before:           Tue 04 Feb 2025 20:03:19 +0000
ROA not after:            Tue 03 Feb 2026 20:08:19 +0000
asID:                     272146
IP address blocks:        2803:d090:6000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:65:0e:3c:9a:e2:21:5f:79:b9:6a:5c:8a:b7:8c:ba:8d:e4:5a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DD9516C68A02C8980F9233ABACD9834C7C37C74
        Validity
            Not Before: Feb  4 20:03:19 2025 GMT
            Not After : Feb  3 20:08:19 2026 GMT
        Subject: CN=63F1020B7AC3490602AE7509D85D11F3447FEA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:3d:f6:a5:78:60:03:40:73:84:71:ae:bf:
                    33:a7:22:97:f5:a4:97:14:4f:8e:48:3e:53:ee:f0:
                    c0:21:6b:fc:f7:c6:54:93:7c:18:9a:7d:34:6a:f7:
                    be:44:3b:46:9c:af:1b:37:72:ce:b6:95:44:41:d3:
                    66:0a:74:8c:21:88:45:41:4a:88:70:70:61:79:a2:
                    e6:4b:37:b1:9f:25:e4:91:45:ea:70:f2:9d:c7:d8:
                    83:4f:0e:c1:4b:5a:3b:ec:f2:da:6d:4e:df:64:2e:
                    56:d1:77:10:16:81:bb:1e:b3:44:82:02:1a:70:4f:
                    c5:68:5b:6f:3b:bf:94:de:8d:a0:b1:05:8c:f7:ea:
                    36:98:49:85:b4:00:ed:a2:25:23:a3:5d:13:3b:4a:
                    49:c4:e1:71:13:fb:69:12:d6:19:41:ec:2b:71:e1:
                    30:14:43:cd:5d:5e:4b:9e:32:05:00:0d:21:7f:82:
                    f0:e5:7e:e8:65:1d:39:8c:80:41:3d:a8:7b:ea:89:
                    a5:e4:59:df:c6:bc:00:96:a5:47:9c:d2:f8:f5:fc:
                    ae:d7:45:22:2a:46:7b:04:21:ae:f4:cf:0e:31:3c:
                    ba:67:5d:7a:b3:ab:75:dd:36:80:b8:e4:5d:cd:b8:
                    79:37:a4:cd:8d:e7:fd:b3:b4:81:74:49:ea:bb:9c:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F1:02:0B:7A:C3:49:06:02:AE:75:09:D8:5D:11:F3:44:7F:EA:19
            X509v3 Authority Key Identifier:
                keyid:9D:D9:51:6C:68:A0:2C:89:80:F9:23:3A:BA:CD:98:34:C7:C3:7C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DD9516C68A02C8980F9233ABACD9834C7C37C74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/056D24A09D4C63A630D6C46D9A5E97EA8025D6703BF5C059AC1F19F073C2483F/0/323830333a643039303a363030303a3a2f33362d3336203d3e20323732313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d090:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9e:93:1b:c6:f5:e4:34:a6:50:91:f1:48:dc:90:cb:4c:7e:44:
         75:ac:11:a4:ed:3b:eb:bc:21:6b:e0:a8:17:f4:b9:c1:13:2b:
         d5:f2:45:05:a7:32:92:76:4c:1f:03:fe:fc:02:55:d1:10:8c:
         c6:27:97:ea:12:3d:15:50:c5:e4:68:85:31:bd:c4:aa:51:78:
         56:9c:3e:ee:59:5b:be:a9:46:4e:80:7f:72:0c:b3:d2:02:42:
         1b:83:91:de:b0:52:fe:e3:85:af:ab:4a:f9:fe:38:1d:c2:23:
         0c:1e:9c:37:99:9b:a7:a1:b3:73:1c:b2:30:4b:4a:93:da:af:
         89:e6:51:bc:16:a1:b9:79:58:c6:c2:5f:f9:8a:c5:10:8f:9a:
         43:59:6f:34:d8:6c:37:f3:f4:86:97:68:34:44:87:bf:3f:e4:
         84:60:da:4b:1d:11:2e:69:92:47:46:d5:82:a4:e4:29:0a:22:
         1a:29:e7:03:50:88:fe:8c:02:cc:ee:46:0c:18:fd:2c:28:b4:
         39:d3:83:22:e0:6d:e6:52:c6:37:98:be:9a:ae:8d:38:26:65:
         49:73:04:11:ac:a3:2d:fe:dd:21:2b:f2:70:12:ca:35:55:bb:
         9e:e0:ac:f2:21:88:22:44:57:f9:93:17:cd:a0:41:15:50:45:
         33:97:29:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:53:07 2025 by rpki-client